Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/j7HYXLsYH-J0CdE4gB9aGR2xll4.roa
File: j7HYXLsYH-J0CdE4gB9aGR2xll4.roa (raw, json)
Hash identifier: RYOJ3p2jwnULnPtXKj8qrkRnUHFM+g2j4nSchSTDauU=
Subject key identifier: 8F:B1:D8:5C:BB:18:1F:E2:74:09:D1:38:80:1F:5A:19:1D:B1:96:5E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A10AFFC5942272C13C092ED2BDBCBECCA2
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/j7HYXLsYH-J0CdE4gB9aGR2xll4.roa
Signing time: Mon 05 Oct 2026 07:38:16 +0000
ROA not before: Mon 05 Oct 2026 07:38:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 62.105.219.0/24 maxlen: 24
89.149.148.0/24 maxlen: 24
194.77.208.0/21 maxlen: 24
194.77.235.0/24 maxlen: 24
195.21.128.0/24 maxlen: 24
195.21.148.0/24 maxlen: 24
195.21.150.0/23 maxlen: 24
212.189.52.0/23 maxlen: 24
212.189.62.0/23 maxlen: 23
212.189.64.0/23 maxlen: 24
212.189.70.0/23 maxlen: 24
212.189.86.0/23 maxlen: 24
212.189.92.0/23 maxlen: 24
212.189.108.0/23 maxlen: 24
217.8.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:ff:c5:94:22:72:c1:3c:09:2e:d2:bd:bc:be:cc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 5 07:38:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fb1d85cbb181fe27409d138801f5a191db1965e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:99:32:b4:65:47:5a:8e:23:46:17:c3:82:
ba:5d:5f:a2:9a:4c:4f:a5:e0:56:07:4d:ee:be:ec:
c5:c7:b2:17:e0:33:67:28:18:52:5b:fc:c1:38:73:
59:68:62:67:3d:20:1d:c1:3f:e3:32:3e:62:fb:53:
da:05:e9:c7:60:2b:1c:38:3c:3c:55:5b:53:7a:4c:
15:26:fd:cd:86:d4:51:02:72:7b:be:bb:f6:75:68:
16:3d:fd:9e:d0:31:fa:2c:10:71:0e:4a:d0:f6:1d:
f9:71:42:8d:62:0c:cd:ae:2a:cd:75:69:f2:ed:d3:
b7:88:17:44:5d:4d:6a:ac:e6:a3:71:5b:5e:a5:af:
92:20:f6:8f:10:07:ce:5e:80:56:7b:93:80:b8:07:
c4:10:3f:e5:81:80:52:9e:5e:38:b1:9a:40:e5:f0:
d0:b1:43:6c:da:a5:31:5f:30:7b:68:7b:1f:af:00:
3f:cb:11:c2:e7:60:20:2d:0c:c9:90:67:69:8a:46:
52:18:f7:3d:e8:39:2e:76:29:2f:37:22:0b:9f:66:
25:c5:9f:51:d5:2e:87:e6:2b:fa:46:96:22:ac:8c:
ed:5c:6a:4d:15:b2:d4:b2:f7:3d:c7:e3:1f:03:44:
99:bc:65:e2:45:9c:3c:6e:20:e3:f0:94:0a:20:be:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B1:D8:5C:BB:18:1F:E2:74:09:D1:38:80:1F:5A:19:1D:B1:96:5E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/j7HYXLsYH-J0CdE4gB9aGR2xll4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.219.0/24
89.149.148.0/24
194.77.208.0/21
194.77.235.0/24
195.21.128.0/24
195.21.148.0/24
195.21.150.0/23
