Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PJ_bumuVQqgGKQI69DrRjNAsNhs.roa
File: PJ_bumuVQqgGKQI69DrRjNAsNhs.roa (raw, json)
Hash identifier: tSohtsbkpdM8ukVlkHnqq9iI9fpAc+q+QRQmq/D62Tg=
Subject key identifier: 3C:9F:DB:BA:6B:95:42:A8:06:29:02:3A:F4:3A:D1:8C:D0:2C:36:1B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019EDC30883B5BCC51164B588153B39FA56E
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PJ_bumuVQqgGKQI69DrRjNAsNhs.roa
Signing time: Thu 18 Jun 2026 19:23:48 +0000
ROA not before: Thu 18 Jun 2026 19:23:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196709
IP address blocks: 88.218.92.0/24 maxlen: 24
88.218.94.0/24 maxlen: 24
88.218.95.0/24 maxlen: 24
194.36.36.0/24 maxlen: 24
194.36.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:30:88:3b:5b:cc:51:16:4b:58:81:53:b3:9f:a5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 18 19:23:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c9fdbba6b9542a80629023af43ad18cd02c361b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:64:b1:7f:b5:ce:e9:d7:71:02:3b:d4:72:
19:8f:4e:d3:d2:3d:62:85:26:16:f8:77:2a:34:c9:
74:67:dc:8a:ad:da:b1:d6:a9:0f:53:bb:42:44:56:
a5:52:aa:d8:1c:12:99:0c:82:48:57:6a:e6:f2:7c:
c8:81:89:e8:3d:df:75:8b:52:48:02:31:88:5f:e3:
54:92:ca:4e:84:0d:ca:e4:cd:07:bb:d6:1e:63:47:
37:64:17:86:3e:ab:30:aa:ef:37:d6:ee:e4:c8:c2:
7f:32:b7:cc:80:c3:8f:ac:e8:ee:05:07:26:62:a7:
3c:d9:b6:43:94:0a:24:59:4d:af:d8:6a:3b:fa:ee:
ca:ad:50:f9:42:52:fa:dd:08:5f:e3:7b:58:38:e8:
80:9e:7a:22:61:fc:50:c9:3f:c2:a1:3c:28:10:9b:
26:5d:05:03:57:97:bb:be:1b:f3:a5:ff:73:46:9b:
45:78:68:2a:d5:f9:ae:97:b1:29:b6:b4:11:b6:b1:
b3:bc:4e:84:a5:c1:90:74:d4:cd:3a:01:c0:0e:d6:
79:65:93:dc:cf:09:9c:db:dd:0e:40:9c:18:a2:28:
71:17:0f:d5:20:e3:6f:37:45:64:e5:9f:d3:c2:3a:
72:07:17:fc:25:80:06:5f:6f:1d:87:c1:67:bc:02:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:DB:BA:6B:95:42:A8:06:29:02:3A:F4:3A:D1:8C:D0:2C:36:1B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PJ_bumuVQqgGKQI69DrRjNAsNhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.92.0/24
88.218.94.0/23
194.36.36.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:ed:41:9e:81:a4:7b:c0:bf:c0:10:4f:3f:44:f7:9e:f8:97:
95:90:e3:09:16:4d:90:76:d8:dc:d0:f2:66:a0:ca:64:cb:b5:
dd:8d:b3:d4:75:6b:2c:ab:ea:ee:ed:01:88:1d:bd:fb:68:76:
84:44:fe:cb:7e:b9:8d:62:5b:20:2e:2d:b2:74:37:d8:42:6a:
dd:7c:24:5c:eb:2e:ca:4d:59:f6:49:b0:60:09:b7:91:10:26:
81:ba:c3:31:ea:0e:50:f5:fd:99:63:92:7c:59:f7:70:bd:a2:
25:68:92:9b:df:09:29:17:6a:34:bc:18:2a:1f:e9:fe:8f:e0:
b7:24:7c:03:ab:a1:7a:8d:a6:36:6f:ea:bb:89:b8:30:30:25:
07:e0:45:53:4b:c8:f7:65:61:cc:96:ad:62:4a:2b:09:b8:d3:
00:cb:09:34:1a:a9:a1:74:7b:c2:ae:d5:43:72:61:44:bd:b7:
5d:7d:62:5d:c9:e6:39:4e:2c:d4:2b:0b:cf:50:be:31:22:91:
f6:e6:5b:ba:9f:9e:f4:c2:f5:53:f9:6e:1b:02:22:c5:b0:3e:
2b:18:b8:ec:cb:47:ff:6a:9e:de:f0:60:d9:5e:c5:0c:08:2c:
7f:5e:85:cb:6f:1b:13:8a:9b:28:66:a5:f5:24:83:59:d4:ae:
d8:74:51:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:01 2026 by rpki-client