Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pdBKUu89EaTM4HOC0YhH8FJXGv8.roa
File: pdBKUu89EaTM4HOC0YhH8FJXGv8.roa (raw, json)
Hash identifier: NktKPMzcq7M/hxA32ED+wK4kiXsgeAB1oX5MsnEcrIQ=
Subject key identifier: A5:D0:4A:52:EF:3D:11:A4:CC:E0:73:82:D1:88:47:F0:52:57:1A:FF
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EEF2142A2D6D349FCBE3CC770F07EC1A3
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pdBKUu89EaTM4HOC0YhH8FJXGv8.roa
Signing time: Mon 22 Jun 2026 11:39:54 +0000
ROA not before: Mon 22 Jun 2026 11:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 62.105.197.0/24 maxlen: 24
62.105.199.0/24 maxlen: 24
194.77.198.0/24 maxlen: 24
194.122.81.0/24 maxlen: 24
195.21.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:21:42:a2:d6:d3:49:fc:be:3c:c7:70:f0:7e:c1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 22 11:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5d04a52ef3d11a4cce07382d18847f052571aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:ca:7b:d0:b0:b4:ec:67:04:dd:a7:b8:3b:
46:ff:1d:44:1a:78:66:37:d5:40:1a:99:eb:65:73:
76:3d:cd:fd:4d:68:86:30:ad:0c:47:c8:fa:54:10:
06:bb:d0:df:23:1e:af:4d:0b:ba:bb:36:19:da:3d:
e8:c6:6a:dc:27:7b:8c:b5:17:38:13:34:08:7f:19:
97:81:33:18:04:be:09:da:1e:72:36:ee:bc:a7:57:
78:be:5e:fb:1f:b0:3e:a6:78:1f:7a:5e:a6:82:11:
76:fd:1e:68:15:fc:f9:85:85:0a:4c:98:bf:5c:1a:
df:93:60:ef:32:ca:fd:d7:45:07:27:2c:06:10:86:
8e:91:d9:f3:91:0d:6c:5d:94:5a:a1:da:97:e5:b9:
58:3c:b6:1e:46:c9:e4:76:f2:6f:41:71:78:37:9b:
68:e3:d4:fe:14:0b:96:5c:cc:eb:9b:95:82:2a:35:
1d:a5:ed:03:1e:89:da:a8:8d:86:3e:88:0a:78:bd:
82:82:8e:c0:a5:87:2d:9f:b3:0b:1f:96:ca:7d:7c:
71:ee:70:18:3e:34:5d:c9:83:d0:9c:1d:84:34:af:
f5:42:43:d6:0e:59:95:2a:9b:13:4a:04:a5:66:44:
cd:be:7c:57:3b:f1:1e:69:ac:db:6d:bd:47:9a:54:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D0:4A:52:EF:3D:11:A4:CC:E0:73:82:D1:88:47:F0:52:57:1A:FF
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pdBKUu89EaTM4HOC0YhH8FJXGv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.197.0/24
62.105.199.0/24
194.77.198.0/24
194.122.81.0/24
195.21.131.0/24
Signature Algorithm: sha256WithRSAEncryption
df:f0:23:ab:f0:81:00:e5:e5:67:a4:de:a4:51:cd:cf:0e:21:
a3:c1:bf:ad:ed:e1:29:09:55:1e:4b:2f:8d:57:24:27:f4:74:
43:8b:b8:3f:58:70:91:29:72:0e:1d:1d:fd:b1:05:ff:9f:1d:
fd:bd:76:a3:27:33:a7:b8:9d:50:00:e7:1d:0f:3f:d1:81:0a:
12:42:4a:e5:7f:72:1b:92:51:ea:9b:6a:ea:c4:88:b6:d1:b6:
fa:75:f5:61:c3:58:ae:83:3b:89:1b:94:bf:94:6e:4d:06:34:
46:52:ac:74:16:1b:2a:96:ad:4c:5b:95:ff:5b:7b:5c:66:f9:
11:76:03:8a:42:83:3c:43:b5:25:90:78:50:fb:31:06:60:93:
b4:14:5d:ed:42:bd:ec:b3:d4:e0:0c:6d:06:14:a4:29:16:a6:
f5:b3:19:c0:a5:58:16:2d:a3:79:6f:c0:91:ed:a8:e2:a7:f4:
4b:cb:10:31:15:75:06:8b:a3:58:48:a9:65:6a:7c:06:87:8f:
64:3a:60:e5:b0:46:9f:8c:11:a6:89:b5:27:13:4a:3f:00:ca:
b0:f3:da:2d:46:aa:f2:14:da:58:c8:04:19:be:0d:0e:e3:cc:
bc:7b:f9:eb:b9:28:e4:f3:ba:3f:73:00:49:fb:18:d7:6a:22:
b6:f0:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:54 2026 by rpki-client