Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ru_jzGfOVd9pi2Tubfz3x-hVwik.roa
File: Ru_jzGfOVd9pi2Tubfz3x-hVwik.roa (raw, json)
Hash identifier: d3SVSinC9zmAgen/VQ8qlGu9ZZejn43WKSi6pUfnV70=
Subject key identifier: 46:EF:E3:CC:67:CE:55:DF:69:8B:64:EE:6D:FC:F7:C7:E8:55:C2:29
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FA768DC493E9A2FC036C99E5A694697D5
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ru_jzGfOVd9pi2Tubfz3x-hVwik.roa
Signing time: Tue 28 Jul 2026 06:28:14 +0000
ROA not before: Tue 28 Jul 2026 06:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146892
IP address blocks: 62.105.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:68:dc:49:3e:9a:2f:c0:36:c9:9e:5a:69:46:97:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 28 06:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46efe3cc67ce55df698b64ee6dfcf7c7e855c229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:5a:97:fe:9b:5a:82:d0:0c:61:4a:f2:b2:
bb:2c:de:b7:c5:d8:f6:54:15:e4:59:d5:6e:93:4e:
d8:6f:85:3f:3d:9a:a9:cb:13:e9:ac:5b:ed:1b:b6:
2b:3b:4c:02:3c:a4:62:da:89:1c:38:6a:a6:72:d2:
5a:22:fe:3a:ff:8a:fa:66:f6:82:1f:46:a8:48:9f:
50:7d:d2:4b:6f:18:8f:a0:8b:06:c3:ae:d9:5a:c9:
4f:85:33:85:04:94:71:4d:c6:2f:91:3a:1d:0c:f2:
d9:64:c5:bc:de:b6:00:5c:2e:69:5a:0a:48:57:71:
24:84:85:4d:9e:c0:52:ea:c4:bd:46:0a:c5:d6:7f:
76:27:d3:9b:32:63:a0:73:84:20:a1:80:b0:16:22:
9f:9e:a0:1b:93:5c:16:10:58:74:84:2a:0f:9a:bd:
c6:28:69:e8:0b:70:1f:2d:55:d3:cf:34:46:c5:ce:
7a:10:a1:e2:52:4c:47:04:d1:2c:f3:d1:2b:54:53:
87:8d:26:17:57:81:ad:31:50:75:4f:aa:25:c8:c2:
c8:8b:c2:b2:e0:fa:3b:3d:37:2e:90:ab:be:de:73:
c9:9f:f4:91:55:ab:f3:68:60:c9:c3:88:a0:0a:04:
e8:6b:de:4a:07:50:cc:2d:56:e2:ad:31:68:ce:cf:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EF:E3:CC:67:CE:55:DF:69:8B:64:EE:6D:FC:F7:C7:E8:55:C2:29
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ru_jzGfOVd9pi2Tubfz3x-hVwik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.192.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6d:cb:5a:f5:49:c4:06:78:96:08:ae:f6:49:60:ba:53:13:
3b:7e:3a:4c:47:53:2b:87:d3:60:b9:0c:5b:77:e8:fa:24:2c:
96:8f:b4:32:eb:51:b4:b7:07:0a:c6:cd:d6:9b:62:11:df:1c:
c5:85:02:f3:fc:77:0f:54:b4:97:fc:04:6d:6a:a8:fb:8e:de:
c2:57:55:7d:0e:28:00:d0:02:87:f1:14:81:e6:86:4c:c9:df:
46:26:bc:f3:02:30:bc:23:df:bb:a6:75:e8:a3:98:6f:dd:d3:
ca:a1:e5:b5:ee:7b:03:8b:ea:45:3b:ef:59:56:41:d2:27:fc:
96:0e:5e:b9:6a:6d:1f:28:76:40:1d:ad:e7:31:49:23:c3:55:
97:e4:ab:58:89:f6:f9:72:8b:dc:89:78:b5:53:55:70:cc:94:
66:dc:f9:6b:20:7f:3a:bb:07:cc:04:74:9b:e4:b7:02:ce:e1:
2d:12:c7:35:49:1d:05:cb:58:a3:93:c8:2f:07:5f:ea:23:02:
87:2c:da:9f:7d:c8:91:27:2a:8e:85:76:78:0b:04:67:7c:be:
49:3d:49:40:c5:60:9e:3b:72:ae:c9:69:68:e5:e4:30:c9:7b:
0e:b8:3b:26:b9:14:fe:c2:7b:bc:f7:26:88:b4:be:aa:3b:52:
e1:90:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:34 2026 by rpki-client