Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/e01_o6yRUk1LQuOoejS_7sgFphw.roa
File: e01_o6yRUk1LQuOoejS_7sgFphw.roa (raw, json)
Hash identifier: 6F0eTeVtg28HZHGIvfkDWvAFeq6PcCo6MBnt34JlXvI=
Subject key identifier: 7B:4D:7F:A3:AC:91:52:4D:4B:42:E3:A8:7A:34:BF:EE:C8:05:A6:1C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A155AF6032EB184B041542364C3E8F278D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/e01_o6yRUk1LQuOoejS_7sgFphw.roa
Signing time: Mon 19 Oct 2026 19:41:59 +0000
ROA not before: Mon 19 Oct 2026 19:41:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 62.105.194.0/24 maxlen: 24
212.189.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:af:60:32:eb:18:4b:04:15:42:36:4c:3e:8f:27:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 19 19:41:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b4d7fa3ac91524d4b42e3a87a34bfeec805a61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:1d:ad:40:09:48:87:2d:bf:60:70:85:91:
53:7f:4e:7d:b8:2c:4a:25:5f:62:0d:51:86:24:21:
e6:52:10:0f:37:99:e1:04:e9:12:e6:4d:53:33:76:
55:1a:68:a7:27:20:45:72:f4:b4:7c:fe:16:aa:ee:
a9:48:05:3f:be:a6:74:4c:7a:38:f7:f1:6b:77:a7:
81:67:33:1e:44:ee:25:60:16:00:5d:57:e7:de:fa:
03:7c:d2:10:60:bf:16:41:39:31:24:2f:51:6f:9e:
03:56:e8:18:8e:0e:d2:44:bf:cd:a5:b7:f3:20:8b:
7a:88:fb:de:29:48:6d:09:43:86:50:09:7b:84:5d:
0f:c7:bf:15:16:56:a7:fe:86:10:64:eb:10:ba:4b:
89:bb:06:9c:2a:d4:b1:a1:4e:4e:71:d0:69:28:1f:
5b:90:f4:98:ec:c3:57:96:da:73:67:af:0e:44:44:
21:4d:51:f6:ff:5c:bb:e7:58:0e:fe:06:62:a8:69:
3f:27:0a:0f:95:96:61:59:b0:b7:43:e4:c4:8f:b6:
aa:3d:01:85:c0:17:d9:fe:4c:6f:07:ac:fa:32:bc:
33:49:43:cd:2a:14:dd:eb:1f:34:4e:54:3f:6a:36:
46:ac:e3:4f:ab:78:65:53:60:f4:60:94:df:24:ae:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4D:7F:A3:AC:91:52:4D:4B:42:E3:A8:7A:34:BF:EE:C8:05:A6:1C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/e01_o6yRUk1LQuOoejS_7sgFphw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.194.0/24
212.189.70.0/23
Signature Algorithm: sha256WithRSAEncryption
72:10:5c:99:c7:b4:de:75:a7:b5:3d:e9:3a:e8:85:32:f8:e9:
ec:aa:2f:28:b3:07:89:5e:d7:1e:56:a0:ec:2a:76:01:5c:80:
95:09:2b:b3:2d:a5:ce:02:59:b4:8e:55:53:46:2a:c5:ae:17:
2e:bd:72:63:2d:d3:f6:cc:6b:93:34:76:e3:cf:0a:04:4d:c9:
40:66:97:c5:50:b0:ef:06:7c:ab:3b:9b:e3:8a:25:0a:f3:c1:
86:28:3a:1d:e6:7d:78:03:eb:ec:66:f6:a7:1a:f1:ab:b9:ab:
9f:73:d0:8b:c8:dc:fd:f6:63:cd:cd:f7:0f:c7:61:b7:31:64:
96:a2:9b:e9:08:e5:f7:0c:eb:0e:69:da:13:07:02:84:8b:42:
7d:b4:fa:e6:37:54:24:d7:e4:b6:86:b7:4e:ba:8e:71:79:2e:
37:25:48:ad:8e:a5:0a:bb:6e:87:35:38:97:a6:96:d3:eb:c8:
94:67:78:b7:51:43:9a:49:e8:25:ae:cb:77:7b:a8:89:86:d2:
fc:06:ff:b7:01:1f:c9:9d:e7:87:4b:b2:36:76:c0:9b:30:1d:
ed:06:30:67:6e:46:32:a8:de:1b:ad:c8:0e:d0:24:cf:fb:5c:
b9:0d:20:ac:fd:e9:52:0d:4d:e3:b8:79:7d:c1:a1:90:95:d7:
20:f5:fa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:32:43 2026 by rpki-client