Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-DGQoAP7CQ0Yu5JDAWrgdBQ9MXI.roa
File: 1-DGQoAP7CQ0Yu5JDAWrgdBQ9MXI.roa (raw, json)
Hash identifier: 9Zvr0kp57yWWFiubLyRU0ULCw7NrIAjlMneDFLmQdZA=
Subject key identifier: F8:31:90:A0:03:FB:09:0D:18:BB:92:43:01:6A:E0:74:14:3D:31:72
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F5F8977758A1042F97663CA85C7A9686F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-DGQoAP7CQ0Yu5JDAWrgdBQ9MXI.roa
Signing time: Tue 14 Jul 2026 07:31:12 +0000
ROA not before: Tue 14 Jul 2026 07:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 62.41.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:89:77:75:8a:10:42:f9:76:63:ca:85:c7:a9:68:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 14 07:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f83190a003fb090d18bb9243016ae074143d3172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:31:df:4b:de:32:1c:62:a7:10:13:f0:93:
86:07:57:48:83:f3:c0:3b:ca:73:ad:6d:a5:67:50:
70:c5:86:ac:2b:7f:55:22:e2:fc:91:d1:85:af:fc:
eb:e8:8e:9f:53:aa:a1:0d:61:ba:06:01:e1:80:21:
3f:a6:2f:f0:5f:24:b1:09:cd:fa:ff:46:04:e8:05:
ed:2f:a3:7f:20:24:c0:e8:c8:ff:70:d3:f8:94:ba:
87:92:7d:d9:f3:fd:b7:02:e0:21:27:de:d6:39:b0:
3c:f7:c9:3d:40:92:95:24:3b:a2:31:71:5c:7c:be:
a7:b6:25:56:f1:a9:ae:77:98:de:50:9a:57:38:c0:
a4:18:8a:76:ad:40:b9:eb:f6:2e:a2:92:96:05:07:
09:9e:6c:10:64:7c:26:44:fd:c6:cd:98:9a:59:44:
a4:c2:dc:6d:c2:a4:0a:7b:29:b4:ba:aa:89:ba:1b:
59:e2:1f:27:69:be:00:96:d4:a0:e6:fa:7f:90:78:
37:15:e6:cd:47:ba:ea:e8:61:1a:45:d9:44:86:c6:
15:7e:ed:86:67:64:e7:bf:36:7b:0f:9c:11:b3:1d:
1f:a4:ae:92:5d:67:86:91:25:b0:6f:f5:b8:fe:fa:
ea:d8:b8:70:36:cc:18:ae:39:d7:c1:68:f3:68:e5:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:31:90:A0:03:FB:09:0D:18:BB:92:43:01:6A:E0:74:14:3D:31:72
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-DGQoAP7CQ0Yu5JDAWrgdBQ9MXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.27.0/24
Signature Algorithm: sha256WithRSAEncryption
15:64:e9:5d:4f:3d:8a:b9:e4:87:0e:75:54:f1:89:eb:86:57:
de:b4:de:a8:75:f9:aa:e0:37:f1:42:ad:c8:d2:e2:d9:04:08:
57:9a:02:bb:ec:c2:cf:6c:16:95:9c:17:9f:ad:89:da:2c:a5:
13:13:51:38:1f:e6:eb:55:df:de:41:67:7e:c7:63:a7:50:8b:
0a:6c:d5:d5:c0:db:74:30:93:32:52:9e:04:41:ef:8f:a3:26:
97:8a:be:f0:76:68:4d:e2:39:12:a1:01:9a:be:b6:1e:64:19:
4d:df:64:91:b9:df:c5:82:18:cc:ac:10:d7:02:89:5b:28:79:
6d:fc:8f:6a:99:3a:b9:6f:42:2d:f2:fe:8b:34:a8:53:42:85:
0a:7f:52:24:88:b1:88:e3:19:57:8c:3a:32:45:5f:a9:56:53:
90:e0:d9:ab:d8:8e:c8:3c:17:78:8e:10:aa:7a:e4:87:82:81:
86:bb:66:7f:ec:bb:03:4e:ae:18:e9:ed:50:b2:45:5c:2e:82:
90:0b:b1:7b:1c:19:a4:58:b9:46:4f:aa:6d:1d:1c:9b:74:ee:
95:84:48:e3:d5:a5:4a:c8:9b:ff:37:5f:74:8a:dc:71:c4:d2:
1d:34:e6:ed:00:ad:5f:54:0f:31:b2:ed:08:2f:e3:2a:6a:68:
34:ee:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:33 2026 by rpki-client