Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rQP6J_B3QVFhyJjyvk-ql6KnpSs.roa
File: rQP6J_B3QVFhyJjyvk-ql6KnpSs.roa (raw, json)
Hash identifier: FZrpkMvjHo0xB6ejV1PjCxY+318zraoKYRzilm0QQs0=
Subject key identifier: AD:03:FA:27:F0:77:41:51:61:C8:98:F2:BE:4F:AA:97:A2:A7:A5:2B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019993CE6C4F8CBB6CF8861C1D61B6B41A78
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rQP6J_B3QVFhyJjyvk-ql6KnpSs.roa
Signing time: Mon 29 Sep 2025 04:50:02 +0000
ROA not before: Mon 29 Sep 2025 04:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 62.93.164.0/22 maxlen: 24
62.93.176.0/22 maxlen: 24
84.20.4.0/22 maxlen: 24
84.20.16.0/22 maxlen: 24
84.20.24.0/22 maxlen: 24
92.71.34.0/23 maxlen: 24
92.71.40.0/22 maxlen: 24
92.71.44.0/23 maxlen: 24
92.71.66.0/23 maxlen: 24
92.71.98.0/23 maxlen: 24
92.71.124.0/23 maxlen: 24
135.196.185.0/24 maxlen: 24
195.86.208.0/24 maxlen: 24
213.139.8.0/22 maxlen: 24
213.201.134.0/24 maxlen: 24
213.201.242.0/23 maxlen: 24
213.201.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:93:ce:6c:4f:8c:bb:6c:f8:86:1c:1d:61:b6:b4:1a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 29 04:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad03fa27f077415161c898f2be4faa97a2a7a52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:07:1b:12:0c:a0:ba:13:ce:70:2b:a0:56:
fe:df:a0:a2:f5:d9:69:e2:52:92:d0:a1:a9:e0:55:
24:e4:a8:f4:07:c4:58:f1:28:39:01:83:ce:4e:b8:
6a:aa:53:c1:84:c7:75:7f:e5:9f:93:e9:c5:05:5d:
6f:1b:04:9d:5d:d0:70:8b:6d:90:9d:b3:60:c9:11:
25:97:8f:26:e6:99:d1:69:7b:1a:f5:46:c4:75:c4:
28:d8:23:9b:2f:91:11:74:2a:6f:c5:fc:dd:c6:a6:
0c:68:dd:40:7d:5b:d0:dc:d8:7c:55:10:1b:c4:93:
14:98:78:e3:34:5c:ba:4d:b0:3c:52:05:58:ad:18:
a7:51:b0:8d:3b:74:d8:6e:8b:c5:01:46:2c:65:82:
33:5a:99:4c:1c:24:f9:e4:0b:66:68:0d:67:95:29:
fb:70:81:d1:42:5c:97:10:b3:25:a6:60:9f:6d:48:
d5:fe:f9:c6:b1:25:8e:7e:2d:4f:9d:2c:a1:93:ab:
1f:0a:89:1c:b6:6f:c0:5a:40:02:24:26:87:c7:5b:
fd:25:9c:5e:a7:92:48:6a:61:35:3f:c8:9b:7d:b7:
5f:6d:93:5b:18:99:8c:d7:3b:89:d5:e9:d5:12:2b:
c8:40:84:28:d4:8f:2e:d4:1e:cf:4a:6d:fa:fc:80:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:03:FA:27:F0:77:41:51:61:C8:98:F2:BE:4F:AA:97:A2:A7:A5:2B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rQP6J_B3QVFhyJjyvk-ql6KnpSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.164.0/22
62.93.176.0/22
84.20.4.0/22
84.20.16.0/22
84.20.24.0/22
92.71.34.0/23
92.71.40.0-92.71.45.255
