Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Xn-yTRVP3_gZZ1oBfqmadz3wsTM.roa
File: Xn-yTRVP3_gZZ1oBfqmadz3wsTM.roa (raw, json)
Hash identifier: P0E+hESBNGf4vjkkoq52zUxxRPBo87ROZjlm0WnMvKA=
Subject key identifier: 5E:7F:B2:4D:15:4F:DF:F8:19:67:5A:01:7E:A9:9A:77:3D:F0:B1:33
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0BF74093A9B966EC6A4702B89AF3DE870
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Xn-yTRVP3_gZZ1oBfqmadz3wsTM.roa
Signing time: Sun 20 Sep 2026 15:34:07 +0000
ROA not before: Sun 20 Sep 2026 15:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214677
IP address blocks: 62.105.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:74:09:3a:9b:96:6e:c6:a4:70:2b:89:af:3d:e8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 20 15:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e7fb24d154fdff819675a017ea99a773df0b133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:b0:20:b2:09:67:0b:26:e7:59:e0:21:6f:
c6:69:d5:e3:cb:c7:14:4d:64:80:98:c5:0f:09:08:
92:4b:b3:cc:17:6b:4f:60:5c:c8:73:6e:1e:3c:9e:
aa:70:b9:19:8f:f5:fb:7b:95:bc:bd:61:ad:db:10:
81:2a:72:8b:6d:8b:df:3e:ce:55:37:c1:4f:6d:19:
c4:71:dc:dc:4c:98:23:de:30:95:e0:1f:d1:1d:97:
f0:13:e8:24:b1:6d:57:3c:76:dc:35:39:b6:ef:4d:
2a:c7:99:a6:d1:a3:15:1b:cc:1d:ff:04:4a:d9:5d:
9a:cf:83:79:70:6c:47:c1:42:ba:c4:f8:7d:76:1a:
d5:66:e7:f7:00:51:61:9e:93:fc:11:e0:ad:7a:b2:
55:79:38:62:ff:ff:55:5d:4b:04:11:b1:20:3c:e2:
78:c8:3c:e4:13:e9:c7:bf:ef:25:e6:2a:13:7e:77:
90:f1:2e:c3:0a:cc:56:c1:f9:68:73:dc:81:6c:b2:
77:8e:3b:35:1b:e8:ff:6a:5b:0f:ff:5f:20:48:2f:
95:96:61:d1:6d:32:ee:84:4e:aa:f1:89:57:ae:8e:
d3:41:e3:dd:8c:a7:c9:0f:02:8c:c4:b1:60:1c:25:
16:00:eb:8d:64:98:aa:c4:01:67:9e:98:9b:4d:8e:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7F:B2:4D:15:4F:DF:F8:19:67:5A:01:7E:A9:9A:77:3D:F0:B1:33
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Xn-yTRVP3_gZZ1oBfqmadz3wsTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.220.0/22
Signature Algorithm: sha256WithRSAEncryption
49:10:ce:44:25:6f:67:9b:bb:0a:06:1d:52:1f:7f:bc:0e:37:
8b:11:08:aa:fb:d4:2e:82:4c:79:51:23:7b:19:f8:24:c4:a3:
23:fe:5f:fd:dd:35:6b:af:6d:52:df:2c:9a:99:9e:dc:d7:7a:
67:93:8f:09:d2:b1:bd:e6:22:c1:46:34:6b:b5:dd:c1:18:d2:
01:4c:2a:92:54:c2:e0:c9:83:fd:2d:fc:a3:fb:84:51:1e:2f:
70:49:db:d2:33:bf:23:95:95:2d:35:29:5b:67:82:d1:70:64:
b4:80:9d:89:7d:29:6f:fb:77:ad:bd:be:1a:44:44:00:e2:34:
2c:7b:43:f8:94:74:af:89:d7:9d:95:63:0c:a6:c8:42:4a:c9:
6d:13:c7:bd:67:4f:06:99:19:cf:f8:a0:f8:c5:20:b9:ff:e8:
a4:6b:aa:65:67:e9:80:99:76:0a:dc:60:11:0a:70:38:13:78:
d1:93:2c:9b:93:d1:c9:09:fd:0b:da:30:19:5e:6e:14:ca:c1:
8d:4c:2b:4e:6d:e0:c8:a0:b1:0f:32:3c:5b:40:52:91:31:ef:
7d:d0:b5:7e:6f:ca:7a:56:4c:35:8b:b8:0d:a3:89:3d:1d:00:
2d:8e:40:10:64:de:e4:1f:55:0f:72:71:23:4a:0f:c6:48:13:
3c:5f:9a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:20:07 2026 by rpki-client