Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hGcFspd61G55oi5H3_5vpg0EGho.roa
File: hGcFspd61G55oi5H3_5vpg0EGho.roa (raw, json)
Hash identifier: Ypcc+JslWuf0R1tkThbOlBeyznlzTnq9rBoX5+SsZAw=
Subject key identifier: 84:67:05:B2:97:7A:D4:6E:79:A2:2E:47:DF:FE:6F:A6:0D:04:1A:1A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A166100F4B11E49F2B316FBF9E45D9B2C0
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hGcFspd61G55oi5H3_5vpg0EGho.roa
Signing time: Fri 23 Oct 2026 00:01:30 +0000
ROA not before: Fri 23 Oct 2026 00:01:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 62.41.27.0/24 maxlen: 24
77.67.6.0/24 maxlen: 24
194.77.60.0/23 maxlen: 24
195.21.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 05:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:10:0f:4b:11:e4:9f:2b:31:6f:bf:9e:45:d9:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 23 00:01:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=846705b2977ad46e79a22e47dffe6fa60d041a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:36:be:35:ab:ac:27:a4:9a:8b:c7:1e:6f:
b8:ff:b9:d7:cf:a9:87:22:a1:21:d2:58:43:19:7b:
c1:e6:c8:33:b5:15:a9:a3:7a:31:09:80:29:c9:09:
90:c6:42:2b:fc:dd:e1:1d:07:f3:ea:1a:5b:d2:77:
da:50:e0:a1:32:43:a2:fb:24:c8:6c:ee:68:8f:4d:
b1:43:85:fe:71:61:29:06:d7:3b:9d:2e:34:62:bb:
87:f7:9e:e5:7d:e4:30:aa:34:20:27:33:ef:8a:a8:
1f:a8:14:be:f2:12:bf:1b:9c:19:04:c6:80:44:0e:
91:27:ab:64:12:09:b3:fb:68:06:65:0e:3f:22:8b:
d0:5b:67:04:cf:b1:64:b8:29:9e:30:9f:ff:f3:e6:
ea:61:69:4a:fd:6d:5e:9b:db:2f:a6:5f:1d:1c:f0:
24:5b:c2:88:e2:e4:52:47:9d:fb:ab:be:db:ef:77:
09:70:f0:4a:d6:d8:78:cc:70:7d:8d:4b:66:5e:cb:
65:39:0a:44:4c:ba:22:eb:fd:99:5d:ee:03:4a:30:
05:bb:96:c1:8b:dc:1e:f5:59:11:11:59:43:b2:90:
8f:e8:2d:9c:19:27:0b:a9:d8:98:e2:d8:09:23:56:
ae:66:6c:3f:da:cf:c8:e7:78:81:9a:76:d5:60:d9:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:67:05:B2:97:7A:D4:6E:79:A2:2E:47:DF:FE:6F:A6:0D:04:1A:1A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hGcFspd61G55oi5H3_5vpg0EGho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.27.0/24
77.67.6.0/24
194.77.60.0/23
195.21.147.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:75:ef:18:06:52:2e:ad:91:ca:01:79:57:04:b7:71:2b:5b:
08:31:a2:71:77:d6:e5:73:c6:5d:bf:71:74:39:fd:ef:a6:a8:
19:83:0f:30:e2:ce:db:a1:52:aa:a5:06:60:04:79:8a:56:0a:
26:81:5d:46:bd:41:64:6a:79:7d:f7:a1:81:3a:44:8f:89:e7:
00:db:56:1c:d6:f7:a2:42:04:12:1f:11:ff:11:6d:02:cc:e9:
b6:da:e2:71:0e:8d:42:eb:dd:67:c3:ec:a7:f9:17:7d:4a:47:
4f:bd:c0:c6:fe:2c:1b:eb:a8:76:b7:c0:d3:7a:67:9b:04:85:
3d:fe:de:ea:3a:5b:0d:21:d3:b3:6c:f9:7a:8f:0e:4e:f5:b8:
e1:21:62:34:d5:c9:cc:f0:cd:3c:08:68:7b:13:ce:65:8e:e7:
72:27:fc:57:4b:75:e8:c7:cd:f6:ba:f6:04:34:05:3a:36:ef:
cd:cc:21:28:13:76:fa:7f:5d:74:8c:b4:c5:e3:d1:37:47:43:
ec:fa:7e:c7:94:77:ce:ec:6f:17:1d:bb:78:3f:50:2e:5b:18:
6e:4e:28:83:e7:ec:bc:34:29:67:6d:ad:86:73:bb:e4:68:94:
97:8b:83:f7:8a:53:f7:3e:60:e9:dc:99:20:c7:5f:34:41:00:
c0:ab:4e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 16:11:27 2026 by rpki-client