Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/ea_Ab_KVnKlMEbYPrAJZWmJhhsc.roa
File: ea_Ab_KVnKlMEbYPrAJZWmJhhsc.roa (raw, json)
Hash identifier: 6cSn8uzwyUxMJNcnfAeGMw+pCS/UoUALDhF7qixnWRg=
Subject key identifier: 79:AF:C0:6F:F2:95:9C:A9:4C:11:B6:0F:AC:02:59:5A:62:61:86:C7
Certificate issuer: /CN=b753ac03945289e186bf29737b25618d3ccd4430
Certificate serial: 019F2368BFDB2F81E000CE1186A0A618AD33
Authority key identifier: B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/ea_Ab_KVnKlMEbYPrAJZWmJhhsc.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62419
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bf:db:2f:81:e0:00:ce:11:86:a0:a6:18:ad:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b753ac03945289e186bf29737b25618d3ccd4430
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79afc06ff2959ca94c11b60fac02595a626186c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:4b:a7:8c:fc:ce:fb:50:58:c1:05:25:9e:
75:51:10:37:b4:33:dc:71:86:b7:b0:81:be:f8:6a:
92:07:c1:4f:6b:b6:63:19:ec:c9:0f:57:e5:97:4c:
9d:f9:3d:e1:1b:bf:50:8f:e5:17:72:7c:e0:1f:31:
ee:06:7a:47:1c:55:b2:cc:98:d0:3d:ab:48:8a:2a:
fe:8c:40:63:9d:9f:f8:86:c2:7b:b2:3c:47:ab:ab:
a2:88:bc:e6:76:4d:9f:d2:87:91:59:b0:b6:3d:7b:
e0:cb:3f:fc:64:66:28:a1:78:2a:8c:a5:2d:a0:db:
33:92:d7:90:72:2d:a2:aa:63:94:e1:24:c3:86:ef:
fd:16:56:1f:ce:f3:d3:20:1e:1c:44:b8:13:68:50:
8e:6c:5a:6c:f0:9d:e5:3f:49:2f:5a:98:56:17:ca:
0d:db:60:06:ec:8b:3b:b1:d3:b0:9e:9c:0d:f2:4f:
d5:6b:87:ba:be:2e:2f:e8:d8:58:2d:be:3e:a1:e4:
18:b0:a0:c5:5c:86:6b:e5:7e:71:f8:3e:8f:4e:89:
55:ed:f3:6e:5d:66:04:29:21:6c:3c:50:e3:84:68:
54:a3:50:b8:f7:12:a2:16:24:59:fe:d5:31:f7:26:
77:07:71:49:2e:52:f8:7c:bb:cf:33:35:dc:89:f5:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AF:C0:6F:F2:95:9C:A9:4C:11:B6:0F:AC:02:59:5A:62:61:86:C7
X509v3 Authority Key Identifier:
keyid:B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/ea_Ab_KVnKlMEbYPrAJZWmJhhsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.202.0/24
62.201.237.0/24
62.201.248.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e7:c4:85:ec:eb:54:6f:ca:c5:18:04:06:ab:19:a4:33:08:
4e:ae:97:1c:ec:3b:01:a1:45:65:67:cd:94:ab:0a:07:de:68:
2a:17:46:4b:7d:0b:44:04:96:5d:6c:66:a3:ab:e5:b6:aa:ae:
b2:1b:37:57:7e:9c:79:18:17:91:06:3a:6b:6d:3e:78:17:de:
10:31:33:0e:43:92:88:21:60:3d:a8:82:5b:79:87:e9:7e:29:
c1:39:dc:af:fa:ac:a9:e6:e7:6e:6d:c2:6c:ad:bf:5c:c2:1c:
e3:98:22:64:1d:f0:d2:8e:93:6a:c0:73:61:c5:7e:ca:7f:79:
7e:a6:84:36:eb:b9:54:64:71:33:fc:9d:2b:f2:15:79:d3:ef:
59:1b:73:53:7d:56:86:fb:11:63:a6:c7:51:9a:54:78:7d:99:
ae:41:87:04:a5:eb:62:ec:4d:56:8a:a2:7d:ca:b1:17:49:04:
39:e1:34:51:35:30:39:ac:4c:df:d2:8c:92:46:c5:33:39:e1:
40:ee:1e:7d:a5:43:de:b8:63:08:cb:2d:8a:aa:6e:de:e5:d5:
af:a2:30:a9:87:bc:26:23:00:2a:98:2b:40:c8:d5:75:19:82:
ba:23:7d:05:9b:78:74:ea:34:41:5b:ed:ab:7b:07:49:fa:7c:
7f:67:21:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:26 2026 by rpki-client