Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/dLH6XnK1u-H4udYkQCgK5Bg_rRI.roa
File: dLH6XnK1u-H4udYkQCgK5Bg_rRI.roa (raw, json)
Hash identifier: 5EPxBJ3XWVAgIs2qxETVtzpwSUSTKGPG6YVO0/gMvJE=
Subject key identifier: 74:B1:FA:5E:72:B5:BB:E1:F8:B9:D6:24:40:28:0A:E4:18:3F:AD:12
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0B9EBB730722FECAA79469B20DE8886D5
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/dLH6XnK1u-H4udYkQCgK5Bg_rRI.roa
Signing time: Sat 19 Sep 2026 13:47:07 +0000
ROA not before: Sat 19 Sep 2026 13:47:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 62.41.24.0/24 maxlen: 24
92.71.160.0/19 maxlen: 19
194.122.83.0/24 maxlen: 24
194.231.132.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.211.0/24 maxlen: 24
212.189.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:eb:b7:30:72:2f:ec:aa:79:46:9b:20:de:88:86:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 19 13:47:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74b1fa5e72b5bbe1f8b9d62440280ae4183fad12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:29:bc:f0:0f:df:f1:5e:2f:06:cd:c8:f6:
e4:61:75:0a:5f:c3:9a:2a:38:b5:b4:39:06:41:c4:
d3:e2:b8:4e:fc:d1:9b:75:e7:2e:4b:b2:f1:53:77:
52:85:30:79:f8:8f:2c:ef:17:8e:3b:1b:3d:1c:55:
50:2b:a1:0a:66:b1:42:be:ec:c6:63:07:fe:36:24:
81:43:3a:ec:fc:c6:6f:6e:99:cb:db:be:b3:81:9c:
de:19:be:0c:0b:69:f6:e5:32:91:69:3d:9e:59:2f:
fc:63:a8:d3:77:c0:8e:10:1f:9c:31:03:0a:0b:4b:
07:91:06:9f:37:cc:e1:12:72:41:91:09:42:e9:8e:
e0:e3:a9:19:21:63:c3:29:f8:de:7b:a7:9e:bd:82:
75:34:96:5d:b5:84:78:5d:db:26:bf:40:de:a9:3e:
19:67:18:c4:a3:a2:71:4b:6c:26:9d:c5:1d:fa:f7:
2d:3f:69:e2:d4:b1:d9:b6:a5:8f:1c:25:ea:a7:51:
2a:63:b2:64:2b:c9:79:05:f4:ae:d7:01:81:77:af:
30:4c:7d:7f:dc:3f:c9:3e:35:4b:94:b1:e6:dc:37:
50:a9:2c:6e:72:d2:09:be:57:c4:e1:52:3f:e5:7c:
f9:dc:64:09:bc:92:97:b7:f1:20:00:2c:d8:af:59:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B1:FA:5E:72:B5:BB:E1:F8:B9:D6:24:40:28:0A:E4:18:3F:AD:12
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/dLH6XnK1u-H4udYkQCgK5Bg_rRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.24.0/24
92.71.160.0/19
194.122.83.0/24
194.231.132.0/24
194.231.142.0/24
194.231.211.0/24
212.189.91.0/24
Signature Algorithm: sha256WithRSAEncryption
33:50:ea:f0:9e:78:3d:89:2a:9f:40:62:86:3c:13:56:11:35:
17:e8:14:40:01:8f:e2:ff:8c:19:39:c1:53:93:3d:8c:c1:af:
4c:7d:1f:57:8a:41:a7:fd:83:05:ae:44:6d:1b:6f:7b:42:67:
9e:06:62:b8:61:46:29:f7:7e:c0:e5:00:1e:f9:18:a6:e2:f3:
44:e7:87:58:b2:97:0a:5a:ce:ab:44:54:40:f2:f5:e9:07:2f:
68:77:e7:ba:55:9d:55:67:8b:52:3b:c9:ca:be:df:48:d0:d2:
db:cf:f6:c8:58:20:6b:f6:e0:15:e0:cf:79:42:b4:5d:d2:dc:
68:b9:e6:2c:3e:47:65:76:13:57:eb:d0:c1:1c:44:17:39:bf:
c7:d1:3c:bf:ec:c7:8c:a0:f5:ce:3c:69:95:a2:b8:f8:f7:c1:
ee:81:6f:2b:68:f9:71:00:5a:b5:e9:7c:46:0d:5d:6f:af:0a:
c6:d3:14:8a:f1:a2:6c:e8:4b:ed:33:04:31:10:49:6b:e1:16:
80:eb:0e:85:c3:ec:4c:4c:3c:67:51:6c:70:75:21:e9:00:e0:
46:be:63:63:18:5e:9f:b8:83:6a:e8:26:01:0c:e6:87:22:b9:
25:69:e8:21:eb:82:4e:49:f1:0c:c7:d0:4f:6e:3c:24:da:90:
7a:86:c4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:00:47 2026 by rpki-client