Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zJ0h0UmvjPD5DNzMLAugvErmI6Q.roa
File: zJ0h0UmvjPD5DNzMLAugvErmI6Q.roa (raw, json)
Hash identifier: HUEUSNthYBhiAHqRlAVWHp55cBlGBxeZAVlAsSazoFo=
Subject key identifier: CC:9D:21:D1:49:AF:8C:F0:F9:0C:DC:CC:2C:0B:A0:BC:4A:E6:23:A4
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0BCFC53EAB5795A86D07E5DCA775A58A1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zJ0h0UmvjPD5DNzMLAugvErmI6Q.roa
Signing time: Sun 20 Sep 2026 04:04:08 +0000
ROA not before: Sun 20 Sep 2026 04:04:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 62.105.197.0/24 maxlen: 24
62.105.199.0/24 maxlen: 24
77.67.32.0/24 maxlen: 24
194.77.198.0/24 maxlen: 24
194.122.81.0/24 maxlen: 24
195.21.131.0/24 maxlen: 24
212.189.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:fc:53:ea:b5:79:5a:86:d0:7e:5d:ca:77:5a:58:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 20 04:04:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc9d21d149af8cf0f90cdccc2c0ba0bc4ae623a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:bc:d1:f4:08:1a:52:dd:a4:69:0e:e2:5c:
ec:73:d9:7e:21:d4:55:fc:7d:e8:b7:d1:37:bc:ee:
b1:02:62:b0:23:0c:80:dd:d2:9e:5b:50:c2:6f:e3:
bc:02:6c:7c:ca:97:51:ba:de:a2:0d:34:0c:17:2c:
32:c7:9b:18:53:07:46:e2:db:47:11:36:7d:42:2f:
d6:60:75:8b:0f:33:5e:52:6d:1a:ce:32:af:bf:fd:
d8:c8:b6:41:f9:5f:5e:1d:dc:03:2b:82:95:81:07:
f6:f5:53:00:28:b5:1e:a8:f9:36:a1:bd:d3:81:f6:
69:0b:68:8b:0a:0e:49:1b:ff:6f:2d:fd:c0:5d:ba:
d6:ef:18:59:5d:e5:89:cf:17:56:92:95:6e:de:bb:
9a:b1:8f:26:9a:11:16:c0:81:1d:05:e1:7d:3b:8c:
65:03:88:5b:76:8d:cb:a3:bb:39:1a:ac:4a:64:f7:
86:36:30:76:ea:5f:f6:68:2b:84:1c:3a:c6:76:28:
73:94:e4:38:88:8f:99:6b:34:a5:8f:51:11:36:17:
b8:61:9f:41:88:df:9d:66:c8:6b:36:8c:7f:d4:7b:
fc:e6:2c:2f:ea:0b:ec:03:97:b4:78:a0:f6:b9:47:
f7:1a:11:2d:cf:6a:d2:99:56:39:60:98:0c:96:4c:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9D:21:D1:49:AF:8C:F0:F9:0C:DC:CC:2C:0B:A0:BC:4A:E6:23:A4
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zJ0h0UmvjPD5DNzMLAugvErmI6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.197.0/24
62.105.199.0/24
77.67.32.0/24
194.77.198.0/24
194.122.81.0/24
195.21.131.0/24
212.189.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:be:9b:08:7a:ac:f5:f7:4a:32:8f:2c:0c:a1:55:d0:ce:29:
9d:67:c9:9e:4a:30:8f:fd:32:44:ae:13:27:26:7b:9d:6b:f8:
54:bc:f9:ca:0a:2a:f3:1e:d1:ad:59:9a:ee:2d:87:35:a4:a0:
98:e3:6b:a4:4b:0b:04:c8:d0:34:8e:85:51:c4:8f:64:82:f7:
d2:d0:58:e4:04:80:15:77:72:07:2d:31:4d:9e:ca:2b:9b:8c:
d2:94:43:07:a7:d8:0e:31:0c:d0:70:5a:30:b4:8a:db:57:a0:
e1:14:12:7d:17:f5:c4:60:8d:89:07:02:0f:bb:b1:52:7d:e7:
36:0a:87:3e:f7:c4:80:df:00:ca:a4:1d:85:9c:e3:0e:35:a8:
e7:c4:75:5e:02:ec:59:4e:b9:f9:2f:e1:a6:46:cb:f5:67:ef:
b7:bd:91:79:4a:f6:8f:a1:9c:1f:00:48:a7:5a:0d:56:8b:ba:
af:cb:fe:95:b3:1f:98:c9:8b:33:c5:85:ec:f9:b7:a0:c5:05:
62:c0:e6:3b:bd:ce:63:39:9e:80:b2:ee:09:c8:57:20:95:fe:
ed:da:96:ad:2b:3b:bb:cc:a2:84:0f:a0:c6:fe:52:99:50:4d:
43:82:9a:a7:b9:68:57:65:ca:38:39:71:c9:b9:f8:0a:55:a4:
bc:5e:5c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:02:27 2026 by rpki-client