Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lMLneSepXQ4XTRII40d6Am8lTac.roa
File: lMLneSepXQ4XTRII40d6Am8lTac.roa (raw, json)
Hash identifier: 9/7TE4ZbBfhTew/xIZ3/GQdHkJ/zQwNXOSmQoLJma1w=
Subject key identifier: 94:C2:E7:79:27:A9:5D:0E:17:4D:12:08:E3:47:7A:02:6F:25:4D:A7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019CB911341C8688507CE27D4274C46A17DF
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lMLneSepXQ4XTRII40d6Am8lTac.roa
Signing time: Wed 04 Mar 2026 13:37:18 +0000
ROA not before: Wed 04 Mar 2026 13:37:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 62.105.210.0/23 maxlen: 23
62.105.212.0/23 maxlen: 23
62.192.98.0/23 maxlen: 23
62.192.104.0/23 maxlen: 23
62.192.116.0/23 maxlen: 23
62.192.118.0/23 maxlen: 23
213.169.216.0/23 maxlen: 23
213.169.246.0/23 maxlen: 23
213.169.250.0/23 maxlen: 23
213.169.252.0/23 maxlen: 23
217.117.168.0/22 maxlen: 22
217.117.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:11:34:1c:86:88:50:7c:e2:7d:42:74:c4:6a:17:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Mar 4 13:37:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94c2e77927a95d0e174d1208e3477a026f254da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:84:99:31:2d:14:e8:ad:d1:27:dc:20:1c:
c0:62:fb:97:11:94:9e:66:4b:2a:fa:0c:a8:b0:2c:
3e:5d:65:1f:aa:3d:83:4f:2f:99:e6:bb:83:eb:32:
59:ec:b6:c3:e5:b2:52:02:cb:cc:7f:19:57:4c:f4:
5b:96:a8:f0:96:d6:05:2a:c7:4c:13:40:17:da:e2:
48:d5:6b:b0:18:83:9b:60:d9:b3:fd:fc:c6:c6:de:
a9:d2:bc:05:93:ac:27:cd:c7:28:47:8b:53:9b:1e:
64:50:c4:6a:d7:7e:7a:7e:8d:f7:c8:de:21:ca:d1:
c7:f0:e3:71:ad:c2:41:fa:4d:f9:29:f3:7a:87:9f:
83:8f:07:fa:48:bd:23:cf:3a:7b:33:43:77:76:38:
f0:fd:c0:28:47:25:84:8e:b7:53:9d:fd:2e:27:97:
72:1d:61:6e:aa:b1:d5:d9:d9:80:db:49:5c:a2:b1:
06:bb:6c:49:0a:56:b9:71:32:bb:c3:2e:b4:07:69:
87:39:e3:13:be:7c:fd:b3:a8:64:20:03:d2:c7:b7:
3a:c7:de:64:13:28:49:57:1b:6d:3a:56:f8:1d:d7:
0d:29:c7:a5:9b:2a:86:d3:4c:ae:08:c1:ee:f4:e5:
e5:f3:8a:ee:1f:83:d1:59:7a:42:d3:a6:5a:9d:ac:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C2:E7:79:27:A9:5D:0E:17:4D:12:08:E3:47:7A:02:6F:25:4D:A7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lMLneSepXQ4XTRII40d6Am8lTac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.210.0-62.105.213.255
62.192.98.0/23
62.192.104.0/23
62.192.116.0/22
213.169.216.0/23
213.169.246.0/23
213.169.250.0-213.169.253.255
217.117.168.0/21
Signature Algorithm: sha256WithRSAEncryption
05:d4:43:02:46:3b:c8:9c:8c:1d:d2:d3:58:d1:1e:eb:a6:9a:
d7:5a:01:62:45:ef:b9:51:14:dc:4f:70:65:ba:23:a3:95:d8:
ff:98:1c:56:48:48:53:3d:d9:a0:b9:26:b7:6b:48:9d:d7:30:
43:3c:09:03:0c:6c:fc:31:0f:f4:c9:fa:a2:3e:8c:39:07:fa:
3b:cd:05:48:bd:2a:8e:aa:c7:62:ab:28:75:c4:7d:f0:c5:50:
6c:af:4b:33:a1:6a:63:43:76:12:cd:4d:24:38:f5:60:c8:71:
90:a6:8b:93:5c:2d:72:cb:7f:e6:38:68:12:f4:6a:4c:be:1a:
0c:17:1d:15:00:10:fa:da:b6:ca:e0:fa:d9:b8:88:76:55:69:
42:d2:f2:51:8e:ce:a7:f8:e9:50:25:ae:a6:b8:65:09:0c:f5:
4d:27:7a:0a:e9:ca:be:fd:24:79:fa:8e:26:9f:bb:06:a3:85:
a2:69:2a:a5:fe:59:c0:cb:15:21:70:d0:bc:11:29:75:97:39:
43:66:e2:ca:02:38:91:de:d4:31:dd:08:eb:c2:f4:d6:8c:41:
a0:05:b0:12:30:24:ad:a0:75:8e:81:59:8b:73:82:d1:77:76:
aa:a9:0e:4a:1f:7d:d3:cb:c0:c3:cd:c1:fa:76:a0:0e:44:f1:
7a:0d:22:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 03:54:07 2026 by rpki-client