Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/u7iinG1WJRC29nWKEtlN-uHIMbc.roa
File: u7iinG1WJRC29nWKEtlN-uHIMbc.roa (raw, json)
Hash identifier: NQeG8SYATqu+1WF/MI/g/PkvNzk0i9JLFaPlhLYrLeU=
Subject key identifier: BB:B8:A2:9C:6D:56:25:10:B6:F6:75:8A:12:D9:4D:FA:E1:C8:31:B7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F8CC6ED389BE18CADE8C55628DDE369C3
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/u7iinG1WJRC29nWKEtlN-uHIMbc.roa
Signing time: Thu 23 Jul 2026 02:21:14 +0000
ROA not before: Thu 23 Jul 2026 02:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 62.105.218.0/24 maxlen: 24
62.105.219.0/24 maxlen: 24
194.77.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8c:c6:ed:38:9b:e1:8c:ad:e8:c5:56:28:dd:e3:69:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 23 02:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbb8a29c6d562510b6f6758a12d94dfae1c831b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b8:41:a0:c5:32:54:2b:7c:51:5c:40:d6:f9:
1d:24:a7:be:f3:43:11:7a:f3:a4:98:9a:67:e9:91:
4c:e2:0b:22:09:5e:12:26:7d:52:8e:e3:ca:2c:a9:
2e:23:97:80:14:7a:5c:60:62:a4:06:ac:85:ea:61:
22:c5:c3:ef:56:f2:1d:fa:af:a0:db:0d:a1:a0:b3:
69:63:6d:eb:82:fd:7b:b7:fb:5b:fc:dd:99:54:35:
05:f2:f4:57:42:1f:75:ea:16:dd:18:54:70:ff:c5:
e3:a6:6d:0f:59:57:d0:98:3f:fc:52:13:98:f8:ad:
02:cb:11:c0:ab:9a:c1:9d:28:f0:f5:43:2e:02:bd:
4f:5e:1f:5f:8b:ce:78:ac:bc:56:b5:80:09:2b:df:
de:e7:0f:3e:b2:8e:63:b1:fe:5a:71:b3:d7:8b:40:
91:f5:bd:d7:ae:43:f8:76:49:44:20:fd:99:e2:c8:
2f:84:39:14:39:eb:7a:5c:f3:0f:0a:a0:e7:13:c5:
06:fc:aa:43:6c:e2:7a:44:4c:1c:48:d4:2c:ed:03:
51:7f:01:66:83:1d:a8:c2:56:db:90:9c:66:a7:f7:
4e:49:72:74:fa:ac:8c:b2:da:57:39:f5:bc:ac:ed:
29:f7:96:ad:c0:09:91:37:99:f2:65:2e:7b:54:fe:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B8:A2:9C:6D:56:25:10:B6:F6:75:8A:12:D9:4D:FA:E1:C8:31:B7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/u7iinG1WJRC29nWKEtlN-uHIMbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.218.0/23
194.77.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d1:18:67:3d:2d:5e:58:17:5b:06:5b:57:e3:bb:05:87:9d:
0e:7f:10:34:82:31:a6:7e:b2:91:dc:89:fc:cc:67:74:e6:86:
b0:9d:c5:90:67:26:5b:e8:58:14:a5:c1:b5:57:2e:99:36:52:
f5:58:15:48:70:b1:c4:7b:72:d1:2c:b0:da:f0:e1:39:33:33:
6b:3e:77:db:a6:35:fe:77:42:6c:1c:a6:45:d0:34:89:82:ec:
7f:98:77:39:9a:23:c8:f7:30:23:0c:d1:cd:45:09:56:f0:ee:
b1:91:b5:34:28:88:ef:71:96:8f:f1:0d:e7:1e:2b:6e:39:00:
56:07:6a:76:44:d8:94:7e:7e:3a:72:6d:e4:6b:32:00:b9:98:
a0:81:8c:70:3b:dd:66:7d:94:28:3c:49:26:e5:81:c5:98:2f:
16:5f:c4:ba:e6:2d:de:36:d9:96:45:fb:be:4a:c7:21:d1:5c:
8e:96:7b:8d:18:76:29:10:fd:78:be:08:99:fc:05:73:ea:a9:
b1:ff:37:a1:68:71:f2:38:e9:41:df:2a:91:ed:60:89:cd:43:
be:43:0e:ff:ac:cc:04:d0:bb:28:40:a3:75:18:fc:fb:58:09:
0f:2b:c4:67:a2:86:e7:8f:49:00:fa:36:4a:74:af:84:5d:ae:
7e:6b:ea:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:22 2026 by rpki-client