Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sIt_tbig9YrwD4iiOydnylJUeQs.roa
File: sIt_tbig9YrwD4iiOydnylJUeQs.roa (raw, json)
Hash identifier: I5RFhSY1clLRryXteypYBf4cOVDKlTyuE45o18uEmzc=
Subject key identifier: B0:8B:7F:B5:B8:A0:F5:8A:F0:0F:88:A2:3B:27:67:CA:52:54:79:0B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0F19EF249472F691D4D3ECA7EC5F0D898
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sIt_tbig9YrwD4iiOydnylJUeQs.roa
Signing time: Wed 30 Sep 2026 09:22:00 +0000
ROA not before: Wed 30 Sep 2026 09:22:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 62.105.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:9e:f2:49:47:2f:69:1d:4d:3e:ca:7e:c5:f0:d8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 30 09:22:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b08b7fb5b8a0f58af00f88a23b2767ca5254790b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:ed:6e:ef:a2:29:66:a9:4d:1e:32:51:f5:
9c:ca:e3:75:a3:31:61:eb:7c:0e:08:b5:6b:81:89:
36:48:eb:b2:82:b4:c0:10:f5:85:94:23:d2:7e:1b:
ae:b4:16:0b:d7:3c:84:32:f7:e2:36:ac:92:1c:c0:
cf:82:c9:d7:ae:0b:84:45:f0:e6:1c:c2:0d:16:06:
1d:d6:cf:09:40:1a:9a:21:c4:f4:3c:ab:ef:0b:0c:
aa:33:89:a3:3e:7c:34:0c:47:7f:ae:a6:b7:f8:b2:
01:9a:ce:42:73:65:eb:de:b2:6e:3e:3f:33:03:d5:
c4:27:1a:a9:b4:a4:bb:f0:df:1d:c2:27:da:83:38:
e5:66:85:dd:5c:98:d5:02:90:e8:7e:bf:ed:d1:a0:
20:e0:e5:33:e4:86:e0:db:e7:c1:b9:c9:4a:70:e6:
7d:89:0f:9c:39:ba:b2:96:3c:4a:a8:c8:dc:5b:8f:
df:13:89:2e:a1:51:33:76:33:cd:40:0f:2a:89:40:
88:32:34:8d:d2:eb:2b:fa:49:21:a1:fe:8a:20:12:
70:87:4f:a5:19:bb:9c:32:e5:bd:71:55:f5:f1:fe:
79:ec:21:4c:b4:92:bf:34:9a:6a:f3:4f:80:d5:a2:
82:ff:df:db:f4:57:ed:13:a4:4a:3c:a5:2e:6c:4d:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8B:7F:B5:B8:A0:F5:8A:F0:0F:88:A2:3B:27:67:CA:52:54:79:0B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sIt_tbig9YrwD4iiOydnylJUeQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.198.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:82:2a:e7:a1:93:e7:67:ca:a2:45:d8:2a:49:93:bb:4d:40:
b2:82:ee:e0:8d:13:54:e6:15:08:f2:7b:d4:9e:93:4b:6b:c6:
04:66:ac:e8:a9:35:26:d1:fc:91:d4:99:b3:e9:04:cf:cf:f1:
16:dc:ee:43:72:99:72:0d:93:85:54:5d:7b:7c:fa:51:cb:fc:
c0:8f:89:de:00:12:ee:b5:fb:a7:f5:54:bd:70:f2:15:28:9b:
e6:39:c2:03:4c:dc:bf:1c:60:98:3d:3c:ff:22:72:35:3a:ab:
35:d1:35:dd:c3:77:a8:c8:12:63:5a:97:c7:98:3a:77:4a:2d:
cb:c7:e3:60:fa:a7:fa:c1:2e:e5:75:8a:bd:d2:e1:a6:de:54:
c5:70:28:e3:39:fe:9b:36:8c:b5:86:91:8c:93:f3:59:48:cc:
e1:6b:58:94:00:78:92:ea:10:ef:c4:54:cc:0a:74:a7:bf:bf:
a7:6f:11:9a:e4:57:73:f9:f5:34:80:8c:31:b6:45:ef:b6:88:
b2:60:f8:13:fb:c2:22:97:55:f5:69:72:57:1c:68:ee:3f:1e:
47:4e:f3:97:2c:21:ac:b7:0f:00:a5:15:d7:96:51:7f:99:be:
e5:5e:58:c1:3e:43:8c:b4:f3:6e:e7:cd:07:bb:dd:2c:fb:81:
81:68:6f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:39:00 2026 by rpki-client