Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sLyecH9D5lb4YEpkWmMt6Rt9ZRI.roa
File: sLyecH9D5lb4YEpkWmMt6Rt9ZRI.roa (raw, json)
Hash identifier: qJqptfGiMRyBw8o2HotAUBWRFdwwo8JnKk/0FC2l3eY=
Subject key identifier: B0:BC:9E:70:7F:43:E6:56:F8:60:4A:64:5A:63:2D:E9:1B:7D:65:12
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0BFE763E0C6D8153449E253E7D014A2ED
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sLyecH9D5lb4YEpkWmMt6Rt9ZRI.roa
Signing time: Sun 20 Sep 2026 17:40:07 +0000
ROA not before: Sun 20 Sep 2026 17:40:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397032
IP address blocks: 62.41.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:e7:63:e0:c6:d8:15:34:49:e2:53:e7:d0:14:a2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 20 17:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0bc9e707f43e656f8604a645a632de91b7d6512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:25:df:29:b0:47:0f:d6:50:2e:d3:6b:a1:
82:8b:df:49:a8:5a:e0:b5:6e:86:81:6c:5e:30:ed:
73:3c:e5:8f:7f:1d:a6:e6:05:93:ef:44:67:98:cc:
7e:b1:b9:9e:81:ac:c1:7d:c5:39:a7:71:52:1f:73:
97:32:21:f6:62:81:43:fc:12:8b:95:2e:21:d2:a7:
8a:2c:74:ce:c8:60:95:44:bb:4e:ab:dc:b0:8b:12:
44:19:f4:99:d3:45:f9:86:58:87:a7:22:bf:81:89:
03:b8:51:3a:d2:56:91:a6:9b:ee:d3:c7:7c:b7:c8:
e1:15:a3:b1:9b:33:dc:1b:bd:f3:f1:70:56:9f:31:
4b:64:e3:e3:54:94:76:0e:74:e5:f0:54:f5:1e:5a:
41:e1:47:af:4b:c2:c2:07:20:a6:5b:1a:61:e2:e4:
4d:23:53:56:b7:50:fb:04:07:c0:2f:80:7e:31:f6:
75:2d:ce:b0:dd:a5:3e:4a:17:7f:cf:d3:55:df:80:
46:c4:76:5d:b4:a4:b4:db:56:79:94:70:df:40:e5:
e8:8a:cc:d0:83:87:9b:5c:08:c1:f7:12:99:b2:0e:
ff:99:58:43:73:be:fa:5a:71:2e:c1:7b:c3:cf:e0:
2d:09:33:fe:e4:6f:1b:39:87:56:4b:c3:45:32:54:
43:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BC:9E:70:7F:43:E6:56:F8:60:4A:64:5A:63:2D:E9:1B:7D:65:12
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sLyecH9D5lb4YEpkWmMt6Rt9ZRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.26.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6a:1e:30:d9:04:80:12:e6:07:dc:85:75:79:9d:23:7e:33:
3e:4b:2f:72:10:dd:04:88:98:f9:d1:8e:d4:a9:c0:f6:59:62:
e1:0d:72:bc:0b:f9:bf:90:02:22:d7:fc:a6:71:24:dc:95:be:
7f:dd:3f:17:06:b2:1f:d3:0a:18:ca:e6:99:8a:fd:62:c5:69:
89:5b:3a:c8:6b:a9:ca:98:e8:e9:3f:8d:da:1d:c1:39:80:dc:
b8:b8:65:ec:e7:ee:e5:6e:c9:01:d0:b3:65:cb:68:29:af:9b:
0c:c2:d3:c1:f2:83:fc:28:55:2a:6a:93:58:c0:36:c0:07:98:
72:ca:c6:e5:a1:c1:c6:b2:5b:f9:da:24:e4:3d:6b:74:71:44:
75:99:18:65:97:1d:65:58:c1:2c:76:07:88:e0:83:9d:f2:1c:
25:b2:51:63:04:e8:43:ca:25:17:00:86:11:9f:c6:9a:1b:5c:
26:b6:75:7c:9d:59:b9:af:3c:0b:ad:58:af:b6:3d:f7:97:00:
38:93:61:df:30:0b:f7:fb:d3:07:11:17:57:73:77:6e:20:17:
12:43:ee:97:37:fe:1e:ba:6d:be:e2:cf:32:ab:91:49:51:27:
63:a4:3f:f0:7a:cb:6a:0c:7c:9e:c2:72:f1:83:a8:6b:d2:4b:
9d:15:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:00:40 2026 by rpki-client