92.71.66.0/23
92.71.98.0/23
92.71.124.0/23
135.196.185.0/24
195.86.208.0/24
213.139.8.0/22
213.201.134.0/24
213.201.242.0/23
213.201.252.0/23
Signature Algorithm: sha256WithRSAEncryption
e7:13:98:83:54:d5:ea:4a:4e:4c:ea:4f:c6:38:5d:14:4c:40:
4c:51:38:0c:66:cd:54:ab:0c:c6:7c:d1:b7:ab:8b:6d:49:0d:
ba:36:2d:29:58:28:f6:9b:8a:c0:1e:9e:72:3e:c5:49:fa:43:
73:2e:ce:10:cd:29:19:f3:8f:90:7c:6a:25:ae:44:09:c2:e0:
24:f6:6f:6c:ca:54:93:f9:95:ba:58:81:f7:3a:a2:ef:26:d5:
95:4d:c0:18:4c:1c:f3:f2:5f:01:bc:25:4f:8d:b7:44:5b:8e:
c0:ed:70:4a:77:6a:0f:b6:0f:fe:b8:8e:82:5d:d0:79:be:ef:
02:7b:5a:b5:0c:fb:fa:de:45:fb:9f:f5:e3:6f:8d:70:c9:51:
f3:cd:d4:d7:1b:2d:84:9e:7d:1b:d6:20:26:71:ff:55:54:79:
bf:9f:6f:76:cc:0c:e4:18:c4:75:98:f3:59:3b:08:23:53:97:
72:07:ce:e7:d4:29:ac:38:32:27:4f:79:c6:9f:cf:d8:d0:b1:
f8:48:e8:84:88:a0:6e:bb:6a:ca:aa:9d:2b:f9:b6:61:f8:0a:
da:c7:22:52:51:ac:f6:d7:47:fe:8c:da:84:b2:46:9f:a8:22:
9a:43:d6:d8:2d:d8:b1:3f:f6:59:22:b5:c1:e2:06:18:cc:e3:
3a:39:da:00
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAZmTzmxPjLts+IYcHWG2tBp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwOTI5MDQ1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDAzZmEyN2YwNzc0MTUxNjFjODk4ZjJiZTRmYWE5N2EyYTdhNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n8HGxIMoLoTznAroFb+36Ci9dlp
4lKS0KGp4FUk5Kj0B8RY8Sg5AYPOTrhqqlPBhMd1f+Wfk+nFBV1vGwSdXdBwi22Q
nbNgyREll48m5pnRaXsa9UbEdcQo2CObL5ERdCpvxfzdxqYMaN1AfVvQ3Nh8VRAb
xJMUmHjjNFy6TbA8UgVYrRinUbCNO3TYbovFAUYsZYIzWplMHCT55AtmaA1nlSn7
cIHRQlyXELMlpmCfbUjV/vnGsSWOfi1PnSyhk6sfCokctm/AWkACJCaHx1v9JZxe
p5JIamE1P8ibfbdfbZNbGJmM1zuJ1enVEivIQIQo1I8u1B7PSm36/IAKtwIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFK0D+ifwd0FRYciY8r5Pqpeip6UrMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvclFQNkpfQjNRVkZoeUpqeXZrLXFsNktucFNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAj5dpAME
Aj5dsAMEAlQUBAMEAlQUEAMEAlQUGAMEAVxHIjAMAwQDXEcoAwQBXEcsAwQBXEdC
AwQBXEdiAwQBXEd8AwQAh8S5AwQAw1bQAwQC1YsIAwQA1cmGAwQB1cnyAwQB1cn8
MA0GCSqGSIb3DQEBCwUAA4IBAQDnE5iDVNXqSk5M6k/GOF0UTEBMUTgMZs1UqwzG
fNG3q4ttSQ26Ni0pWCj2m4rAHp5yPsVJ+kNzLs4QzSkZ84+QfGolrkQJwuAk9m9s
ylST+ZW6WIH3OqLvJtWVTcAYTBzz8l8BvCVPjbdEW47A7XBKd2oPtg/+uI6CXdB5
vu8Ce1q1DPv63kX7n/Xjb41wyVHzzdTXGy2Enn0b1iAmcf9VVHm/n292zAzkGMR1
mPNZOwgjU5dyB87n1CmsODInT3nGn8/Y0LH4SOiEiKBuu2rKqp0r+bZh+AraxyJS
Uaz210f+jNqEskafqCKaQ9bYLdixP/ZZIrXB4gYYzOM6OdoA
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:12:58 2025 by rpki-client