Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/S1FBMIkaCnCXCUaZgmUxs8g2Xtw.roa
File: S1FBMIkaCnCXCUaZgmUxs8g2Xtw.roa (raw, json)
Hash identifier: 76bSLwpNGe7w3Cx92lcohOazvHjOZv/OWXZvPKG0GMk=
Subject key identifier: 4B:51:41:30:89:1A:0A:70:97:09:46:99:82:65:31:B3:C8:36:5E:DC
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0FC48E52683A0BCF1C5347630ADFF1EF8
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/S1FBMIkaCnCXCUaZgmUxs8g2Xtw.roa
Signing time: Fri 02 Oct 2026 11:03:50 +0000
ROA not before: Fri 02 Oct 2026 11:03:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 62.93.164.0/22 maxlen: 24
62.93.176.0/22 maxlen: 24
62.105.208.0/23 maxlen: 23
84.20.4.0/22 maxlen: 24
84.20.16.0/22 maxlen: 24
84.20.24.0/22 maxlen: 24
92.71.34.0/23 maxlen: 24
92.71.40.0/22 maxlen: 24
92.71.44.0/23 maxlen: 24
92.71.66.0/23 maxlen: 24
92.71.98.0/23 maxlen: 24
92.71.124.0/23 maxlen: 24
135.196.21.0/24 maxlen: 24
135.196.106.0/24 maxlen: 24
135.196.180.0/23 maxlen: 23
135.196.185.0/24 maxlen: 24
194.122.87.0/24 maxlen: 24
195.81.76.0/24 maxlen: 24
195.81.92.0/24 maxlen: 24
195.81.101.0/24 maxlen: 24
195.81.109.0/24 maxlen: 24
195.81.110.0/24 maxlen: 24
195.81.113.0/24 maxlen: 24
195.81.114.0/24 maxlen: 24
195.81.117.0/24 maxlen: 24
195.81.126.0/24 maxlen: 24
195.81.132.0/24 maxlen: 24
195.81.136.0/24 maxlen: 24
195.81.138.0/24 maxlen: 24
195.81.148.0/24 maxlen: 24
195.81.150.0/24 maxlen: 24
195.81.154.0/24 maxlen: 24
195.81.171.0/24 maxlen: 24
195.81.181.0/24 maxlen: 24
195.81.191.0/24 maxlen: 24
195.81.211.0/24 maxlen: 24
195.81.231.0/24 maxlen: 24
195.81.243.0/24 maxlen: 24
195.81.249.0/24 maxlen: 24
195.81.255.0/24 maxlen: 24
195.86.208.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
212.189.57.0/24 maxlen: 24
212.189.105.0/24 maxlen: 24
213.139.8.0/22 maxlen: 24
213.169.206.0/23 maxlen: 23
213.201.134.0/24 maxlen: 24
213.201.242.0/23 maxlen: 24
213.201.252.0/23 maxlen: 24
217.8.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:48:e5:26:83:a0:bc:f1:c5:34:76:30:ad:ff:1e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 2 11:03:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b514130891a0a7097094699826531b3c8365edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cf:d1:7d:2d:b9:92:51:91:48:85:c3:99:72:
53:c6:94:24:7d:96:13:a9:b8:4b:f4:eb:c1:2f:09:
b3:9d:b4:d4:3d:11:9d:59:0a:28:51:73:2b:d9:b8:
28:14:d1:c1:63:17:14:bb:e1:1d:fd:63:c7:fc:89:
8a:0d:f1:fb:8d:3e:c0:43:84:e1:02:82:48:80:ac:
