Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fzrJcYLNUok4i2coMjDfDj1GCq8.roa
File: fzrJcYLNUok4i2coMjDfDj1GCq8.roa (raw, json)
Hash identifier: HO1MaFcPu/EIQCpD5VdVBqxN5LDNc2D9jlvmGMIU4hQ=
Subject key identifier: 7F:3A:C9:71:82:CD:52:89:38:8B:67:28:32:30:DF:0E:3D:46:0A:AF
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F33133611EA0E38937F308B70735E0975
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fzrJcYLNUok4i2coMjDfDj1GCq8.roa
Signing time: Sun 05 Jul 2026 16:18:44 +0000
ROA not before: Sun 05 Jul 2026 16:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 62.105.193.0/24 maxlen: 24
62.192.110.0/24 maxlen: 24
194.77.92.0/24 maxlen: 24
212.189.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:13:36:11:ea:0e:38:93:7f:30:8b:70:73:5e:09:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 5 16:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f3ac97182cd5289388b67283230df0e3d460aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:f8:07:5c:f7:88:7c:31:f8:39:e3:86:e6:
aa:93:fd:78:91:2c:39:ad:29:da:43:e0:55:22:b9:
95:8b:9c:0a:8b:ec:18:10:f3:2d:ec:c0:a4:99:f4:
8d:59:8f:bc:c8:7c:c1:3f:25:f2:9f:6d:ce:12:a6:
ee:c2:72:11:5a:f1:29:48:1c:88:bc:ea:4d:47:e2:
1a:6e:ae:b4:7a:79:13:d9:f4:8a:72:a7:3b:a3:43:
0f:fc:8a:a7:18:21:0a:3d:cd:0c:98:ce:01:0e:ca:
5d:57:c7:73:04:b7:34:f5:b7:cc:12:57:8a:1c:e9:
c7:ee:1a:97:30:c7:5a:e5:16:14:7e:f0:18:e0:02:
ba:23:d5:b8:7e:0a:f7:d0:71:3d:21:9a:63:ac:48:
7f:2d:4f:ab:6e:a4:97:49:84:1d:f2:6c:27:d2:c0:
53:82:a7:57:f5:3d:44:83:4e:20:7a:ce:10:48:ba:
40:6e:19:0e:d1:bb:85:eb:9a:4e:4c:f8:a8:9d:3f:
d5:c3:2c:b3:db:b5:09:bc:c3:9e:df:e5:40:fc:78:
94:d8:80:d0:62:2b:c9:0c:f4:19:b4:64:89:04:63:
ab:33:15:33:9b:62:13:b8:3d:4a:78:5f:71:0f:be:
d3:fc:0e:ab:8f:01:f4:80:3b:c3:5f:20:0f:d1:87:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3A:C9:71:82:CD:52:89:38:8B:67:28:32:30:DF:0E:3D:46:0A:AF
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fzrJcYLNUok4i2coMjDfDj1GCq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.193.0/24
62.192.110.0/24
194.77.92.0/24
212.189.113.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ac:aa:d6:0f:ba:2e:8c:d6:3e:b7:02:9d:62:d2:98:5e:2d:
8d:f7:c2:c6:01:4e:28:d5:1b:03:d0:c0:ff:51:c1:c4:69:5f:
3c:28:99:8b:b9:01:b6:64:3e:ff:61:82:0f:62:0c:c2:bb:05:
94:cd:20:7e:ee:4f:fa:00:b6:86:85:80:ad:08:61:e1:ce:e2:
e2:5b:1f:90:ce:ce:93:ee:f7:ef:e3:49:60:ed:2d:56:44:d8:
7d:3b:68:5a:37:c6:22:50:24:7f:36:10:9a:44:fc:a0:a9:dc:
9f:7a:e9:75:b7:b1:07:43:73:b6:65:70:39:be:24:7d:b4:c1:
ec:a7:38:77:4a:19:c1:db:31:ec:88:95:ef:13:91:19:8f:82:
12:ad:97:9c:e8:9a:c9:7a:22:cc:e6:bf:c7:74:6b:12:12:b1:
53:26:85:3c:18:9b:0e:33:18:2e:eb:ac:50:6a:e9:b3:bb:c6:
e5:62:18:fa:8a:33:55:33:69:16:8d:4e:2a:24:75:97:ba:1d:
04:d2:19:ab:94:13:a0:c6:ea:4f:48:31:55:dd:b8:e1:fa:30:
31:fa:eb:ac:ac:f3:8a:b5:77:64:8b:3e:97:b9:4a:a1:1b:02:
49:e7:e5:24:87:21:9e:2f:ce:87:e8:95:e8:44:01:0b:74:99:
79:69:d3:f5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ8zEzYR6g44k38wi3BzXgl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNzA1MTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjNhYzk3MTgyY2Q1Mjg5Mzg4YjY3MjgzMjMwZGYwZTNkNDYwYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04P4B1z3iHwx+Dnjhuaqk/14kSw5
rSnaQ+BVIrmVi5wKi+wYEPMt7MCkmfSNWY+8yHzBPyXyn23OEqbuwnIRWvEpSByI
vOpNR+Iabq60enkT2fSKcqc7o0MP/IqnGCEKPc0MmM4BDspdV8dzBLc09bfMEleK
HOnH7hqXMMda5RYUfvAY4AK6I9W4fgr30HE9IZpjrEh/LU+rbqSXSYQd8mwn0sBT
gqdX9T1Eg04ges4QSLpAbhkO0buF65pOTPionT/Vwyyz27UJvMOe3+VA/HiU2IDQ
YivJDPQZtGSJBGOrMxUzm2ITuD1KeF9xD77T/A6rjwH0gDvDXyAP0Yef+wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFH86yXGCzVKJOItnKDIw3w49RgqvMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvZnpySmNZTE5Vb2s0aTJjb01qRGZEajFHQ3E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPmnBAwQA
PsBuAwQAwk1cAwQA1L1xMA0GCSqGSIb3DQEBCwUAA4IBAQCKrKrWD7oujNY+twKd
YtKYXi2N98LGAU4o1RsD0MD/UcHEaV88KJmLuQG2ZD7/YYIPYgzCuwWUzSB+7k/6
ALaGhYCtCGHhzuLiWx+Qzs6T7vfv40lg7S1WRNh9O2haN8YiUCR/NhCaRPygqdyf
eul1t7EHQ3O2ZXA5viR9tMHspzh3ShnB2zHsiJXvE5EZj4ISrZec6JrJeiLM5r/H
dGsSErFTJoU8GJsOMxgu66xQaumzu8blYhj6ijNVM2kWjU4qJHWXuh0E0hmrlBOg
xupPSDFV3bjh+jAx+uusrPOKtXdkiz6XuUqhGwJJ5+UkhyGeL86H6JXoRAELdJl5
adP1
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:27 2026 by rpki-client