Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QxNXF813AF4UccwS9B9qUZyqtD8.roa
File: QxNXF813AF4UccwS9B9qUZyqtD8.roa (raw, json)
Hash identifier: 4ommNxvQR5H55Bnd0VsUoFAIv/J0Ft928rgxNZWNAqI=
Subject key identifier: 43:13:57:17:CD:77:00:5E:14:71:CC:12:F4:1F:6A:51:9C:AA:B4:3F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0B6FCFB738F7F1AEC51287541E4061A53
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QxNXF813AF4UccwS9B9qUZyqtD8.roa
Signing time: Sat 19 Sep 2026 00:07:07 +0000
ROA not before: Sat 19 Sep 2026 00:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 62.105.192.0/24 maxlen: 24
62.132.2.0/24 maxlen: 24
62.192.110.0/24 maxlen: 24
77.67.26.0/24 maxlen: 24
77.67.27.0/24 maxlen: 24
77.67.31.0/24 maxlen: 24
77.67.92.0/24 maxlen: 24
81.94.104.0/21 maxlen: 24
194.77.3.0/24 maxlen: 24
194.77.6.0/24 maxlen: 24
194.77.78.0/24 maxlen: 24
194.77.219.0/24 maxlen: 24
194.122.78.0/24 maxlen: 24
195.21.129.0/24 maxlen: 24
195.21.144.0/24 maxlen: 24
195.21.145.0/24 maxlen: 24
195.21.146.0/24 maxlen: 24
195.162.248.0/24 maxlen: 24
212.189.24.0/24 maxlen: 24
212.189.48.0/24 maxlen: 24
212.189.113.0/24 maxlen: 24
212.189.116.0/24 maxlen: 24
212.222.171.0/24 maxlen: 24
217.8.194.0/24 maxlen: 24
217.8.197.0/24 maxlen: 24
217.8.199.0/24 maxlen: 24
217.8.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:42:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:fc:fb:73:8f:7f:1a:ec:51:28:75:41:e4:06:1a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 19 00:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43135717cd77005e1471cc12f41f6a519caab43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:cd:0c:ce:06:d4:43:77:fc:df:a9:a1:e5:
15:74:54:a2:5f:07:80:24:d0:6f:99:46:5e:62:9e:
58:94:86:0f:e6:04:39:2b:fb:15:c2:a4:df:45:f0:
e6:5a:79:6c:10:01:4e:58:62:6a:cd:d0:f7:ec:59:
db:02:41:e0:b2:32:29:d6:d8:f2:66:7c:38:c2:87:
fd:43:99:d8:55:d8:90:88:97:67:e9:2a:57:4f:ab:
e4:63:eb:b9:36:39:cb:ad:91:f7:e3:6e:1e:8f:44:
aa:ec:1a:54:ff:f3:f8:21:33:02:3c:71:fe:f2:27:
91:34:4a:55:0b:21:c4:29:7a:ac:03:4a:bf:e8:c0:
ae:e6:02:9b:b4:25:8d:d0:d9:2a:2d:6b:bb:dd:eb:
f5:16:6c:78:37:a2:a8:b3:fc:a3:95:52:b2:8d:2b:
dd:5f:20:83:0c:4f:ce:38:17:b4:06:9e:54:ec:3b:
4e:e6:03:e1:6d:4b:d1:e4:f6:2f:f6:05:c7:1f:93:
23:dc:1c:45:96:fb:27:66:c5:2e:4d:52:d4:4b:da:
c4:f9:ba:fa:ed:cb:18:ff:97:a7:26:62:2c:7b:eb:
ce:18:a3:8a:73:3a:c4:5e:c2:78:43:d9:a2:8e:7e:
0f:f9:28:5e:16:9c:fe:c9:15:f3:a4:4a:a4:ba:98:
9f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:57:17:CD:77:00:5E:14:71:CC:12:F4:1F:6A:51:9C:AA:B4:3F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QxNXF813AF4UccwS9B9qUZyqtD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.192.0/24
62.132.2.0/24
62.192.110.0/24
77.67.26.0/23
77.67.31.0/24
77.67.92.0/24
81.94.104.0/21
194.77.3.0/24
194.77.6.0/24
194.77.78.0/24
194.77.219.0/24
194.122.78.0/24
195.21.129.0/24
195.21.144.0-195.21.146.255
195.162.248.0/24
212.189.24.0/24
212.189.48.0/24
212.189.113.0/24
212.189.116.0/24
212.222.171.0/24
217.8.194.0/24
217.8.197.0/24
217.8.199.0/24
217.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f7:cc:a4:8f:db:72:54:29:0d:bb:ec:f4:6e:f3:a0:4d:34:
5c:02:cb:db:9f:98:2d:fc:db:eb:75:8b:42:db:8a:d4:4c:21:
df:e2:0c:e5:98:f3:b4:1e:0e:af:07:16:a9:19:9b:dc:74:f2:
13:88:07:2d:b9:3e:5d:ab:e7:02:e9:bc:5f:fd:31:0b:52:48:
38:d5:77:01:d8:0f:71:58:94:77:07:cf:85:52:e6:f9:a2:83:
ec:71:59:80:71:ca:3c:b3:73:1f:ad:85:f7:51:40:f7:7f:50:
16:5b:2a:8d:60:91:9a:e1:cd:58:9c:a9:f9:2b:8a:3e:8d:e6:
e9:2d:12:1f:4c:fa:a4:1f:f1:30:84:28:18:0d:64:63:35:a3:
f0:bf:cf:c3:41:e0:3e:13:4a:bc:32:f6:5e:82:76:4d:82:33:
e9:bc:7a:ad:54:e3:f3:e6:35:17:29:ff:57:14:20:18:ae:00:
04:e8:0f:06:2d:ee:83:8a:2c:5c:fc:d0:31:3f:b3:59:78:47:
fb:0f:cf:28:48:82:7b:39:21:10:2e:e6:26:28:92:b7:3a:28:
81:77:fd:2f:40:dc:e4:90:a4:79:79:09:38:c8:21:e2:b4:44:
7f:68:ed:fb:07:b3:90:50:41:f1:1e:40:87:d7:6f:cf:79:46:
99:10:2b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:09:44 2026 by rpki-client