9e:aa:c1:4f:4f:27:30:15:83:5c:d7:72:2a:87:5f:
9b:07:cc:d4:67:62:77:ee:5b:5c:e1:09:74:30:21:
58:d9:20:50:00:38:93:df:af:1b:ad:8a:f7:f3:61:
47:76:1a:55:15:31:9e:ae:0f:32:b8:75:46:a3:10:
ee:9e:7e:e8:09:ff:85:2f:4d:4c:56:b2:b5:bd:bd:
07:8a:a9:cc:7c:16:37:8d:c6:69:1d:4f:a6:54:ab:
d3:40:b7:30:4f:c9:90:69:82:91:99:46:82:57:e3:
2a:1e:c6:b5:8e:1b:23:36:f2:fa:3e:40:b8:c4:e7:
9b:ef:90:e3:65:1e:a1:d6:d4:b4:28:e3:87:ba:7f:
fa:95:1c:a7:70:c7:ea:88:2f:15:79:87:eb:00:95:
73:97:e7:b2:45:9a:53:da:1c:88:57:bd:6e:55:a6:
c8:9e:52:8d:1d:e6:c9:d3:4e:a0:49:22:ea:cb:ca:
05:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:51:41:30:89:1A:0A:70:97:09:46:99:82:65:31:B3:C8:36:5E:DC
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/S1FBMIkaCnCXCUaZgmUxs8g2Xtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.164.0/22
62.93.176.0/22
62.105.208.0/23
84.20.4.0/22
84.20.16.0/22
84.20.24.0/22
92.71.34.0/23
92.71.40.0-92.71.45.255
92.71.66.0/23
92.71.98.0/23
92.71.124.0/23
135.196.21.0/24
135.196.106.0/24
135.196.180.0/23
135.196.185.0/24
194.122.87.0/24
195.81.76.0/24
195.81.92.0/24
195.81.101.0/24
195.81.109.0-195.81.110.255
195.81.113.0-195.81.114.255
195.81.117.0/24
195.81.126.0/24
195.81.132.0/24
195.81.136.0/24
195.81.138.0/24
195.81.148.0/24
195.81.150.0/24
195.81.154.0/24
195.81.171.0/24
195.81.181.0/24
195.81.191.0/24
195.81.211.0/24
195.81.231.0/24
195.81.243.0/24
195.81.249.0/24
195.81.255.0/24
195.86.208.0/24
195.86.223.0/24
212.189.57.0/24
212.189.105.0/24
213.139.8.0/22
213.169.206.0/23
213.201.134.0/24
213.201.242.0/23
213.201.252.0/23
217.8.195.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b7:81:cd:9d:8f:a1:e3:fd:5a:19:02:16:8d:e3:b0:a6:8c:
e2:a4:95:d6:7b:64:6e:67:3f:b7:de:9e:49:a1:47:2c:fd:61:
e1:96:0d:af:77:72:98:a0:61:65:05:11:11:02:13:e8:b4:b7:
fe:46:d9:ab:a7:45:cf:0f:96:4e:7e:d7:5b:f8:b1:bb:80:a5:
5b:a2:0a:23:01:a1:7a:14:3b:fb:be:7a:de:57:e1:be:60:93:
95:86:62:75:5b:ce:fd:63:56:16:da:00:a0:d9:28:de:9e:8b:
34:5a:cb:34:c7:50:19:39:dd:ca:d1:89:f3:b6:bb:f8:a9:22:
1e:de:d5:80:e6:5f:97:a7:fb:df:70:d3:1e:00:88:87:94:16:
c5:9a:27:81:3f:e3:00:01:d8:cb:12:aa:49:63:27:dc:91:d8:
d9:02:16:e0:4f:c1:cb:e7:ef:ce:71:04:96:08:7b:41:e6:a8:
8e:17:40:6f:16:60:8d:61:96:ae:4b:56:e0:05:c4:3d:88:7c:
de:da:24:4e:8a:47:39:44:0a:bc:83:1c:2a:aa:52:50:1e:46:
ed:e2:b3:aa:23:f2:a0:ad:f2:63:a0:6f:fa:ba:64:c2:5b:4e:
ef:b7:a8:fe:16:ee:6d:c9:d2:ce:99:1b:2e:27:8f:f3:02:83:
f9:e0:2c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:19:54 2026 by rpki-client