Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fLJUjzlX8uu85th2X2cYMQLHsGk.roa
File: fLJUjzlX8uu85th2X2cYMQLHsGk.roa (raw, json)
Hash identifier: Ca58Txpj4MTcXPEJh/Z1xZK154dtomKR8O70nL1CiX4=
Subject key identifier: 7C:B2:54:8F:39:57:F2:EB:BC:E6:D8:76:5F:67:18:31:02:C7:B0:69
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F1C605BFAFDEAEE5D236D28501F0FED70
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fLJUjzlX8uu85th2X2cYMQLHsGk.roa
Signing time: Wed 01 Jul 2026 06:31:44 +0000
ROA not before: Wed 01 Jul 2026 06:31:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132998
IP address blocks: 62.105.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:60:5b:fa:fd:ea:ee:5d:23:6d:28:50:1f:0f:ed:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 1 06:31:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cb2548f3957f2ebbce6d8765f67183102c7b069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:8f:7c:ed:49:16:93:29:a8:7e:4b:b4:7c:
8d:ab:0a:53:24:dd:21:77:ea:53:10:e0:87:0b:e3:
fe:ca:2f:69:df:22:a8:7a:dd:d2:28:62:1b:03:e1:
41:5c:e4:d8:a9:c2:dd:7f:96:4d:15:0c:29:9a:ad:
31:02:87:b6:9c:65:14:0c:d1:3b:c9:f2:3a:13:8c:
18:14:5c:97:06:fd:84:6a:fb:0a:dc:c2:8d:f3:e6:
13:2e:a7:25:a7:fd:b6:f6:f0:fb:d0:84:c8:70:3e:
03:68:9b:d1:10:ab:5f:52:ee:57:a8:5f:cd:4e:77:
16:ab:24:5d:0c:34:d9:c0:7d:56:93:99:53:46:d4:
09:e3:56:8c:7b:0a:4b:af:80:7e:4a:af:8f:d8:54:
87:af:20:43:55:77:a5:3a:bc:ae:59:97:8e:e3:20:
78:97:5a:96:e5:7c:93:bc:af:e7:96:56:8a:91:2d:
02:37:13:d7:01:36:f8:b1:23:98:2a:53:95:22:43:
d0:62:ae:e3:33:f2:c4:77:7d:24:d5:bb:7a:b0:17:
ab:e7:57:ea:30:84:45:53:6a:fa:51:f4:4d:3e:72:
5a:ad:66:2c:a4:87:d5:3d:e6:2c:b8:70:9a:4f:43:
4b:81:72:d5:09:d4:7f:39:ff:91:be:b8:a7:7b:b0:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B2:54:8F:39:57:F2:EB:BC:E6:D8:76:5F:67:18:31:02:C7:B0:69
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fLJUjzlX8uu85th2X2cYMQLHsGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.194.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e1:e5:f6:16:b8:51:67:56:a2:61:23:b6:62:8a:26:dc:ac:
88:43:c7:f4:9d:b6:21:99:1f:fe:13:51:ea:49:bd:d1:49:e8:
6d:b0:61:64:17:64:3b:92:1c:23:64:db:ac:82:15:e7:ac:a1:
d1:b6:2c:a2:36:36:a1:d0:e9:df:17:a5:34:81:4d:a6:c4:12:
ae:e8:fc:bd:7f:63:05:32:d9:3c:6a:d9:05:83:dd:2f:95:44:
69:e9:bb:f2:72:90:15:0a:ce:2f:fb:d2:ae:f2:2c:80:6c:ba:
a5:74:86:4e:19:ba:45:ba:e3:e5:bb:20:b3:f4:c6:1d:f0:96:
d6:44:eb:d3:7f:11:46:ae:bf:9f:ce:b5:6d:f1:5d:7a:35:31:
32:1a:f4:67:d2:d5:b6:2f:dd:f8:c3:8a:e4:36:97:a5:45:98:
b4:2f:5f:eb:16:7e:5d:49:a5:c8:85:42:40:7c:79:2b:93:ad:
f3:43:79:9c:da:0b:d7:3a:81:31:6b:dc:dc:69:5e:be:22:53:
e8:bd:17:94:4a:bb:08:b8:ab:45:ee:4a:a2:e2:76:e5:88:63:
fb:fa:f0:91:b1:c2:8a:f5:ab:f9:5f:96:75:69:e4:fa:94:95:
59:24:a7:92:94:6c:aa:08:30:42:00:f9:bb:11:f7:b0:f2:4a:
91:19:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:35 2026 by rpki-client