Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/dVcjyZSUsZpbQKcsF0kzL9yxQQI.roa
File: dVcjyZSUsZpbQKcsF0kzL9yxQQI.roa (raw, json)
Hash identifier: QANSJVhYnxUoBIX1GTVem8o64yAiDEqFXmZpx88XGwE=
Subject key identifier: 75:57:23:C9:94:94:B1:9A:5B:40:A7:2C:17:49:33:2F:DC:B1:41:02
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A05CD848D507682CFD0EB1C1D886DB3D2C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/dVcjyZSUsZpbQKcsF0kzL9yxQQI.roa
Signing time: Tue 01 Sep 2026 12:01:13 +0000
ROA not before: Tue 01 Sep 2026 12:01:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 62.105.194.0/24 maxlen: 24
62.105.198.0/24 maxlen: 24
77.67.49.0/24 maxlen: 24
194.122.79.0/24 maxlen: 24
194.122.85.0/24 maxlen: 24
212.189.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:d8:48:d5:07:68:2c:fd:0e:b1:c1:d8:86:db:3d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 1 12:01:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=755723c99494b19a5b40a72c1749332fdcb14102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:1e:0b:2d:3e:a4:3b:cd:5a:c1:51:93:93:
ca:91:0b:59:7e:c5:d9:58:57:6e:a3:d4:48:7e:47:
28:0e:27:d2:a1:bc:32:d7:88:77:f8:90:af:02:08:
55:ec:1c:59:97:f4:dd:63:12:cf:34:66:e0:05:53:
4f:8c:fb:ff:f5:71:44:6f:3c:b7:9e:bd:04:5a:46:
9d:1b:da:39:5e:88:a1:9f:c8:0e:1e:fe:22:4a:46:
d0:e5:10:3b:fb:8b:ba:a4:c9:62:d6:33:c8:bd:8e:
59:82:d4:d6:72:33:f3:5e:86:01:63:05:cc:78:50:
8e:9f:ba:98:7b:a4:09:1d:0f:7b:c5:0d:be:98:5e:
7e:94:97:88:73:37:b9:4d:78:16:98:9a:38:12:95:
6b:cb:f0:b8:9c:03:e0:0c:f6:6a:ea:60:03:2b:39:
35:25:bb:9e:dc:41:07:f4:d3:70:43:fe:ec:ff:9c:
4e:cd:da:c2:d7:16:2c:83:1c:cf:5f:cd:27:e7:dc:
e7:b3:02:6e:49:2a:0d:18:3c:ce:b9:dc:de:ee:df:
03:31:fe:94:b6:24:60:96:09:9d:19:5a:2e:28:84:
3f:db:8b:cd:91:ac:63:7e:11:77:f9:6b:c0:88:47:
16:41:7a:27:16:79:73:63:8f:75:26:30:a4:d2:a9:
fc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:57:23:C9:94:94:B1:9A:5B:40:A7:2C:17:49:33:2F:DC:B1:41:02
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/dVcjyZSUsZpbQKcsF0kzL9yxQQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.194.0/24
62.105.198.0/24
77.67.49.0/24
194.122.79.0/24
194.122.85.0/24
212.189.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f7:22:f6:86:b2:80:20:3c:1b:67:9a:64:e6:3d:5c:15:b4:
c7:00:fa:d5:5f:af:9b:04:ea:84:40:93:6c:a0:fd:eb:58:fc:
ae:48:7a:d2:bf:91:ab:df:ae:16:7f:43:db:7a:87:0e:1e:b6:
3a:07:16:66:88:8e:9f:9e:c9:48:03:d1:e2:66:7d:5d:32:84:
11:97:41:aa:56:b2:d0:0d:ce:ef:9f:48:ee:65:9b:cb:1a:91:
2c:46:67:ae:62:52:05:16:67:76:43:15:ea:d3:90:44:ea:82:
6d:2c:34:c8:e6:d7:f9:ea:d2:0e:64:b4:38:82:1d:d2:a6:91:
a7:ef:29:25:fb:ef:3a:a4:1f:41:83:c3:7c:5d:20:30:a2:c1:
80:50:29:a9:0a:62:23:b7:c6:08:72:03:87:09:40:ce:ef:c9:
2b:59:da:04:8b:80:2c:da:7a:70:d9:51:67:ec:7d:41:39:b7:
2c:e7:30:ef:77:12:69:fa:22:17:92:a7:73:be:ed:fe:c7:88:
f7:6b:28:9d:af:84:32:81:9e:a8:63:34:71:31:2d:fd:9c:6a:
a0:2d:a4:b1:f7:8d:c5:f1:b2:e9:7f:2e:7a:ec:8d:89:47:2e:
b2:b7:70:93:3f:28:2e:cc:89:10:45:7c:9c:81:48:8e:c4:70:
5d:7e:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:49 2026 by rpki-client