Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/S1kyEe9MiFzj7eXQWduir1kC01I.roa
File: S1kyEe9MiFzj7eXQWduir1kC01I.roa (raw, json)
Hash identifier: dImKFlqJXwYAu8buAh/W5ZkQ1FzUXl5jwoqs5Crdd64=
Subject key identifier: 4B:59:32:11:EF:4C:88:5C:E3:ED:E5:D0:59:DB:A2:AF:59:02:D3:52
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0EC60C040F277B2B80D324F4799CC21F4
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/S1kyEe9MiFzj7eXQWduir1kC01I.roa
Signing time: Tue 29 Sep 2026 08:55:58 +0000
ROA not before: Tue 29 Sep 2026 08:55:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 62.105.200.0/22 maxlen: 22
62.192.102.0/23 maxlen: 23
62.192.113.0/24 maxlen: 24
62.192.114.0/23 maxlen: 23
62.192.126.0/23 maxlen: 23
92.71.2.0/23 maxlen: 24
92.71.4.0/23 maxlen: 24
92.71.18.0/24 maxlen: 24
92.71.26.0/23 maxlen: 24
92.71.28.0/22 maxlen: 24
92.71.36.0/23 maxlen: 24
92.71.48.0/21 maxlen: 24
92.71.56.0/22 maxlen: 24
92.71.62.0/23 maxlen: 24
135.196.4.0/24 maxlen: 24
135.196.24.0/23 maxlen: 24
135.196.28.0/23 maxlen: 24
135.196.88.0/23 maxlen: 24
135.196.102.0/23 maxlen: 24
135.196.108.0/22 maxlen: 24
135.196.132.0/23 maxlen: 24
135.196.144.0/22 maxlen: 24
135.196.156.0/23 maxlen: 24
135.196.164.0/23 maxlen: 24
135.196.172.0/23 maxlen: 24
135.196.176.0/23 maxlen: 24
135.196.202.0/24 maxlen: 24
135.196.204.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
212.189.118.0/24 maxlen: 24
213.169.204.0/23 maxlen: 23
213.169.240.0/23 maxlen: 23
213.201.140.0/24 maxlen: 24
213.201.148.0/24 maxlen: 24
213.201.154.0/23 maxlen: 24
213.201.158.0/24 maxlen: 24
213.201.163.0/24 maxlen: 24
213.201.166.0/23 maxlen: 24
213.201.171.0/24 maxlen: 24
213.201.174.0/23 maxlen: 24
213.201.179.0/24 maxlen: 24
213.201.182.0/23 maxlen: 24
213.201.186.0/23 maxlen: 24
213.201.190.0/23 maxlen: 24
213.201.194.0/23 maxlen: 24
213.201.196.0/23 maxlen: 24
213.201.198.0/24 maxlen: 24
213.201.200.0/24 maxlen: 24
213.201.202.0/24 maxlen: 24
213.201.204.0/24 maxlen: 24
213.201.208.0/23 maxlen: 24
213.201.214.0/23 maxlen: 24
213.201.218.0/23 maxlen: 24
213.201.222.0/23 maxlen: 24
213.201.226.0/23 maxlen: 24
213.201.228.0/23 maxlen: 24
213.201.234.0/23 maxlen: 24
213.201.238.0/23 maxlen: 24
217.8.198.0/24 maxlen: 24
217.8.202.0/24 maxlen: 24
217.8.218.0/24 maxlen: 24
