Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/fPtQuFsuVeGkMlwHU_sA5LSJu_E.roa
File: fPtQuFsuVeGkMlwHU_sA5LSJu_E.roa (raw, json)
Hash identifier: WDhKtqp/PbP0mGK261CVF4VxFxH7CTo0soaxOvLBySA=
Subject key identifier: 7C:FB:50:B8:5B:2E:55:E1:A4:32:5C:07:53:FB:00:E4:B4:89:BB:F1
Certificate issuer: /CN=b753ac03945289e186bf29737b25618d3ccd4430
Certificate serial: 019F2368BF97136D9BF48D188A40C60D2CE5
Authority key identifier: B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/fPtQuFsuVeGkMlwHU_sA5LSJu_E.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48492
IP address blocks: 62.201.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bf:97:13:6d:9b:f4:8d:18:8a:40:c6:0d:2c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b753ac03945289e186bf29737b25618d3ccd4430
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cfb50b85b2e55e1a4325c0753fb00e4b489bbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:26:2d:16:0a:da:f1:63:53:70:a2:d9:b8:
07:fd:09:73:97:6f:58:85:66:e7:a0:43:e0:d3:c6:
5c:d9:34:8d:17:13:13:5d:e2:7d:67:ba:3b:44:15:
82:67:32:50:bb:ef:f8:df:c7:67:80:fe:48:d5:8d:
29:61:68:bc:bc:2c:34:d7:e1:43:06:88:c7:af:2a:
62:1e:3e:57:ea:b7:39:0e:e3:fe:79:d5:a5:40:bf:
17:e5:ad:57:17:3b:12:f5:1e:98:5a:7b:61:c1:92:
e8:e6:0e:9b:8d:a0:1a:b5:38:cf:8c:be:c4:fb:6c:
1d:67:22:ff:e5:95:2b:b6:71:9e:8d:41:a3:21:f5:
99:ba:85:cb:de:be:1d:2d:66:02:86:52:1a:9f:b0:
24:14:24:f8:c3:a7:d4:45:be:4b:10:09:4f:93:94:
ad:19:95:e9:70:08:12:eb:8b:c3:31:e5:fb:6f:04:
04:70:a5:c4:07:37:e1:94:ed:2d:4d:7a:f6:13:2a:
5e:e4:a2:c8:9d:b5:fb:49:f8:02:3a:64:3c:9f:b9:
dd:d1:bd:c7:8c:53:cd:f5:27:23:96:16:01:c2:6c:
e7:a9:93:86:66:dd:c7:63:0a:bd:3e:d9:46:7b:bd:
e8:e5:12:b4:f9:1e:5c:18:4a:a0:3f:1e:5a:c0:29:
c0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FB:50:B8:5B:2E:55:E1:A4:32:5C:07:53:FB:00:E4:B4:89:BB:F1
X509v3 Authority Key Identifier:
keyid:B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/fPtQuFsuVeGkMlwHU_sA5LSJu_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.239.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:47:3b:4b:3e:2e:91:25:20:48:47:c4:8f:7c:af:96:b2:f9:
1f:0d:52:9f:9f:f2:77:7f:d3:f0:7d:83:d6:6a:dc:3d:d2:d9:
6f:24:23:1f:05:d7:30:f2:1b:e7:12:1a:f8:98:c0:90:43:a4:
40:51:96:66:c9:5b:68:d2:a1:79:4c:2d:f3:3b:da:bb:31:33:
a5:8e:f2:27:35:2f:66:63:4c:75:51:32:a9:f5:b3:55:f1:4e:
69:e9:d8:80:75:25:73:29:aa:c9:df:3e:11:5d:d0:35:40:5c:
ee:34:5b:b7:b8:c3:e0:e8:82:2d:5b:a6:61:e5:35:57:8a:17:
8f:01:d0:58:82:ac:cf:dd:d6:3a:d3:5b:f3:3a:05:69:01:35:
cd:4c:ed:7e:80:28:fa:26:b0:94:33:f0:3b:44:6e:36:f3:3f:
7f:99:66:97:64:9a:5c:42:be:e0:c7:5e:00:de:61:a2:37:2c:
5c:66:33:e1:9e:f8:db:20:01:3f:44:3b:61:d2:57:90:17:10:
c9:6e:56:6b:ed:9f:cf:e4:b5:e6:14:c2:83:47:e2:f3:0e:22:
62:0f:dc:35:27:39:05:9b:17:ac:e0:75:c1:0e:4b:94:f3:98:
ca:18:f5:98:7b:f1:97:92:70:ef:de:3f:c7:f3:5d:d6:bf:c8:
27:72:5d:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaL+XE22b9I0YikDGDSzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTNhYzAzOTQ1Mjg5ZTE4NmJmMjk3MzdiMjU2MThkM2Nj
ZDQ0MzAwHhcNMjYwNzAyMTUxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2ZiNTBiODViMmU1NWUxYTQzMjVjMDc1M2ZiMDBlNGI0ODliYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxwmLRYK2vFjU3Ci2bgH/Qlzl29Y
hWbnoEPg08Zc2TSNFxMTXeJ9Z7o7RBWCZzJQu+/438dngP5I1Y0pYWi8vCw01+FD
BojHrypiHj5X6rc5DuP+edWlQL8X5a1XFzsS9R6YWnthwZLo5g6bjaAatTjPjL7E
+2wdZyL/5ZUrtnGejUGjIfWZuoXL3r4dLWYChlIan7AkFCT4w6fURb5LEAlPk5St
GZXpcAgS64vDMeX7bwQEcKXEBzfhlO0tTXr2Eype5KLInbX7SfgCOmQ8n7nd0b3H
jFPN9ScjlhYBwmznqZOGZt3HYwq9PtlGe73o5RK0+R5cGEqgPx5awCnAhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHz7ULhbLlXhpDJcB1P7AOS0ibvxMB8GA1UdIwQY
MBaAFLdTrAOUUonhhr8pc3slYY08zUQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFPc0E1UlNpZUdHdnlsemV5VmhqVHpOUkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvZlB0UXVGc3VWZUdrTWx3SFVfc0E1TFNKdV9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvdDFPc0E1UlNpZUdHdnlsemV5VmhqVHpOUkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPsnvMA0G
CSqGSIb3DQEBCwUAA4IBAQCsRztLPi6RJSBIR8SPfK+WsvkfDVKfn/J3f9PwfYPW
atw90tlvJCMfBdcw8hvnEhr4mMCQQ6RAUZZmyVto0qF5TC3zO9q7MTOljvInNS9m
Y0x1UTKp9bNV8U5p6diAdSVzKarJ3z4RXdA1QFzuNFu3uMPg6IItW6Zh5TVXiheP
AdBYgqzP3dY601vzOgVpATXNTO1+gCj6JrCUM/A7RG428z9/mWaXZJpcQr7gx14A
3mGiNyxcZjPhnvjbIAE/RDth0leQFxDJblZr7Z/P5LXmFMKDR+LzDiJiD9w1JzkF
mxes4HXBDkuU85jKGPWYe/GXknDv3j/H813Wv8gncl2O
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:27 2026 by rpki-client