Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aRqgY0m7PVjVq0XGHyaHtRBpSNM.roa
File: aRqgY0m7PVjVq0XGHyaHtRBpSNM.roa (raw, json)
Hash identifier: hXo9OO96eKOYEOTNSoDlSNCmdUY5HFCgBSbbkAQwvTk=
Subject key identifier: 69:1A:A0:63:49:BB:3D:58:D5:AB:45:C6:1F:26:87:B5:10:69:48:D3
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0BE1AE0D9BFDE7FA6EDBCB0EFFCC53D5F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aRqgY0m7PVjVq0XGHyaHtRBpSNM.roa
Signing time: Sun 20 Sep 2026 09:17:07 +0000
ROA not before: Sun 20 Sep 2026 09:17:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.105.196.0/24 maxlen: 24
62.105.198.0/24 maxlen: 24
62.132.116.0/24 maxlen: 24
77.67.58.0/24 maxlen: 24
77.67.125.0/24 maxlen: 24
194.45.47.0/24 maxlen: 24
194.77.26.0/24 maxlen: 24
194.77.56.0/22 maxlen: 24
194.122.79.0/24 maxlen: 24
194.231.128.0/22 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.134.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.150.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
212.189.27.0/24 maxlen: 24
212.189.57.0/24 maxlen: 24
212.189.75.0/24 maxlen: 24
212.189.79.0/24 maxlen: 24
212.189.80.0/24 maxlen: 24
212.189.103.0/24 maxlen: 24
212.189.115.0/24 maxlen: 24
212.222.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:1a:e0:d9:bf:de:7f:a6:ed:bc:b0:ef:fc:c5:3d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 20 09:17:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=691aa06349bb3d58d5ab45c61f2687b5106948d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:aa:c4:97:4b:56:bd:5e:38:00:3f:8a:c4:
fd:0e:08:b3:e4:98:1b:77:2a:e9:ec:d7:22:3c:a4:
3b:82:ec:49:aa:97:7b:69:8d:11:b6:c2:03:4b:2e:
b1:4f:74:3e:b8:17:4f:94:39:f5:a6:b9:63:dd:17:
2d:9b:d4:b0:3c:82:0a:35:73:4b:5a:90:44:63:08:
2d:a7:fd:6b:08:27:a0:7a:a4:e7:e2:b0:2f:0c:08:
3b:90:a2:b0:36:8b:c4:78:79:f5:ce:4e:9b:c9:ba:
66:77:8b:c2:05:c4:92:ed:95:e6:68:8f:5f:d4:e0:
1e:17:2d:8e:ff:42:10:73:fd:99:14:cb:f4:71:e5:
27:51:c2:04:29:97:10:b1:3d:65:fd:ec:c6:1c:47:
47:ae:45:41:b5:07:ed:ab:f5:c7:38:a6:ce:56:e7:
a7:8f:1b:df:0b:26:4b:7a:8b:b3:c5:69:ec:b5:58:
a5:4b:05:e6:18:74:44:f0:0f:e0:fe:fb:84:b2:04:
f3:e3:dd:37:a8:ce:e8:00:13:25:ec:60:53:45:7e:
40:fa:55:ee:77:e3:8a:c0:04:04:5a:b1:ca:00:c0:
50:2a:ac:e6:c7:e6:d1:90:3c:3c:31:99:34:48:21:
e6:8c:7e:94:22:b2:2f:e9:be:98:77:16:23:5d:0d:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1A:A0:63:49:BB:3D:58:D5:AB:45:C6:1F:26:87:B5:10:69:48:D3
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aRqgY0m7PVjVq0XGHyaHtRBpSNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.32.0/24
62.41.37.0/24
62.105.196.0/24
62.105.198.0/24
62.132.116.0/24
77.67.58.0/24
77.67.125.0/24
194.45.47.0/24
194.77.26.0/24
194.77.56.0/22
194.122.79.0/24
194.231.128.0-194.231.139.255
194.231.150.0/24
194.231.152.0/22
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
212.189.27.0/24
212.189.57.0/24
212.189.75.0/24
212.189.79.0-212.189.80.255
212.189.103.0/24
212.189.115.0/24
212.222.170.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:79:5f:b0:c5:5e:55:5f:2e:4f:74:f2:49:36:fd:91:15:72:
04:f1:d2:36:b0:22:4e:51:9a:50:fe:69:3b:44:d8:9e:b1:e9:
e9:a6:bb:bb:40:72:1f:d9:82:fb:61:eb:7d:1b:a2:ea:6e:38:
cf:04:e8:bd:e8:ca:48:8a:e4:f2:99:07:48:3b:12:6e:80:3e:
11:79:85:60:4a:ce:05:60:ca:48:8a:5e:fd:cd:3b:8c:12:a4:
9a:02:80:b3:84:04:3d:73:3f:df:b3:4d:69:7e:40:0b:59:9e:
36:2a:11:b2:e6:2c:1b:d3:24:32:76:69:a0:d4:a3:2a:9d:56:
83:90:2c:75:53:af:2a:46:72:51:16:c7:88:f5:ad:32:8e:82:
d9:ab:94:22:6e:f6:7e:63:3c:ba:15:d7:6c:af:53:7a:f9:06:
49:44:95:e9:16:17:ce:51:aa:2d:4a:8b:77:bf:b6:0b:0b:36:
57:e4:cf:13:34:d7:d5:25:83:5f:9d:41:a0:f8:08:a9:e9:be:
61:0b:ca:dc:86:1a:03:9b:db:6a:b7:9f:0c:63:9d:4e:30:3a:
d8:be:9b:85:07:af:02:af:fb:2d:19:5f:09:f7:32:e6:83:49:
09:84:88:9d:e8:66:eb:e0:05:6b:fa:cb:e3:44:6d:96:4c:16:
5f:62:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:02:33 2026 by rpki-client