Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/gJw5zhv7oIkKRLbJodQ8To3u0gg.roa
File: gJw5zhv7oIkKRLbJodQ8To3u0gg.roa (raw, json)
Hash identifier: ZZz3z6LBIpR2/2p+bvwHw1f2HXiFQR/KxMoNCIV77oY=
Subject key identifier: 80:9C:39:CE:1B:FB:A0:89:0A:44:B6:C9:A1:D4:3C:4E:8D:EE:D2:08
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EC7F4D5F79FA5531B36FB0F80439FAC21
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/gJw5zhv7oIkKRLbJodQ8To3u0gg.roa
Signing time: Sun 14 Jun 2026 21:06:11 +0000
ROA not before: Sun 14 Jun 2026 21:06:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201176
IP address blocks: 62.132.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c7:f4:d5:f7:9f:a5:53:1b:36:fb:0f:80:43:9f:ac:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 14 21:06:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=809c39ce1bfba0890a44b6c9a1d43c4e8deed208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:7a:8a:ba:a5:5f:f6:40:09:83:75:9f:b7:
de:e0:d8:2d:18:37:0c:de:66:5a:59:ae:cd:11:cc:
3c:e0:f7:7c:ca:73:df:ce:8c:8a:86:58:15:a2:62:
43:1c:5a:4c:24:7c:3d:32:1c:70:5d:28:5f:86:77:
4b:ce:ab:0e:55:a6:5b:58:08:8c:61:e6:06:7d:45:
4f:d6:25:a7:f9:05:4d:92:77:6b:d4:ca:45:62:4b:
51:e3:1c:c0:1d:e2:70:9d:33:3e:97:e5:0c:f0:23:
dd:ee:be:a6:de:b0:65:2e:ab:94:49:c8:5e:01:3a:
10:97:6b:3e:59:14:59:48:6f:2b:4f:ab:ee:cd:02:
2a:be:f5:4a:f0:7d:37:47:42:80:23:61:1d:98:d8:
f5:79:15:e1:f0:05:fd:9d:80:a6:0c:5d:0f:b4:ea:
b9:e4:5c:66:78:94:49:d5:c0:64:c0:11:2e:5a:66:
89:92:33:5e:8b:a4:0c:87:7b:13:a9:86:97:96:dc:
2f:8c:cd:a9:b7:a9:64:bb:0e:67:2c:57:42:12:99:
d3:ea:f1:26:97:b0:fe:40:81:48:01:4e:54:56:76:
82:58:dd:d6:1d:af:29:1d:98:22:b3:c9:09:a8:d3:
f8:20:78:25:fe:9f:d3:5f:e6:55:03:68:54:fa:c1:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9C:39:CE:1B:FB:A0:89:0A:44:B6:C9:A1:D4:3C:4E:8D:EE:D2:08
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/gJw5zhv7oIkKRLbJodQ8To3u0gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bd:40:f6:a8:b2:8a:6d:97:1e:de:d1:40:f9:70:4d:2c:7b:
79:74:03:fa:95:1c:a5:b7:46:f0:02:28:39:67:e8:1e:f1:fa:
7a:54:28:3b:05:08:79:4e:4f:13:3b:f9:42:3e:e2:88:22:8f:
a9:33:31:25:4f:15:7e:62:1a:84:9b:a8:62:81:50:91:41:e6:
62:6a:cc:af:48:5e:18:68:1f:42:33:93:1b:e7:f4:5a:f1:f4:
4d:5d:81:24:94:c6:29:f0:42:03:6f:96:3a:79:33:d8:1d:9e:
1c:30:25:a6:4e:94:ef:42:cb:33:90:03:0f:46:03:fa:f1:f1:
b5:b0:9f:7f:73:1e:8d:97:ff:46:83:14:1a:38:b1:e6:89:4c:
64:24:29:b8:de:c4:69:39:c4:62:2a:c9:7f:13:62:d1:7d:2c:
62:30:50:e5:99:28:7c:18:b9:df:1b:4e:32:9f:a0:c5:f5:47:
24:f1:0b:5a:18:47:b6:0a:29:10:e8:af:ab:bc:95:62:34:13:
4e:98:b2:62:37:d9:2d:50:c8:ce:ab:a8:2e:3a:48:84:c1:98:
84:9c:c8:bb:74:34:8e:e8:ec:a3:de:db:d7:eb:e3:d7:d3:c8:
be:b3:67:ce:7d:e5:5c:e6:39:71:cc:59:7e:d9:3d:48:c9:80:
de:92:79:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:08 2026 by rpki-client