Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fWOx4KZSxhhcd4nh1xVnFk0XWZE.roa
File: fWOx4KZSxhhcd4nh1xVnFk0XWZE.roa (raw, json)
Hash identifier: BCj390pWcxxr6MBugb/vNXvLtr1jXy2nMwfuZ71emGA=
Subject key identifier: 7D:63:B1:E0:A6:52:C6:18:5C:77:89:E1:D7:15:67:16:4D:17:59:91
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F45C1011DC66721A1CFB9082E95C3DEF6
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fWOx4KZSxhhcd4nh1xVnFk0XWZE.roa
Signing time: Thu 09 Jul 2026 07:21:44 +0000
ROA not before: Thu 09 Jul 2026 07:21:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 62.93.164.0/22 maxlen: 24
62.93.176.0/22 maxlen: 24
62.105.208.0/23 maxlen: 23
84.20.4.0/22 maxlen: 24
84.20.16.0/22 maxlen: 24
84.20.24.0/22 maxlen: 24
92.71.34.0/23 maxlen: 24
92.71.40.0/22 maxlen: 24
92.71.44.0/23 maxlen: 24
92.71.66.0/23 maxlen: 24
92.71.98.0/23 maxlen: 24
92.71.124.0/23 maxlen: 24
135.196.21.0/24 maxlen: 24
135.196.106.0/24 maxlen: 24
135.196.180.0/23 maxlen: 23
135.196.185.0/24 maxlen: 24
194.122.87.0/24 maxlen: 24
195.86.208.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
212.189.105.0/24 maxlen: 24
213.139.8.0/22 maxlen: 24
213.169.206.0/23 maxlen: 23
213.201.134.0/24 maxlen: 24
213.201.242.0/23 maxlen: 24
213.201.252.0/23 maxlen: 24
217.8.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:c1:01:1d:c6:67:21:a1:cf:b9:08:2e:95:c3:de:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 9 07:21:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d63b1e0a652c6185c7789e1d71567164d175991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:81:d7:92:94:09:cd:cb:66:db:7d:16:da:
f8:c3:9c:4f:94:e6:25:00:f1:da:fa:fa:0c:80:4b:
d5:90:e6:d4:4d:43:c7:47:d0:0f:28:f8:6c:54:0e:
04:f1:39:70:90:3a:07:bb:cf:12:ee:77:c2:27:1b:
7a:97:ca:41:35:89:49:c4:98:30:b8:29:ab:5b:c0:
f3:5b:db:f6:a8:10:4f:e0:8d:1a:24:29:db:77:78:
68:06:b1:23:eb:0b:36:bb:42:26:76:09:48:60:4f:
e3:9a:10:18:52:f8:01:ba:1b:80:c3:9f:e5:78:98:
7d:da:cd:86:4a:39:b1:fb:7d:3f:4f:5d:bb:48:9d:
bb:d6:8b:a3:5c:35:82:32:ad:0f:95:4e:36:58:be:
b2:84:fe:a9:92:53:1a:0e:db:a1:c3:b8:b5:81:1a:
42:b7:08:bc:6a:ba:d3:1e:5c:7b:1f:d4:fe:fa:0d:
48:9a:c9:24:f3:03:8b:e6:b7:60:79:48:a9:b4:96:
0d:7b:85:41:35:54:b3:c8:0e:71:71:c4:4e:c5:a5:
1d:8d:46:ef:e5:6d:0d:70:18:22:1a:c5:36:76:54:
4a:2c:9e:45:86:d4:c3:f1:f5:7f:49:1c:8b:4f:b2:
ab:c0:d4:6f:65:7e:c0:a0:6b:1e:1b:04:e9:52:cb:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:63:B1:E0:A6:52:C6:18:5C:77:89:E1:D7:15:67:16:4D:17:59:91
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fWOx4KZSxhhcd4nh1xVnFk0XWZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.164.0/22
62.93.176.0/22
62.105.208.0/23
84.20.4.0/22
84.20.16.0/22
84.20.24.0/22
92.71.34.0/23
92.71.40.0-92.71.45.255
92.71.66.0/23
92.71.98.0/23
92.71.124.0/23
135.196.21.0/24
135.196.106.0/24
135.196.180.0/23
135.196.185.0/24
194.122.87.0/24
195.86.208.0/24
195.86.223.0/24
212.189.105.0/24
213.139.8.0/22
213.169.206.0/23
213.201.134.0/24
213.201.242.0/23
213.201.252.0/23
217.8.195.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:f2:84:31:77:6b:e6:8c:52:dc:e5:0e:ab:f8:7b:25:4f:3c:
ef:18:bd:3b:e2:e1:b8:15:ad:b2:4a:ea:ce:38:bf:06:f2:2d:
a2:b5:29:2f:8f:15:29:00:9f:de:0a:2d:8b:98:ca:e1:d0:e2:
76:3d:02:29:93:f8:b5:ff:e2:8d:eb:6a:0c:0d:a9:13:74:2a:
d7:c7:c5:2e:63:3a:e2:c2:5c:b5:0a:55:59:bf:6c:98:9d:2d:
47:39:6b:1d:1c:be:91:10:6d:64:ce:1a:f2:ca:29:c5:c7:a8:
87:2c:a0:d7:c9:0e:ff:ad:fd:ac:24:5d:6d:8e:21:98:06:31:
a7:f8:82:32:a6:7f:1f:20:00:45:e1:e3:02:3e:4c:0c:c5:5a:
80:38:a4:d7:41:66:e7:21:88:bf:a0:c7:e0:b5:c6:8a:80:0b:
39:8b:c1:f0:10:23:fd:36:84:bc:23:95:64:1a:8f:41:b4:71:
93:9c:55:9b:12:19:ba:ea:81:1d:7d:aa:7e:80:7e:d3:0a:19:
fc:94:e9:e3:03:d6:f2:bf:33:19:43:74:eb:83:54:a8:15:28:
57:6a:34:50:dc:29:86:f9:44:7e:d7:94:0a:2b:c6:67:46:fc:
fc:15:55:81:29:1d:a0:40:a6:ee:c4:23:f6:3b:ed:65:80:3c:
2b:a9:7c:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:53 2026 by rpki-client