Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BeAJhJSNxHO8PxtZ1xctpf88rLk.roa
File: BeAJhJSNxHO8PxtZ1xctpf88rLk.roa (raw, json)
Hash identifier: wuejqFXe7vowwlW+JwEFLBCpzCE4AqPNEghRe3GWTx0=
Subject key identifier: 05:E0:09:84:94:8D:C4:73:BC:3F:1B:59:D7:17:2D:A5:FF:3C:AC:B9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F8E151893CF37454B26601F966BC4318D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BeAJhJSNxHO8PxtZ1xctpf88rLk.roa
Signing time: Thu 23 Jul 2026 08:26:15 +0000
ROA not before: Thu 23 Jul 2026 08:26:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 62.105.192.0/24 maxlen: 24
77.67.31.0/24 maxlen: 24
194.77.69.0/24 maxlen: 24
194.122.85.0/24 maxlen: 24
195.21.145.0/24 maxlen: 24
212.222.112.0/24 maxlen: 24
217.8.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:15:18:93:cf:37:45:4b:26:60:1f:96:6b:c4:31:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 23 08:26:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05e00984948dc473bc3f1b59d7172da5ff3cacb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:49:a5:f3:e5:8b:a0:9e:91:ae:dc:5d:ce:
f4:74:a8:72:70:a1:0b:92:08:ec:84:a4:db:6e:79:
6c:fb:21:5a:24:92:93:3a:59:bf:ab:6d:df:8f:5a:
24:09:25:6f:9d:9f:c0:83:00:70:11:c8:ea:43:78:
5d:2d:a7:35:68:94:38:3e:4b:69:ce:09:fe:f3:6f:
df:e8:44:26:b5:9b:dc:ae:a7:6d:0d:08:3e:ff:92:
68:42:1f:ba:dc:ff:43:ac:09:fc:8a:49:41:6c:c6:
a5:c0:2e:16:c9:41:4d:e0:96:07:fc:94:d2:78:dc:
d0:8e:fa:95:3b:63:49:64:5b:29:02:24:25:93:c5:
73:2e:5c:82:14:e9:63:ca:76:76:b9:3e:00:1c:a8:
ee:da:5b:1a:0d:a5:7b:28:b2:4f:1f:fb:87:45:ea:
3d:51:08:3c:88:f2:87:93:3e:49:59:1f:22:2f:aa:
d3:90:21:ac:52:11:e6:b1:cf:9f:bb:48:98:c7:1e:
6b:25:3a:34:20:44:57:d3:91:8e:8f:e4:26:51:62:
c6:f8:c6:f1:56:48:1f:f9:1e:55:c2:e7:77:02:4e:
a4:3a:c7:1b:15:c3:15:23:58:97:e7:d4:21:2c:fc:
94:3d:04:30:ce:d7:40:3e:1f:3e:99:58:86:91:a1:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E0:09:84:94:8D:C4:73:BC:3F:1B:59:D7:17:2D:A5:FF:3C:AC:B9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BeAJhJSNxHO8PxtZ1xctpf88rLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.192.0/24
77.67.31.0/24
194.77.69.0/24
194.122.85.0/24
195.21.145.0/24
212.222.112.0/24
217.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:49:48:c8:04:3a:ca:78:6e:b2:65:cf:06:97:e1:43:e9:3a:
7f:c6:83:46:bd:9b:e9:6c:69:f2:9a:09:a5:4d:15:12:48:c3:
02:7e:5e:8a:cf:dd:d3:96:d9:d0:6d:fd:71:17:af:68:b4:41:
5d:ca:51:1e:49:19:12:84:fc:1c:c5:19:79:b8:26:e6:6c:b6:
87:96:fb:5d:4a:e8:38:7a:5b:f9:e3:40:45:ce:50:ec:7b:c9:
03:1a:95:27:12:53:8b:f3:3b:84:64:e5:a6:6b:92:36:b4:d5:
26:3d:0b:f8:ea:12:8e:ec:72:bc:16:6b:7a:fc:da:23:81:99:
7c:f3:18:e5:93:a4:55:6a:2b:9d:90:11:61:d0:70:f9:a1:a8:
e3:4a:3b:c5:49:8c:96:86:69:69:2c:61:c0:af:6a:11:72:5f:
7f:ab:67:2c:53:29:dd:61:2a:bf:c6:9f:90:ba:d1:48:33:09:
01:52:ae:57:d3:bd:7c:21:bf:a2:3f:73:43:be:d9:1c:24:d4:
99:3d:ae:6c:5c:af:56:bc:7e:68:e3:e7:cb:99:e2:1f:43:20:
eb:04:b9:0e:40:35:40:5d:6a:96:da:14:bf:50:45:b4:17:ae:
d4:c3:94:70:64:6f:9d:b0:e3:cc:7d:32:31:c0:84:8e:7e:71:
21:d0:60:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:05 2026 by rpki-client