Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pB6HZBXvqZqpuHeVnYeuzXnCT9o.roa
File: pB6HZBXvqZqpuHeVnYeuzXnCT9o.roa (raw, json)
Hash identifier: tUeMrsw9bNygxg6juZCLkFMDxPqeFQQ4D7ckcvHICW0=
Subject key identifier: A4:1E:87:64:15:EF:A9:9A:A9:B8:77:95:9D:87:AE:CD:79:C2:4F:DA
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F6A42112A85330101A8E5789F7AEA6A36
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pB6HZBXvqZqpuHeVnYeuzXnCT9o.roa
Signing time: Thu 16 Jul 2026 09:29:02 +0000
ROA not before: Thu 16 Jul 2026 09:29:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 62.132.3.0/24 maxlen: 24
77.67.23.0/24 maxlen: 24
77.67.89.0/24 maxlen: 24
194.77.71.0/24 maxlen: 24
195.162.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:42:11:2a:85:33:01:01:a8:e5:78:9f:7a:ea:6a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 16 09:29:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a41e876415efa99aa9b877959d87aecd79c24fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:cd:84:73:6e:bd:10:4d:12:d7:e6:dd:28:
21:28:97:7c:4b:f6:56:8c:c5:5f:9b:57:b8:ca:13:
21:ad:d2:70:10:af:95:db:28:bf:9d:c8:64:f6:33:
b9:a1:40:91:89:ce:fe:9a:15:af:6a:50:2c:a1:35:
02:5a:e0:0b:67:f6:33:09:a9:e9:68:9d:f8:9b:76:
a0:e4:f1:98:75:e2:97:11:89:df:71:38:28:f2:95:
1e:47:d3:d5:58:ac:99:d9:26:68:61:9e:3d:de:9e:
cf:9f:22:d7:87:c7:90:aa:b2:5c:25:2d:24:66:44:
d6:ce:c6:76:70:14:96:21:5b:4f:1e:3b:dc:d1:1f:
ef:9a:5f:d2:dd:c7:a7:21:cd:3a:61:79:dc:4e:2d:
6a:b2:42:9a:ab:4f:14:56:31:61:85:e9:7e:43:4e:
e2:9d:73:9e:7f:cf:25:b2:a4:44:5b:21:ec:3a:2a:
ff:6f:4a:4b:97:81:1a:ee:a1:61:f8:bb:67:b4:6a:
af:78:79:c5:77:f6:17:77:21:e1:1f:17:38:aa:1a:
0d:ec:d8:80:57:4d:5e:66:7c:8b:d0:9d:e9:69:b2:
75:81:b3:7d:f4:64:31:66:99:7c:9b:fa:b6:a9:fa:
9d:e0:12:0f:d7:57:37:ed:d0:4c:c4:dc:da:82:e2:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:87:64:15:EF:A9:9A:A9:B8:77:95:9D:87:AE:CD:79:C2:4F:DA
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pB6HZBXvqZqpuHeVnYeuzXnCT9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.3.0/24
77.67.23.0/24
77.67.89.0/24
194.77.71.0/24
195.162.246.0/24
Signature Algorithm: sha256WithRSAEncryption
74:48:58:35:b9:93:fb:4c:6c:3a:f2:8f:59:39:e1:8f:3b:d6:
7c:a7:60:77:c3:47:50:4c:5f:12:d7:45:52:f8:7c:e0:7c:5e:
ff:4f:c1:b2:60:29:7d:20:75:b4:e8:08:1e:bf:e3:6f:6d:31:
0c:c3:9e:e9:4c:2f:93:dd:e2:36:22:aa:77:e6:8c:f5:43:af:
a7:18:89:ad:5e:41:25:34:cc:df:60:9f:c5:07:b9:87:ff:36:
9e:69:6d:6c:98:e8:22:e1:45:23:5c:31:70:79:af:f7:f3:d9:
4c:b2:0c:5b:fb:c7:2a:ab:ee:8d:8d:71:99:3c:ec:34:6e:1d:
ba:5a:e8:fc:a1:72:1d:1e:f8:02:80:14:ac:d4:a8:73:f1:e8:
03:f5:64:01:1d:9c:f2:c0:ca:8e:dc:67:b5:9e:c7:72:7a:1d:
1d:5e:ac:c6:ab:51:39:b4:8e:8c:16:85:3c:24:5f:96:09:d6:
60:3a:cc:12:0b:f5:af:3a:d4:cc:1b:20:38:c6:6c:ec:89:8d:
a6:55:d4:10:80:38:87:4a:b4:fa:4b:ce:34:04:73:96:32:e0:
eb:8c:ba:22:17:a6:62:a0:71:1d:fc:85:c3:87:9d:cd:ac:4d:
73:be:42:4b:4e:ed:27:c3:7c:3f:99:aa:c4:27:5f:f5:f1:7f:
d3:d5:56:8a
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ9qQhEqhTMBAajleJ966mo2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNzE2MDkyOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDFlODc2NDE1ZWZhOTlhYTliODc3OTU5ZDg3YWVjZDc5YzI0ZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq23NhHNuvRBNEtfm3SghKJd8S/ZW
jMVfm1e4yhMhrdJwEK+V2yi/nchk9jO5oUCRic7+mhWvalAsoTUCWuALZ/YzCanp
aJ34m3ag5PGYdeKXEYnfcTgo8pUeR9PVWKyZ2SZoYZ493p7PnyLXh8eQqrJcJS0k
ZkTWzsZ2cBSWIVtPHjvc0R/vml/S3cenIc06YXncTi1qskKaq08UVjFhhel+Q07i
nXOef88lsqREWyHsOir/b0pLl4Ea7qFh+LtntGqveHnFd/YXdyHhHxc4qhoN7NiA
V01eZnyL0J3pabJ1gbN99GQxZpl8m/q2qfqd4BIP11c37dBMxNzaguJKowIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKQeh2QV76maqbh3lZ2Hrs15wk/aMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvcEI2SFpCWHZxWnFwdUhlVm5ZZXV6WG5DVDlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAPoQDAwQA
TUMXAwQATUNZAwQAwk1HAwQAw6L2MA0GCSqGSIb3DQEBCwUAA4IBAQB0SFg1uZP7
TGw68o9ZOeGPO9Z8p2B3w0dQTF8S10VS+HzgfF7/T8GyYCl9IHW06Agev+NvbTEM
w57pTC+T3eI2Iqp35oz1Q6+nGImtXkElNMzfYJ/FB7mH/zaeaW1smOgi4UUjXDFw
ea/389lMsgxb+8cqq+6NjXGZPOw0bh26Wuj8oXIdHvgCgBSs1Khz8egD9WQBHZzy
wMqO3Ge1nsdyeh0dXqzGq1E5tI6MFoU8JF+WCdZgOswSC/WvOtTMGyA4xmzsiY2m
VdQQgDiHSrT6S840BHOWMuDrjLoiF6ZioHEd/IXDh53NrE1zvkJLTu0nw3w/marE
J1/18X/T1VaK
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:59 2026 by rpki-client