Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/v1JKVVqfokkG5CShJfZ3o7FeZiA.roa
File: v1JKVVqfokkG5CShJfZ3o7FeZiA.roa (raw, json)
Hash identifier: OlO8zMqtiZs8y0RvlbzYZ6EjUpFCYseQFulhFcR1AyE=
Subject key identifier: BF:52:4A:55:5A:9F:A2:49:06:E4:24:A1:25:F6:77:A3:B1:5E:66:20
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EEFB9DD7C7A8C24C448981F0007930379
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/v1JKVVqfokkG5CShJfZ3o7FeZiA.roa
Signing time: Mon 22 Jun 2026 14:26:35 +0000
ROA not before: Mon 22 Jun 2026 14:26:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 62.105.198.0/24 maxlen: 24
194.122.79.0/24 maxlen: 24
212.189.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:b9:dd:7c:7a:8c:24:c4:48:98:1f:00:07:93:03:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 22 14:26:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf524a555a9fa24906e424a125f677a3b15e6620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:34:ba:1f:10:04:db:85:39:29:94:ca:c3:
c4:ee:1f:c6:b4:20:1d:0f:8d:9b:7d:84:8b:d7:ff:
35:b7:bf:23:df:e0:0d:6c:64:b8:68:ce:ed:32:6d:
49:1e:b8:f4:52:e4:94:99:fb:01:9f:53:65:09:51:
2e:3d:5c:e2:ca:74:41:55:81:5e:29:08:4c:8a:4f:
0e:c6:6b:80:cf:b2:49:bd:81:1a:11:0e:3c:e3:4f:
d0:fd:94:e7:6f:9d:b9:77:38:f3:44:12:a3:40:7c:
b8:62:d6:21:ed:76:8b:a8:65:b4:d7:03:37:b0:d6:
b8:74:4d:03:41:97:2f:10:72:a7:16:77:79:6a:f1:
92:54:e4:b0:62:a5:11:c9:04:7a:b9:a7:66:69:ec:
b7:99:f3:4d:f3:6d:f3:fb:29:df:09:21:f3:19:4a:
f3:d2:be:15:ed:c6:8a:1b:04:43:70:97:23:a5:c1:
66:06:09:e4:ea:ef:77:fc:69:f1:bb:77:d7:69:f9:
1d:4f:52:ff:23:39:63:ba:4d:77:03:5d:02:09:0d:
1a:86:f1:68:bf:69:d6:90:b5:1c:0f:36:ba:e1:bf:
06:42:7a:90:b4:ac:89:e6:04:5f:f5:6a:18:c0:07:
c2:e6:f7:2a:f4:22:88:c6:75:ba:f4:55:a2:7e:2d:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:52:4A:55:5A:9F:A2:49:06:E4:24:A1:25:F6:77:A3:B1:5E:66:20
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/v1JKVVqfokkG5CShJfZ3o7FeZiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.198.0/24
194.122.79.0/24
212.189.27.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:75:d0:23:b7:a4:b0:28:56:ec:ab:3b:68:c0:03:c0:e1:81:
48:41:da:40:ab:17:49:de:a2:95:3e:11:41:7f:cf:a7:a0:cf:
ee:e1:dc:be:7e:d6:a2:85:c0:f2:6a:f7:c1:2d:46:3d:11:db:
62:6e:98:a1:c8:6a:0e:39:77:1b:7e:f5:c4:9c:1e:d7:6a:e7:
49:0d:75:53:80:b6:27:bb:82:0b:b4:1d:85:bf:16:c9:ad:4a:
18:9d:85:45:d0:e0:85:05:59:9a:1b:63:c2:3f:77:29:44:c8:
8b:4e:ec:54:0c:0f:a0:62:39:b0:b7:01:09:80:5d:92:16:93:
a8:5e:d2:fd:d9:f3:07:87:31:47:96:98:1f:e8:9d:fd:22:98:
7d:22:b3:48:bc:50:4d:6c:d1:2f:08:39:a9:0b:ba:e0:18:9e:
b0:43:d9:1c:2d:d0:53:45:6c:c4:b3:12:6c:b0:1a:69:f1:57:
5e:af:5f:1a:39:95:f6:1a:0c:61:8f:c9:c7:f3:38:71:5f:fd:
a6:ad:44:c0:61:28:e7:4c:d2:f4:c2:3b:89:76:ea:1d:24:bb:
e8:81:57:6e:50:de:d1:6d:e5:24:3c:d5:0b:24:2c:a7:c1:79:
4d:69:53:a9:02:3f:0e:ed:a8:59:f5:f1:b4:8b:bc:de:57:2d:
de:83:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:34 2026 by rpki-client