212.189.52.0/23
212.189.62.0-212.189.65.255
212.189.70.0/23
212.189.86.0/23
212.189.92.0/23
212.189.108.0/23
217.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:92:e3:4e:d3:82:dc:8f:b7:19:be:85:d3:ef:3f:c4:2b:32:
8d:a5:a2:bf:52:92:52:be:2c:b2:b5:55:b6:e8:c0:a9:c5:03:
d2:ab:fb:03:fc:96:e2:95:f6:a3:e3:3c:f0:80:ae:89:c0:58:
05:11:74:d5:14:ee:bb:a7:1c:e4:7c:be:cd:61:49:71:9c:f6:
49:c6:6d:ff:d8:56:91:a5:98:c7:38:11:78:00:1b:c6:c0:1e:
3b:73:8a:8c:5d:af:ab:d4:f8:48:af:ae:e7:f4:fd:36:5f:44:
17:2f:92:b0:0d:5b:46:0f:0c:ea:ec:06:33:bc:04:17:6c:08:
ed:65:5b:bc:6b:c7:41:d6:9c:3c:d0:09:b5:2c:2f:69:20:ae:
cc:ad:17:be:7b:8e:83:26:a1:fa:bf:a9:45:4a:0e:07:e4:7f:
93:b8:12:88:92:dd:5b:c6:e4:b0:83:91:9a:f1:59:45:8b:f1:
02:1d:a4:6a:8c:2c:eb:c5:fc:ae:0e:1f:a9:d9:6d:0b:8b:89:
63:b6:4c:11:26:59:e0:75:ca:28:3a:e6:09:cc:b9:b0:75:1c:
4c:95:52:76:d8:a3:84:7f:51:89:90:26:69:c5:d6:22:17:1a:
b1:d1:55:bd:36:31:63:82:1c:13:07:9a:b2:2e:d5:f8:12:a9:
bf:09:c2:50
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAaEK/8WUInLBPAku0r28vsyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYxMDA1MDczODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmIxZDg1Y2JiMTgxZmUyNzQwOWQxMzg4MDFmNWExOTFkYjE5NjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOyZMrRlR1qOI0YXw4K6XV+imkxP
peBWB03uvuzFx7IX4DNnKBhSW/zBOHNZaGJnPSAdwT/jMj5i+1PaBenHYCscODw8
VVtTekwVJv3NhtRRAnJ7vrv2dWgWPf2e0DH6LBBxDkrQ9h35cUKNYgzNrirNdWny
7dO3iBdEXU1qrOajcVtepa+SIPaPEAfOXoBWe5OAuAfEED/lgYBSnl44sZpA5fDQ
sUNs2qUxXzB7aHsfrwA/yxHC52AgLQzJkGdpikZSGPc96DkudikvNyILn2YlxZ9R
1S6H5iv6RpYirIztXGpNFbLUsvc9x+MfA0SZvGXiRZw8biDj8JQKIL4xdQIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFI+x2Fy7GB/idAnROIAfWhkdsZZeMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvajdIWVhMc1lILUowQ2RFNGdCOWFHUjJ4bGw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQAPmnbAwQA
WZWUAwQDwk3QAwQAwk3rAwQAwxWAAwQAwxWUAwQBwxWWAwQB1L00MAwDBAHUvT4D
BAHUvUADBAHUvUYDBAHUvVYDBAHUvVwDBAHUvWwDBADZCMQwDQYJKoZIhvcNAQEL
BQADggEBALqS407TgtyPtxm+hdPvP8QrMo2lor9SklK+LLK1VbbowKnFA9Kr+wP8
luKV9qPjPPCAronAWAURdNUU7runHOR8vs1hSXGc9knGbf/YVpGlmMc4EXgAG8bA
Hjtzioxdr6vU+Eivruf0/TZfRBcvkrANW0YPDOrsBjO8BBdsCO1lW7xrx0HWnDzQ
CbUsL2kgrsytF757joMmofq/qUVKDgfkf5O4EoiS3VvG5LCDkZrxWUWL8QIdpGqM
LOvF/K4OH6nZbQuLiWO2TBEmWeB1yig65gnMubB1HEyVUnbYo4R/UYmQJmnF1iIX
GrHRVb02MWOCHBMHmrIu1fgSqb8JwlA=
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:16:53 2026 by rpki-client