Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/l7Bkdz7hCYiut_agsH-mezA4MKY.roa
File: l7Bkdz7hCYiut_agsH-mezA4MKY.roa (raw, json)
Hash identifier: KN+JE/8KT7x+uoQWE4byDHINwVOhDxbnW+qDU9/A5Fc=
Subject key identifier: 97:B0:64:77:3E:E1:09:88:AE:B7:F6:A0:B0:7F:A6:7B:30:38:30:A6
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EF380AAEBA2BC43EEC6F6BE9CD8CF55D1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/l7Bkdz7hCYiut_agsH-mezA4MKY.roa
Signing time: Tue 23 Jun 2026 08:02:36 +0000
ROA not before: Tue 23 Jun 2026 08:02:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 62.105.193.0/24 maxlen: 24
194.77.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:80:aa:eb:a2:bc:43:ee:c6:f6:be:9c:d8:cf:55:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 23 08:02:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97b064773ee10988aeb7f6a0b07fa67b303830a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:44:63:6f:88:1d:22:ba:d8:87:af:08:73:
fe:58:53:99:1b:c4:57:61:ce:78:15:69:9b:e3:20:
73:53:46:bb:36:e6:a5:f2:7e:25:d5:59:d7:54:cf:
f9:87:5c:49:c9:89:47:41:d3:81:f6:b3:1f:f5:31:
a6:3d:b0:5d:ab:54:04:a1:da:c6:27:e1:6e:5a:33:
2f:fb:d1:3c:fb:45:1d:72:a3:0f:27:94:69:71:b0:
1c:3c:99:0a:9c:f9:e8:68:90:5b:3b:da:1e:1d:07:
d0:bd:f3:d6:55:da:7e:36:d6:6b:01:81:86:df:53:
59:7c:ab:ca:1d:e7:d1:3f:60:8d:89:d2:03:0e:3e:
f7:26:db:db:2e:18:26:ab:dc:00:cd:da:2e:a9:c5:
0d:53:6b:85:70:fa:50:32:65:8c:45:3b:3a:94:7d:
6a:23:5c:e5:69:40:7d:64:43:80:42:0a:9d:26:0e:
ae:54:df:68:4f:8d:29:7d:c4:8d:c3:ac:1f:06:c3:
80:66:37:89:c8:dd:e1:b4:1a:31:67:f5:de:30:9e:
b2:5f:e3:d3:d1:e0:0b:31:b6:64:8d:e9:28:88:1b:
7a:0f:9c:6f:a5:00:ef:68:88:5d:da:fd:80:e4:19:
f0:f0:4c:18:04:76:4f:c1:19:19:0a:96:a0:a4:f3:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B0:64:77:3E:E1:09:88:AE:B7:F6:A0:B0:7F:A6:7B:30:38:30:A6
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/l7Bkdz7hCYiut_agsH-mezA4MKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.193.0/24
194.77.92.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:65:2b:8c:b3:27:53:fb:05:6e:98:0c:81:f4:7b:77:bc:99:
35:35:69:cf:a8:ea:0e:12:2d:55:92:ef:93:7f:e7:99:0c:46:
5a:42:53:47:f5:35:8c:6b:d9:a8:db:91:23:dd:c5:15:1b:53:
98:56:5b:af:31:56:bc:f3:49:38:43:0c:91:f4:38:bd:cd:3b:
83:b3:e3:aa:54:e3:43:c8:1e:1d:0c:dc:b6:3d:f0:e2:de:64:
b4:8a:a3:ef:6b:96:85:c1:23:07:b4:8f:4b:bb:41:14:c6:92:
62:be:8c:5e:f1:b9:e3:3f:50:34:17:5b:23:ad:72:92:7b:bc:
2f:de:46:b5:b3:64:33:98:8a:08:6d:70:c2:0f:ad:25:d6:80:
03:58:8a:ff:89:9c:fe:14:fc:2a:80:b6:71:36:24:02:7c:f0:
11:7b:e5:ac:6c:c8:1a:4d:25:bc:e8:4e:5c:96:1b:3f:c7:e2:
12:99:52:44:31:55:05:2a:7d:f6:ef:a5:2b:95:56:ee:f7:7b:
a6:81:9a:ec:4c:4e:4a:b4:49:a4:82:89:bf:9a:33:3f:af:bf:
94:6f:cd:b0:7b:97:26:3d:ff:85:53:86:75:2c:fa:1a:74:46:
5b:2f:3f:d9:6e:09:c9:c6:f8:d0:b7:22:de:aa:66:5b:ec:1e:
2b:1d:77:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:23 2026 by rpki-client