Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zsDwNzUgP5zY95_neXLpKhwY0qQ.roa
File: zsDwNzUgP5zY95_neXLpKhwY0qQ.roa (raw, json)
Hash identifier: 8GhrR4VIDLNJCUCo/YjsD2KH+shT9upyZaukOgTaPWM=
Subject key identifier: CE:C0:F0:37:35:20:3F:9C:D8:F7:9F:E7:79:72:E9:2A:1C:18:D2:A4
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019E219A8CB3CFBE2EDE1DF37948CB8FD04E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zsDwNzUgP5zY95_neXLpKhwY0qQ.roa
Signing time: Wed 13 May 2026 13:50:37 +0000
ROA not before: Wed 13 May 2026 13:50:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 62.93.164.0/22 maxlen: 24
62.93.176.0/22 maxlen: 24
62.105.208.0/23 maxlen: 23
84.20.4.0/22 maxlen: 24
84.20.16.0/22 maxlen: 24
84.20.24.0/22 maxlen: 24
92.71.34.0/23 maxlen: 24
92.71.40.0/22 maxlen: 24
92.71.44.0/23 maxlen: 24
92.71.66.0/23 maxlen: 24
92.71.98.0/23 maxlen: 24
92.71.124.0/23 maxlen: 24
135.196.21.0/24 maxlen: 24
135.196.106.0/24 maxlen: 24
135.196.180.0/23 maxlen: 23
135.196.185.0/24 maxlen: 24
195.86.208.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
213.139.8.0/22 maxlen: 24
213.169.206.0/23 maxlen: 23
213.201.134.0/24 maxlen: 24
213.201.242.0/23 maxlen: 24
213.201.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:9a:8c:b3:cf:be:2e:de:1d:f3:79:48:cb:8f:d0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 13 13:50:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cec0f03735203f9cd8f79fe77972e92a1c18d2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:fe:77:fa:1e:76:65:42:bf:49:e1:16:98:
fb:ec:cc:f1:3f:f4:63:d8:06:71:db:ad:9f:26:3e:
a3:cc:47:12:fd:70:a8:7f:76:55:4c:88:e6:28:2a:
d2:67:6a:76:aa:f2:45:81:aa:0c:83:88:ac:dd:fd:
0a:5c:89:60:9f:a9:5c:0c:f9:35:cc:77:0f:67:37:
b9:8c:da:4b:dc:91:db:c7:69:85:ab:35:44:71:7e:
2f:d2:fc:53:5c:ea:58:72:dc:96:4f:c5:08:9b:dc:
45:a7:58:04:dc:33:d0:bd:c8:51:14:c6:62:70:cc:
0f:99:c0:07:fb:fb:16:42:c7:b7:ac:2d:3d:41:f6:
1b:c5:55:87:06:48:fb:95:f2:cd:db:bb:78:52:40:
d8:b4:63:36:4b:05:ee:9f:8e:71:f6:81:b9:cb:cc:
3d:5c:f9:27:f5:66:ae:af:ba:bd:13:c9:64:af:b0:
2e:56:da:50:6e:8a:03:fb:1e:d8:28:bf:ba:0c:0f:
6a:ee:8e:9e:dd:3a:f9:7c:74:b5:19:f2:70:6d:31:
9e:4a:5d:78:dc:23:28:a0:1d:20:91:6f:56:5c:64:
7a:10:13:1d:f6:c0:1b:8c:47:d0:64:7d:3d:36:a0:
25:04:aa:d6:a1:fd:be:64:1a:a4:be:fe:d3:61:1f:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C0:F0:37:35:20:3F:9C:D8:F7:9F:E7:79:72:E9:2A:1C:18:D2:A4
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zsDwNzUgP5zY95_neXLpKhwY0qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.164.0/22
62.93.176.0/22
62.105.208.0/23
84.20.4.0/22
84.20.16.0/22
84.20.24.0/22
92.71.34.0/23
92.71.40.0-92.71.45.255
92.71.66.0/23
92.71.98.0/23
92.71.124.0/23
135.196.21.0/24
135.196.106.0/24
135.196.180.0/23
135.196.185.0/24
195.86.208.0/24
195.86.223.0/24
213.139.8.0/22
213.169.206.0/23
213.201.134.0/24
213.201.242.0/23
213.201.252.0/23
Signature Algorithm: sha256WithRSAEncryption
25:f6:0a:42:44:dc:ed:e6:c5:03:79:76:da:f8:5c:65:4a:45:
ba:fd:09:b2:a1:55:8d:20:a8:c7:5d:e5:9a:77:49:7b:c1:73:
65:00:2a:7a:9a:43:7f:d3:b5:17:64:67:a8:e4:3e:5b:c0:6c:
19:10:a6:49:79:44:c3:09:1c:3e:c9:b8:42:87:30:62:85:4d:
ca:e2:dd:42:82:e4:18:3a:39:02:31:6a:db:9a:cf:c3:36:7c:
76:8f:3f:8e:7c:97:6c:03:6b:2d:bb:00:a9:a5:60:63:35:f7:
9a:20:1a:5e:e9:e7:8a:0f:1b:3e:34:4b:90:84:b2:0c:6c:75:
6c:26:8f:11:2c:99:03:53:d5:7d:53:46:fe:40:03:e3:ec:4c:
fd:e7:b7:5e:58:41:04:0b:c1:69:4f:46:74:3c:9c:ec:06:5a:
67:04:43:db:9d:4d:fb:aa:77:d5:d3:b2:47:81:ea:98:52:3e:
35:fc:5b:8f:0f:5f:8c:0f:fa:58:db:18:f1:9f:d7:aa:ba:5b:
b1:1c:44:ae:74:11:c6:89:c3:37:22:b3:6b:15:67:dd:f2:50:
87:19:4e:f7:2c:e5:14:8d:e0:5a:5f:14:c6:c8:63:93:82:48:
8c:69:f7:a6:32:62:19:71:1b:a0:9f:0d:3e:d3:9e:58:f9:ce:
82:30:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:41 2026 by rpki-client