Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Fud9ODAMsd31ew45TiNDNNz7p6Q.roa
File: Fud9ODAMsd31ew45TiNDNNz7p6Q.roa (raw, json)
Hash identifier: JVdBlX4hZNCW3mGJ2KoD9CCkHqCF6bVPSh78p9XqRts=
Subject key identifier: 16:E7:7D:38:30:0C:B1:DD:F5:7B:0E:39:4E:23:43:34:DC:FB:A7:A4
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A101C72660F9082CE12C7462CF817B61B9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Fud9ODAMsd31ew45TiNDNNz7p6Q.roa
Signing time: Sat 03 Oct 2026 12:39:50 +0000
ROA not before: Sat 03 Oct 2026 12:39:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.105.197.0/24 maxlen: 24
194.45.47.0/24 maxlen: 24
194.77.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:c7:26:60:f9:08:2c:e1:2c:74:62:cf:81:7b:61:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 3 12:39:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16e77d38300cb1ddf57b0e394e234334dcfba7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:30:72:3e:78:5e:54:18:89:bd:22:8e:e8:
b6:90:9f:75:69:65:9b:34:b6:5e:9f:20:cf:ed:df:
ec:b6:be:3f:f6:10:3b:db:c6:93:0e:24:07:10:8b:
7d:9e:12:20:8c:52:e5:22:d2:f3:be:2e:7f:eb:28:
70:5d:a6:50:7e:9d:08:e5:8c:48:3e:98:77:9a:50:
d6:7b:39:ee:36:f7:bf:15:9c:71:4e:cc:71:20:df:
8d:ce:d4:2f:20:c4:27:80:d7:92:4d:89:94:15:5d:
b0:a0:18:97:08:44:dc:52:e7:ba:11:75:22:76:36:
e5:62:a1:f4:fe:61:4b:78:29:03:7b:3c:ab:c4:ea:
5a:ae:5c:b1:6b:05:68:28:b2:74:41:41:e6:be:2f:
9b:e6:46:70:ff:b1:2a:16:a0:34:d5:d9:30:e9:ca:
d4:2c:25:05:f3:7f:47:25:96:4c:c9:fd:cc:3b:5e:
77:42:4c:8c:62:45:f6:bb:58:18:cb:87:82:25:5b:
04:13:49:ee:d6:a7:ba:d4:77:09:92:ff:7d:23:3a:
89:3d:06:53:6b:fa:36:d3:94:da:48:32:3d:85:c0:
d1:ec:27:b3:49:34:ed:3b:3a:ce:b7:99:00:73:17:
c6:23:fa:80:10:26:85:ea:08:d8:fe:ed:fb:7e:a0:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E7:7D:38:30:0C:B1:DD:F5:7B:0E:39:4E:23:43:34:DC:FB:A7:A4
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Fud9ODAMsd31ew45TiNDNNz7p6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.32.0/24
62.41.37.0/24
62.105.197.0/24
194.45.47.0/24
194.77.62.0/24
Signature Algorithm: sha256WithRSAEncryption
31:45:0c:e6:1a:5d:da:c1:62:8a:af:63:7e:7b:d1:09:c6:4c:
cc:c7:df:9e:aa:bc:ee:b2:08:19:24:87:81:df:11:d9:2e:2e:
67:3e:d9:f2:4a:6e:c0:46:f5:06:01:30:63:3a:84:01:40:72:
dc:6e:61:59:62:7c:c2:9f:58:6b:62:5f:70:48:44:58:37:b6:
bc:b1:a7:d4:1a:05:9b:7b:be:68:c9:2f:a9:e5:98:9b:cb:e7:
6e:75:2f:b8:1c:b7:f7:b9:d5:11:98:27:ac:ed:07:8f:32:30:
32:dd:6a:8c:04:71:d4:ca:18:6b:01:f0:ab:0e:97:be:2f:50:
fe:2e:3e:08:c0:bf:ec:69:20:6c:4c:ea:b0:c5:ee:72:23:5e:
fa:0f:11:17:82:d0:55:85:d9:69:ac:e9:d2:8b:9c:b9:de:e5:
38:50:b7:a8:84:1d:73:ef:9c:99:74:9f:eb:b5:09:e7:d6:ba:
3c:3a:88:47:f4:62:6a:3c:cd:97:bb:cf:9a:83:70:f2:7c:28:
f9:d8:a7:a5:01:d8:42:01:03:78:4d:f4:f9:ad:43:e8:6c:d8:
ea:86:79:39:53:33:39:0c:1e:2d:46:bd:11:23:c1:98:0d:b8:
d8:63:7f:3c:d5:8c:2e:63:29:f5:5b:dd:6e:5d:eb:f8:bf:8a:
57:ed:38:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:46:37 2026 by rpki-client