Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/eIOK3veVWi0-uCJTahyDqgKdRIY.roa
File: eIOK3veVWi0-uCJTahyDqgKdRIY.roa (raw, json)
Hash identifier: Ecq5mxSuQHwbu13OwBIddMFfF/ti4n+4xHvYAL/+rjo=
Subject key identifier: 78:83:8A:DE:F7:95:5A:2D:3E:B8:22:53:6A:1C:83:AA:02:9D:44:86
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A1764529800DB502BDDE34D912E50FB8A7
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/eIOK3veVWi0-uCJTahyDqgKdRIY.roa
Signing time: Mon 26 Oct 2026 03:33:26 +0000
ROA not before: Mon 26 Oct 2026 03:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 62.105.192.0/24 maxlen: 24
77.67.28.0/24 maxlen: 24
194.77.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:45:29:80:0d:b5:02:bd:de:34:d9:12:e5:0f:b8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 26 03:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78838adef7955a2d3eb822536a1c83aa029d4486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:6f:6f:b6:56:1b:3a:b2:9c:57:3d:be:f1:
1c:c4:1a:de:0e:4a:a1:f7:8b:7f:93:25:62:25:8c:
da:5f:08:1e:c7:7d:6d:42:4d:be:f2:d0:2d:2e:f1:
37:dc:55:e6:fb:6a:11:14:fb:eb:89:bb:fb:e4:f2:
bf:94:65:4e:62:bc:33:be:2b:e3:b3:cb:46:e4:a7:
73:24:c2:5c:db:84:b0:b5:dd:7f:bd:c9:0a:10:8b:
1f:57:0f:a9:1b:c7:0e:71:1d:c5:28:a9:25:22:e4:
6e:d4:12:d8:09:ef:68:f5:45:8b:5b:bf:91:9d:a6:
e6:3a:74:eb:06:a2:7b:b6:76:45:09:cd:92:0f:60:
6d:69:5f:e0:b0:04:3b:92:11:a5:94:5e:10:ab:2e:
b1:06:e8:63:fe:17:e1:d9:ac:b1:1e:e2:5d:70:c8:
9c:f3:54:65:53:f8:76:a6:10:64:d8:79:15:80:6d:
64:0a:2b:c5:b6:98:7d:51:11:ad:0a:04:24:13:5d:
b4:ec:88:b4:97:e5:00:79:29:b7:a2:ed:80:fc:6e:
92:d9:a9:0b:f2:d2:08:0f:c8:44:a2:c8:50:4a:7b:
c9:e4:38:74:64:e7:60:52:6a:c7:08:d2:e1:12:8e:
6a:af:17:c1:64:02:e9:fe:3f:60:f6:7d:7f:e0:6e:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:83:8A:DE:F7:95:5A:2D:3E:B8:22:53:6A:1C:83:AA:02:9D:44:86
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/eIOK3veVWi0-uCJTahyDqgKdRIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.192.0/24
77.67.28.0/24
194.77.220.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f1:f8:58:23:b1:b4:0d:cf:60:7c:bd:4b:2b:61:29:26:3c:
44:70:54:f6:dc:55:b9:78:4d:02:d3:8b:9a:98:13:c0:76:04:
9d:36:fb:6f:fc:d2:20:77:12:a5:6d:0a:f9:b3:93:5f:3b:73:
7a:e7:1b:3a:80:f5:5a:ea:8d:24:e2:ad:b9:9f:d6:18:bf:7f:
ee:a9:49:58:bb:19:84:05:a5:6e:15:61:e8:39:a3:cd:7e:86:
a2:e8:65:be:c2:8a:38:32:07:07:07:33:72:93:91:a5:f8:11:
db:da:2a:25:68:3d:1b:fe:ec:c3:5d:44:0d:fe:50:1a:fb:7d:
c9:2a:19:42:3d:40:b0:bf:01:52:d0:3a:53:c5:68:e8:ad:f9:
6c:6e:c0:09:fe:70:bc:a5:c3:e5:bb:70:1c:fd:08:7b:d3:b1:
2c:eb:9a:fa:b1:21:38:4b:c5:97:2e:0b:80:88:1a:3c:34:fb:
f0:60:68:49:ff:10:3c:d3:cd:ca:2a:0f:e2:bb:b0:eb:7f:a9:
47:14:bd:68:06:90:df:85:f0:0b:4c:19:d8:99:b7:5c:4f:53:
e4:a0:e2:3b:bc:61:9d:b7:f9:73:1e:42:ec:88:26:35:74:5a:
fa:4b:e5:da:91:45:83:4b:6e:a4:60:89:bb:20:af:64:bb:90:
ae:7f:60:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:06:41 2026 by rpki-client