Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/esG89muySIOI5dcpeV0I2k3miOc.roa
File: esG89muySIOI5dcpeV0I2k3miOc.roa (raw, json)
Hash identifier: SHUANPGP95ZVObZobegLLc1qD8rg+BY2zkX6fJu02pA=
Subject key identifier: 7A:C1:BC:F6:6B:B2:48:83:88:E5:D7:29:79:5D:08:DA:4D:E6:88:E7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0C7874C9A3EF4EAEBAB6452BFFFC2F0A8
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/esG89muySIOI5dcpeV0I2k3miOc.roa
Signing time: Tue 22 Sep 2026 05:12:08 +0000
ROA not before: Tue 22 Sep 2026 05:12:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401560
IP address blocks: 62.105.199.0/24 maxlen: 24
194.77.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:87:4c:9a:3e:f4:ea:eb:ab:64:52:bf:ff:c2:f0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 22 05:12:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ac1bcf66bb2488388e5d729795d08da4de688e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:16:9a:67:88:0a:94:df:a0:5a:c7:f8:bb:
39:b9:97:ad:a1:a4:d2:07:cb:f3:7b:61:0a:9b:22:
bd:0c:7a:21:76:20:9c:77:aa:06:9c:63:2a:71:b2:
1a:8d:7e:8b:97:51:56:c1:de:3d:14:78:0f:22:32:
84:dc:83:ab:55:a8:69:47:12:3f:75:84:dd:d2:1f:
00:51:c7:9f:80:1b:68:1a:2a:cf:72:4a:b9:9d:e1:
51:5e:ea:f1:a4:35:43:67:c3:a6:9b:39:19:1d:90:
93:a8:4a:ea:59:a6:77:bf:a5:19:a0:21:51:18:e3:
b8:10:53:fe:a8:28:07:f1:57:38:43:d9:6d:77:98:
73:2e:53:74:4b:c7:3a:46:31:49:ab:54:24:17:ad:
a9:1d:65:b1:df:ce:e6:06:4f:c9:cc:b5:ac:c2:b3:
51:63:3f:cf:37:68:b9:73:af:22:96:68:77:13:5d:
8b:ea:36:c5:87:66:14:d4:50:73:93:33:2d:91:54:
0f:43:ee:91:ee:01:01:df:4e:e4:30:d3:ce:0b:42:
42:ca:97:27:46:78:18:b3:d7:80:ee:7e:49:c0:2b:
c6:8c:50:2e:20:b4:a6:17:82:18:42:df:c1:c6:5e:
11:b9:5d:4d:dd:55:4e:a3:eb:f9:23:40:ea:eb:b0:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C1:BC:F6:6B:B2:48:83:88:E5:D7:29:79:5D:08:DA:4D:E6:88:E7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/esG89muySIOI5dcpeV0I2k3miOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.199.0/24
194.77.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:20:78:6e:4b:3d:b4:d5:d4:6f:63:7d:58:40:c8:34:56:89:
dd:eb:50:2a:39:e5:8c:c6:ae:62:03:9b:99:8b:73:c8:7b:16:
54:86:97:69:02:a5:2c:85:65:30:51:d3:85:1d:f2:40:54:37:
04:28:15:17:d2:36:c2:4f:fd:e9:4d:fb:25:67:90:e9:5e:13:
f5:8d:ee:b2:ee:5e:8c:07:f0:49:a1:7e:25:d5:88:bb:8a:aa:
6e:a6:57:da:17:02:c5:a8:1f:a6:72:14:8d:38:3d:46:36:6d:
d7:a4:36:28:a7:36:08:f7:c0:9e:6d:5c:2c:85:be:ae:9d:ee:
a7:39:c5:a1:81:c9:7b:5f:32:56:8d:05:3d:d3:6e:07:14:cf:
38:7a:68:b0:e7:8b:20:b3:5b:60:29:d6:08:bf:85:40:47:1e:
a2:5f:71:92:c4:ca:de:99:16:0e:85:59:30:25:c2:ad:00:cd:
5a:02:eb:cf:d9:60:3f:0c:33:09:3d:93:7e:02:4a:d0:2c:50:
a6:2e:3a:f6:74:8d:a0:82:28:7d:6c:6b:f8:fd:d2:a6:14:78:
3c:bc:8d:7f:78:e5:00:fd:4b:a0:98:7f:59:d8:28:77:34:a9:
16:70:cc:8b:cd:89:39:16:49:19:47:bf:d6:0d:de:ed:b6:dc:
d2:33:14:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:08:13 2026 by rpki-client