217.8.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:60:c0:40:f2:77:b2:b8:0d:32:4f:47:99:cc:21:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 29 08:55:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b593211ef4c885ce3ede5d059dba2af5902d352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:8d:82:12:38:b6:26:d8:21:78:67:7d:e7:
50:60:cb:d3:03:7b:d3:53:ba:a9:a6:d7:f4:d8:20:
ec:3f:c2:fb:27:50:4f:51:52:aa:e2:48:ab:3a:5b:
a4:55:7f:b7:98:20:84:8d:13:29:c9:b3:2d:7e:e7:
01:03:3d:f8:34:2f:a0:67:8c:25:5b:02:fd:4f:08:
4d:b4:6f:34:dc:45:40:26:82:2d:96:ff:9a:d7:f5:
43:fb:2e:17:8a:ad:ba:a7:58:14:a7:df:f0:fb:af:
b3:0f:f2:96:a9:89:a3:67:45:56:cd:fe:2b:6e:8a:
22:ef:8c:b9:1e:90:10:85:f5:2c:2a:c4:c1:27:71:
57:a3:5c:dd:c4:51:7b:2e:ae:89:88:fe:d7:c0:08:
0c:bf:65:37:80:c9:13:4e:92:61:ee:8b:d6:53:21:
aa:88:6c:be:ad:f8:c1:a6:92:28:2b:e8:5d:90:1f:
6b:3e:4e:22:45:8b:47:5f:9b:e2:d0:8d:a1:19:91:
df:fe:c0:e4:4f:ec:5e:92:01:de:af:dd:ef:35:6c:
d4:7e:cd:44:ba:45:76:b7:f5:bf:e6:d6:39:9b:10:
f5:87:60:b2:e0:81:34:db:96:b8:37:0c:ee:b8:3e:
a7:ca:af:4a:ae:f1:42:8f:72:e3:68:d9:8f:f6:58:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:59:32:11:EF:4C:88:5C:E3:ED:E5:D0:59:DB:A2:AF:59:02:D3:52
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/S1kyEe9MiFzj7eXQWduir1kC01I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.200.0/22
62.192.102.0/23
62.192.113.0-62.192.115.255
62.192.126.0/23
92.71.2.0-92.71.5.255
92.71.18.0/24
92.71.26.0-92.71.31.255
92.71.36.0/23
92.71.48.0-92.71.59.255
92.71.62.0/23
135.196.4.0/24
135.196.24.0/23
135.196.28.0/23
135.196.88.0/23
135.196.102.0/23
135.196.108.0/22
135.196.132.0/23
135.196.144.0/22
135.196.156.0/23
135.196.164.0/23
135.196.172.0/23
135.196.176.0/23
135.196.202.0/24
135.196.204.0/24
195.86.223.0/24
212.189.118.0/24
213.169.204.0/23
213.169.240.0/23
213.201.140.0/24
213.201.148.0/24
213.201.154.0/23
213.201.158.0/24
213.201.163.0/24
213.201.166.0/23
213.201.171.0/24
213.201.174.0/23
213.201.179.0/24
213.201.182.0/23
213.201.186.0/23
213.201.190.0/23
213.201.194.0-213.201.198.255
213.201.200.0/24
213.201.202.0/24
213.201.204.0/24
213.201.208.0/23
213.201.214.0/23
213.201.218.0/23
213.201.222.0/23
213.201.226.0-213.201.229.255
213.201.234.0/23
213.201.238.0/23
217.8.198.0/24
217.8.202.0/24
217.8.218.0/24
217.8.222.0/23
Signature Algorithm: sha256WithRSAEncryption
e5:fe:f0:ed:88:1a:0b:67:19:b7:3f:a3:a1:03:98:32:75:4a:
3a:00:75:e8:1c:0a:d6:7f:3d:05:db:fc:8e:ac:be:ca:80:df:
55:27:bb:5d:6a:2c:f1:c3:29:11:f0:a6:9d:93:5d:47:ea:c0:
93:92:3c:97:cd:57:c3:10:31:ae:5d:eb:38:95:92:b7:82:2a:
