Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aqafeez5ngtsdZW3V_qanKQ80BA.roa
File: aqafeez5ngtsdZW3V_qanKQ80BA.roa (raw, json)
Hash identifier: Hm0mCfs6N1a59oVR9NHtmB/cK4RJsRtTeC4FEg4oPx4=
Subject key identifier: 6A:A6:9F:79:EC:F9:9E:0B:6C:75:95:B7:57:FA:9A:9C:A4:3C:D0:10
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0BE1AE15DA2DADF0E4C79D5E39F6D157F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aqafeez5ngtsdZW3V_qanKQ80BA.roa
Signing time: Sun 20 Sep 2026 09:17:07 +0000
ROA not before: Sun 20 Sep 2026 09:17:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 62.105.193.0/24 maxlen: 24
62.105.218.0/24 maxlen: 24
194.77.2.0/24 maxlen: 24
194.77.228.0/24 maxlen: 24
194.77.229.0/24 maxlen: 24
195.21.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:1a:e1:5d:a2:da:df:0e:4c:79:d5:e3:9f:6d:15:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 20 09:17:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa69f79ecf99e0b6c7595b757fa9a9ca43cd010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:49:ea:ad:0b:28:5d:79:14:9c:7e:74:50:
52:fe:37:1f:52:a1:73:88:8f:f8:40:c8:15:ad:fa:
cd:fc:c0:1d:f1:77:da:60:39:33:7c:6a:b6:53:f4:
f4:de:5f:a5:bd:cb:2d:8e:6e:73:47:54:2c:bd:4c:
4c:55:d9:c2:46:45:e1:72:3a:8f:ff:a2:79:f0:66:
c2:0b:65:51:2d:af:eb:bf:52:1a:09:0f:e9:e5:33:
04:e4:b6:25:4c:76:76:76:ba:67:96:d9:44:f8:e0:
35:d9:7a:04:42:c1:e7:65:81:a4:ed:d8:ca:d9:76:
24:1c:c5:c6:08:ca:19:47:77:e7:46:d4:fa:7b:c8:
67:73:23:d4:9f:72:72:b3:c5:4b:53:a1:d6:c0:66:
4d:97:21:db:11:9b:2d:3e:80:3e:2d:e1:d6:7e:b4:
fe:62:e7:0e:78:ba:73:fc:0b:ed:ce:fd:2f:06:5a:
09:72:ac:bc:87:5f:31:69:3b:88:92:9e:d3:d0:4a:
2a:cd:c0:13:53:cb:e4:1c:d9:1a:50:b3:f9:6c:c6:
90:bf:2b:13:c4:b9:96:27:ce:4c:33:28:44:5d:57:
e7:fd:a7:bb:f5:7a:fc:de:60:7b:ee:f4:fa:0d:66:
a7:94:af:51:d2:ba:e0:06:98:fb:fe:7e:f6:c9:85:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A6:9F:79:EC:F9:9E:0B:6C:75:95:B7:57:FA:9A:9C:A4:3C:D0:10
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aqafeez5ngtsdZW3V_qanKQ80BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.193.0/24
62.105.218.0/24
194.77.2.0/24
194.77.228.0/23
195.21.134.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:86:d3:64:3e:9f:72:fc:da:ab:00:57:e1:5d:61:c4:d4:5f:
d5:7a:26:50:7c:a9:7f:f1:1f:31:e8:22:de:1f:e5:6a:1c:4b:
4f:c7:f8:30:6b:59:26:73:e0:26:e4:22:59:d2:f4:9d:e8:89:
32:88:7a:88:7c:f2:91:e8:aa:dc:e0:0a:31:bf:21:7a:c5:d8:
5c:cf:85:2a:a2:12:01:22:b2:0c:9c:60:5c:84:0f:69:66:76:
1b:94:01:5e:e1:aa:49:4b:b8:3a:14:ff:ab:5d:8c:3d:43:ce:
a1:fc:b7:8b:f7:ae:88:7b:57:6c:de:21:b3:bb:89:00:d6:df:
fa:25:7e:2b:db:b0:71:c8:85:dd:14:7f:33:81:cc:b5:bf:c4:
1d:13:a9:75:58:6a:73:02:55:4d:31:f0:ba:59:24:9c:f4:7f:
b0:7b:99:ab:f9:61:80:ff:a0:5d:0a:ec:a6:b5:25:71:77:60:
16:b7:d1:b7:d4:46:bc:66:45:2a:54:7a:8b:7f:49:30:5b:a8:
50:04:cd:fd:1c:90:e8:4b:ba:0b:33:ad:4b:9d:4e:f2:d4:63:
9b:ae:45:d9:89:1a:83:5a:ed:a5:c8:df:f3:d2:43:c0:45:dd:
71:cd:e5:f5:16:4c:15:42:56:5f:97:54:96:55:a5:1c:9c:a5:
e3:f8:8a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:29:29 2026 by rpki-client