Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pwrUzRxzNx7vUuZ0EYEmHTmITjE.roa
File: pwrUzRxzNx7vUuZ0EYEmHTmITjE.roa (raw, json)
Hash identifier: ZMfQ2tk9CNRMJYHOIsQAT41OHI98u/dG7cADNn/lmss=
Subject key identifier: A7:0A:D4:CD:1C:73:37:1E:EF:52:E6:74:11:81:26:1D:39:88:4E:31
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A11A7DAF638964989D4D42076C49F0D041
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pwrUzRxzNx7vUuZ0EYEmHTmITjE.roa
Signing time: Thu 08 Oct 2026 07:50:06 +0000
ROA not before: Thu 08 Oct 2026 07:50:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 62.192.110.0/24 maxlen: 24
77.67.92.0/24 maxlen: 24
194.77.3.0/24 maxlen: 24
194.77.78.0/24 maxlen: 24
194.77.219.0/24 maxlen: 24
194.122.78.0/24 maxlen: 24
195.162.248.0/24 maxlen: 24
212.189.113.0/24 maxlen: 24
212.222.171.0/24 maxlen: 24
217.8.194.0/24 maxlen: 24
217.8.197.0/24 maxlen: 24
217.8.199.0/24 maxlen: 24
217.8.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:7d:af:63:89:64:98:9d:4d:42:07:6c:49:f0:d0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 8 07:50:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a70ad4cd1c73371eef52e6741181261d39884e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:bd:a4:c9:e6:7b:76:c9:96:ca:2d:e6:b5:
aa:a3:34:66:90:f6:84:a9:17:b0:02:f5:ee:5c:6d:
77:66:16:7e:c2:a9:f7:e1:08:65:0b:e3:fb:26:05:
70:56:f6:cf:a5:b5:a6:7e:15:d6:5b:94:b4:7f:ed:
33:1b:f4:93:b8:d1:a3:9a:4d:d5:e0:83:6a:75:31:
62:34:85:68:21:f2:9c:76:fb:15:9b:4e:68:bf:c4:
dc:cb:58:76:af:45:81:40:4d:0b:27:db:08:24:8f:
e6:f4:8d:14:61:70:54:a8:0c:dd:0a:42:ed:49:16:
33:76:59:fd:9c:31:4b:7e:37:b6:05:27:3a:4a:4f:
4c:10:c2:55:a4:ad:6e:f0:4e:56:aa:cb:e8:1c:3b:
6a:6d:61:34:d9:f9:54:bb:ec:0a:28:f6:f4:fe:ea:
7f:b1:82:fc:66:95:d7:82:f0:0e:9f:28:32:bb:fb:
94:bc:c2:64:74:51:2a:80:25:04:a4:b1:32:96:13:
d8:cb:43:a3:11:3e:94:b9:c3:6b:ae:5a:ac:9c:2a:
cf:10:2c:e8:7c:77:1f:ec:17:af:b9:12:21:e1:7d:
bf:71:9b:de:b7:3e:74:83:a9:0b:24:55:51:03:3f:
ef:25:ad:3a:52:5d:aa:b6:a1:38:7a:57:77:cc:ed:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0A:D4:CD:1C:73:37:1E:EF:52:E6:74:11:81:26:1D:39:88:4E:31
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pwrUzRxzNx7vUuZ0EYEmHTmITjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.110.0/24
77.67.92.0/24
194.77.3.0/24
194.77.78.0/24
194.77.219.0/24
194.122.78.0/24
195.162.248.0/24
212.189.113.0/24
212.222.171.0/24
217.8.194.0/24
217.8.197.0/24
217.8.199.0/24
217.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:14:b2:b0:e9:f1:e4:71:53:96:c3:28:d9:9f:59:b0:7e:bb:
ec:cf:6b:ba:a2:dc:20:81:7f:38:50:b8:02:31:9e:d1:88:7e:
c1:82:54:08:d8:66:d0:1e:df:65:c7:07:61:c7:ee:8e:a6:db:
6b:27:ba:98:a0:d3:ac:a0:ce:30:ee:a8:cc:fe:60:db:d5:ab:
6d:ca:7d:f4:48:ed:57:46:5f:dc:51:c2:a5:cf:3b:2d:6e:52:
23:e4:43:e2:34:8f:33:14:6c:15:b2:15:41:9c:39:5f:94:bb:
ed:36:00:93:5b:4f:4f:c3:db:0b:ec:fd:db:ad:97:a8:76:07:
64:8e:b6:4c:7b:26:17:5c:b3:89:8a:dd:a0:bd:3c:45:21:e9:
0c:f1:94:20:2f:a4:8d:4f:fa:77:23:28:b4:fa:70:c5:78:3b:
43:a4:6e:04:04:e7:5e:fa:ba:ec:b7:36:19:8a:ec:b8:d9:33:
de:49:48:08:59:46:57:34:79:bc:77:d9:85:eb:ef:72:b2:51:
c0:fa:d3:35:50:38:42:62:6c:3c:cc:87:ea:bc:04:dc:6a:e1:
1f:42:f7:08:87:bb:5b:8b:76:c1:a6:64:19:2d:2f:d1:c3:14:
ea:30:ae:b7:55:fb:0c:9e:cd:b8:b5:4d:4a:ca:36:f8:f3:88:
19:5d:97:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:26:02 2026 by rpki-client