9a:2e:ca:34:58:13:73:ee:79:e5:ed:4d:f4:37:fb:9d:17:c5:
a1:ae:e9:77:f0:bb:d1:e2:20:52:a7:19:6d:f3:e0:db:35:ed:
11:d7:7a:ad:bf:e6:e8:a1:7a:88:4f:37:f1:37:8e:f8:b8:62:
a1:e4:70:58:84:b3:a4:3b:ab:56:c1:24:3e:a9:8a:90:76:bb:
87:47:ed:96:66:82:26:71:36:a8:29:c7:cc:79:1f:50:56:6d:
07:f7:3a:9f:08:57:83:d2:6d:69:60:42:79:47:d7:14:59:fe:
a2:f3:83:e3:2e:13:c7:e1:76:26:b6:f8:af:40:3c:f4:4a:9d:
9a:97:ad:af:08:ad:06:e5:32:3c:ce:95:3c:98:3f:b5:97:8d:
be:9d:85:a9:49:2a:79:46:b0:da:e5:3c:f2:7f:22:bf:71:94:
76:94:df:d5:bf:89:5b:95:7e:b7:85:4d:09:fb:e6:c9:2a:94:
b0:8e:98:b6
-----BEGIN CERTIFICATE-----
MIIGezCCBWOgAwIBAgISAaDsYMBA8neyuA0yT0eZzCH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTI5MDg1NTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjU5MzIxMWVmNGM4ODVjZTNlZGU1ZDA1OWRiYTJhZjU5MDJkMzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh+NghI4tibYIXhnfedQYMvTA3vT
U7qpptf02CDsP8L7J1BPUVKq4kirOlukVX+3mCCEjRMpybMtfucBAz34NC+gZ4wl
WwL9TwhNtG803EVAJoItlv+a1/VD+y4Xiq26p1gUp9/w+6+zD/KWqYmjZ0VWzf4r
booi74y5HpAQhfUsKsTBJ3FXo1zdxFF7Lq6JiP7XwAgMv2U3gMkTTpJh7ovWUyGq
iGy+rfjBppIoK+hdkB9rPk4iRYtHX5vi0I2hGZHf/sDkT+xekgHer93vNWzUfs1E
ukV2t/W/5tY5mxD1h2Cy4IE025a4NwzuuD6nyq9KrvFCj3LjaNmP9liWeQIDAQAB
o4IDhzCCA4MwHQYDVR0OBBYEFEtZMhHvTIhc4+3l0Fnboq9ZAtNSMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvUzFreUVlOU1pRnpqN2VYUVdkdWlyMWtDMDFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBmwYIKwYBBQUHAQcBAf8EggGKMIIBhjCCAYIEAgABMIIB
egMEAj5pyAMEAT7AZjAMAwQAPsBxAwQCPsBwAwQBPsB+MAwDBAFcRwIDBAFcRwQD
BABcRxIwDAMEAVxHGgMEBVxHAAMEAVxHJDAMAwQEXEcwAwQCXEc4AwQBXEc+AwQA
h8QEAwQBh8QYAwQBh8QcAwQBh8RYAwQBh8RmAwQCh8RsAwQBh8SEAwQCh8SQAwQB
h8ScAwQBh8SkAwQBh8SsAwQBh8SwAwQAh8TKAwQAh8TMAwQAw1bfAwQA1L12AwQB
1anMAwQB1anwAwQA1cmMAwQA1cmUAwQB1cmaAwQA1cmeAwQA1cmjAwQB1cmmAwQA
1cmrAwQB1cmuAwQA1cmzAwQB1cm2AwQB1cm6AwQB1cm+MAwDBAHVycIDBADVycYD
BADVycgDBADVycoDBADVycwDBAHVydADBAHVydYDBAHVydoDBAHVyd4wDAMEAdXJ
4gMEAdXJ5AMEAdXJ6gMEAdXJ7gMEANkIxgMEANkIygMEANkI2gMEAdkI3jANBgkq
hkiG9w0BAQsFAAOCAQEA5f7w7YgaC2cZtz+joQOYMnVKOgB16BwK1n89Bdv8jqy+
yoDfVSe7XWos8cMpEfCmnZNdR+rAk5I8l81XwxAxrl3rOJWSt4Iqmi7KNFgTc+55
5e1N9Df7nRfFoa7pd/C70eIgUqcZbfPg2zXtEdd6rb/m6KF6iE838TeO+LhioeRw
WISzpDurVsEkPqmKkHa7h0ftlmaCJnE2qCnHzHkfUFZtB/c6nwhXg9JtaWBCeUfX
FFn+ovOD4y4Tx+F2Jrb4r0A89EqdmpetrwitBuUyPM6VPJg/tZeNvp2FqUkqeUaw
2uU88n8iv3GUdpTf1b+JW5V+t4VNCfvmySqUsI6Ytg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 00:16:06 2026 by rpki-client