Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-YDW1vJOXaWle_hJPMm7xehcvgg.roa
File: 1-YDW1vJOXaWle_hJPMm7xehcvgg.roa (raw, json)
Hash identifier: IIEsezYhh2RnGMdt8msWFfEaCZAd+xBS9yw1gzAKOuo=
Subject key identifier: F9:80:D6:D6:F2:4E:5D:A5:A5:7B:F8:49:3C:C9:BB:C5:E8:5C:BE:08
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F2FDB39548BC18D842E771F50642EA45C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-YDW1vJOXaWle_hJPMm7xehcvgg.roa
Signing time: Sun 05 Jul 2026 01:18:44 +0000
ROA not before: Sun 05 Jul 2026 01:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 62.76.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:db:39:54:8b:c1:8d:84:2e:77:1f:50:64:2e:a4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 5 01:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f980d6d6f24e5da5a57bf8493cc9bbc5e85cbe08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:0e:5c:f4:ee:f0:86:d1:18:df:14:34:9e:
b7:41:08:04:4a:ba:4e:92:6a:34:71:9d:89:d7:e0:
cd:63:36:44:fb:92:43:e4:38:48:f1:dd:3a:d5:9d:
67:81:85:e8:af:a4:c8:fe:10:63:4f:dd:3f:1a:d4:
f1:14:f7:db:94:11:ca:a7:7e:72:a8:23:c6:ee:9e:
84:60:7a:83:1d:fc:d1:d1:9a:0a:5e:53:b9:ec:d5:
c5:1e:b8:ee:96:13:a5:24:cd:c6:0f:96:04:b9:c3:
7c:3c:8d:ce:f7:88:5e:6f:d4:ef:ac:f4:f1:2a:1b:
96:76:f0:23:72:86:ff:ce:6a:e2:46:8d:9b:33:92:
fe:fc:48:bf:ba:e4:0e:3d:8f:dd:1e:52:90:20:2b:
3f:c4:66:c7:01:6d:c3:76:d5:f2:82:55:09:b7:69:
46:e9:6c:4b:ca:8e:47:8e:72:ab:2f:77:4d:74:0f:
ac:7f:f5:a2:34:7d:82:e8:bc:34:ee:67:ae:86:d7:
a4:ac:a9:69:b9:67:c5:7a:49:cd:8c:5b:69:f9:ff:
da:d5:1a:36:3f:7a:c8:65:17:c0:e0:a3:40:b1:46:
bb:06:50:fa:ca:fe:b0:f7:10:c9:87:19:c8:e3:f3:
b9:c9:a6:cd:50:f8:cf:30:b0:cf:eb:6f:55:78:5b:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:80:D6:D6:F2:4E:5D:A5:A5:7B:F8:49:3C:C9:BB:C5:E8:5C:BE:08
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-YDW1vJOXaWle_hJPMm7xehcvgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:eb:5f:3b:ad:fa:5a:c3:f1:2d:59:1a:4a:b1:3f:26:2e:58:
31:3f:2e:e0:6a:32:bd:af:59:b7:01:3c:48:67:3e:df:8c:58:
c2:31:ab:57:ef:84:b8:c7:89:dd:9c:cb:61:a2:0f:ee:c7:d1:
27:38:8f:1f:85:87:0d:84:0e:8d:ef:5d:cc:3a:89:27:33:03:
04:8d:48:9a:1d:da:01:55:f2:ca:c5:89:2d:9d:cd:19:74:3f:
57:d5:07:0c:5f:52:f5:b1:e5:85:50:fb:5a:07:5d:b5:26:f6:
3d:13:b6:c5:28:7d:8b:c0:d9:68:ce:28:dd:72:97:cf:63:97:
18:f8:01:1a:42:e8:28:d8:44:a0:64:8d:56:aa:76:64:c2:59:
6c:cc:31:9b:65:73:8b:72:41:5a:a6:ba:f8:92:9f:19:5e:0d:
6f:82:47:32:28:25:b6:1a:f5:df:3b:47:07:ad:dc:7f:e4:0d:
a9:e5:63:52:65:5f:8f:59:fa:3b:53:b2:09:ca:43:45:48:26:
5e:52:8a:eb:c5:5e:a5:02:96:26:9e:d2:11:e7:b0:a9:8e:c1:
71:97:b9:e2:fb:2c:d0:3e:05:ab:ee:e1:b7:3c:b7:b4:69:42:
26:b6:e2:77:bd:3a:0a:5c:87:fa:ff:c9:0f:cd:c2:f8:a9:11:
77:6e:69:51
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8v2zlUi8GNhC53H1BkLqRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwNzA1MDExODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTgwZDZkNmYyNGU1ZGE1YTU3YmY4NDkzY2M5YmJjNWU4NWNiZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgAOXPTu8IbRGN8UNJ63QQgESrpO
kmo0cZ2J1+DNYzZE+5JD5DhI8d061Z1ngYXor6TI/hBjT90/GtTxFPfblBHKp35y
qCPG7p6EYHqDHfzR0ZoKXlO57NXFHrjulhOlJM3GD5YEucN8PI3O94heb9TvrPTx
KhuWdvAjcob/zmriRo2bM5L+/Ei/uuQOPY/dHlKQICs/xGbHAW3DdtXyglUJt2lG
6WxLyo5HjnKrL3dNdA+sf/WiNH2C6Lw07meuhtekrKlpuWfFeknNjFtp+f/a1Ro2
P3rIZRfA4KNAsUa7BlD6yv6w9xDJhxnI4/O5yabNUPjPMLDP629VeFtjWwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPmA1tbyTl2lpXv4STzJu8XoXL4IMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMS1ZRFcxdkpPWGFXbGVfaEpQTW03eGVoY3ZnZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0
My8xL05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD5M4jAN
BgkqhkiG9w0BAQsFAAOCAQEAbutfO636WsPxLVkaSrE/Ji5YMT8u4Goyva9ZtwE8
SGc+34xYwjGrV++EuMeJ3ZzLYaIP7sfRJziPH4WHDYQOje9dzDqJJzMDBI1Imh3a
AVXyysWJLZ3NGXQ/V9UHDF9S9bHlhVD7WgddtSb2PRO2xSh9i8DZaM4o3XKXz2OX
GPgBGkLoKNhEoGSNVqp2ZMJZbMwxm2Vzi3JBWqa6+JKfGV4Nb4JHMiglthr13ztH
B63cf+QNqeVjUmVfj1n6O1OyCcpDRUgmXlKK68VepQKWJp7SEeewqY7BcZe54vss
0D4Fq+7htzy3tGlCJrbid706ClyH+v/JD83C+KkRd25pUQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:42 2026 by rpki-client