Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/tr8FATLSUssLeZoYd6_aJnbXdq8.roa
File: tr8FATLSUssLeZoYd6_aJnbXdq8.roa (raw, json)
Hash identifier: 7GIhmLkuSFB1irvbk3E504lE/D2UrFS2bjn5VxfkzOQ=
Subject key identifier: B6:BF:05:01:32:D2:52:CB:0B:79:9A:18:77:AF:DA:26:76:D7:76:AF
Certificate issuer: /CN=b753ac03945289e186bf29737b25618d3ccd4430
Certificate serial: 019F2368BD56A1DA5590AF1EE6EC6635A0A7
Authority key identifier: B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/tr8FATLSUssLeZoYd6_aJnbXdq8.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bd:56:a1:da:55:90:af:1e:e6:ec:66:35:a0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b753ac03945289e186bf29737b25618d3ccd4430
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6bf050132d252cb0b799a1877afda2676d776af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:53:07:2b:44:a3:6d:15:10:5c:80:34:0f:
a7:08:92:82:d0:68:ed:09:dc:38:68:36:97:40:70:
38:dd:15:78:ac:37:86:0e:eb:8c:bd:c9:45:e0:4b:
06:79:bc:22:af:32:03:43:9b:f3:d1:2d:74:0c:e6:
82:8b:a4:80:1f:97:e4:20:2c:da:cb:7c:32:43:77:
3c:d8:63:4b:73:91:99:3c:b6:63:64:a8:03:13:cf:
3b:53:9c:2d:d3:15:49:87:dc:22:f5:7c:f1:ce:59:
6e:6b:66:2b:ab:88:50:93:4a:2c:d1:bf:57:e9:bb:
34:92:0d:87:e2:c1:47:03:ef:cd:74:e6:bc:c4:7e:
10:3b:76:ee:8f:f3:00:e0:6f:0b:7f:6e:1d:e4:a4:
a2:ff:08:c5:a3:41:51:94:7a:03:f5:90:50:27:fa:
bf:f8:31:26:51:09:84:e0:a2:2e:f6:63:73:aa:c1:
4d:2a:78:da:ef:de:e1:cf:50:8d:95:34:d6:2c:72:
0a:73:39:7a:06:ad:5a:3a:5e:d6:09:6d:c2:be:f5:
19:83:32:c1:8e:7f:f0:ea:ac:1b:d6:06:31:3a:08:
b0:9e:67:93:ec:b1:c7:d3:bc:77:5d:66:9f:08:a7:
a0:2b:8b:8a:a4:29:11:53:4e:78:af:0b:74:29:95:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BF:05:01:32:D2:52:CB:0B:79:9A:18:77:AF:DA:26:76:D7:76:AF
X509v3 Authority Key Identifier:
keyid:B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/tr8FATLSUssLeZoYd6_aJnbXdq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.199.0-62.201.205.255
62.201.207.0-62.201.208.255
62.201.237.0/24
62.201.248.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9a:32:0a:2d:e2:e4:7b:f0:03:a2:2f:14:2f:9e:e3:87:05:
fe:7f:18:a3:66:52:d6:ed:fa:a1:91:69:1d:14:2e:cb:5c:3a:
00:52:cf:13:f7:c3:a3:1e:02:85:0e:98:0f:45:97:53:3c:eb:
cc:46:ed:30:f2:00:f4:6f:a0:d1:3f:c0:80:f9:91:b5:3c:83:
be:8b:e9:52:23:b6:79:40:c3:4b:36:58:79:67:b7:41:ba:d1:
53:43:3e:03:98:a8:0c:1f:b0:43:3c:8c:81:cf:c4:64:c7:61:
cc:21:eb:d6:0e:01:34:5c:32:2b:14:f6:0b:ec:73:c5:08:29:
a3:f0:40:6c:f6:00:b6:c7:e8:10:fe:37:cd:a2:08:6b:28:62:
04:ad:60:a5:f0:d4:f5:ac:5b:01:6e:d2:f1:0a:7f:78:c3:05:
f8:2e:72:b8:89:01:85:7b:9a:f0:3c:e3:0b:c1:ff:13:38:d4:
00:1d:17:c7:c5:fa:77:38:60:1d:73:2a:9f:eb:f0:b5:f1:a1:
dc:43:b9:b1:de:8f:34:d7:9f:74:98:1a:a9:9f:d7:ab:b0:95:
fb:4c:11:5f:b2:b5:e8:7a:fa:83:e6:d2:93:aa:50:17:ce:c3:
60:a6:9f:a3:0e:39:be:2e:a8:19:23:09:59:f7:55:56:55:88:
3c:4e:c0:80
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZ8jaL1WodpVkK8e5uxmNaCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTNhYzAzOTQ1Mjg5ZTE4NmJmMjk3MzdiMjU2MThkM2Nj
ZDQ0MzAwHhcNMjYwNzAyMTUxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmJmMDUwMTMyZDI1MmNiMGI3OTlhMTg3N2FmZGEyNjc2ZDc3NmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5VTBytEo20VEFyANA+nCJKC0Gjt
Cdw4aDaXQHA43RV4rDeGDuuMvclF4EsGebwirzIDQ5vz0S10DOaCi6SAH5fkICza
y3wyQ3c82GNLc5GZPLZjZKgDE887U5wt0xVJh9wi9Xzxzllua2Yrq4hQk0os0b9X
6bs0kg2H4sFHA+/NdOa8xH4QO3buj/MA4G8Lf24d5KSi/wjFo0FRlHoD9ZBQJ/q/
+DEmUQmE4KIu9mNzqsFNKnja797hz1CNlTTWLHIKczl6Bq1aOl7WCW3CvvUZgzLB
jn/w6qwb1gYxOgiwnmeT7LHH07x3XWafCKegK4uKpCkRU054rwt0KZXjqwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFLa/BQEy0lLLC3maGHev2iZ213avMB8GA1UdIwQY
MBaAFLdTrAOUUonhhr8pc3slYY08zUQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFPc0E1UlNpZUdHdnlsemV5VmhqVHpOUkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvdHI4RkFUTFNVc3NMZVpvWWQ2X2FKbmJYZHE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvdDFPc0E1UlNpZUdHdnlsemV5VmhqVHpOUkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAPsnAMAwD
BAA+yccDBAE+ycwwDAMEAD7JzwMEAD7J0AMEAD7J7QMEAD7J+DANBgkqhkiG9w0B
AQsFAAOCAQEAE5oyCi3i5HvwA6IvFC+e44cF/n8Yo2ZS1u36oZFpHRQuy1w6AFLP
E/fDox4ChQ6YD0WXUzzrzEbtMPIA9G+g0T/AgPmRtTyDvovpUiO2eUDDSzZYeWe3
QbrRU0M+A5ioDB+wQzyMgc/EZMdhzCHr1g4BNFwyKxT2C+xzxQgpo/BAbPYAtsfo
EP43zaIIayhiBK1gpfDU9axbAW7S8Qp/eMMF+C5yuIkBhXua8DzjC8H/EzjUAB0X
x8X6dzhgHXMqn+vwtfGh3EO5sd6PNNefdJgaqZ/Xq7CV+0wRX7K16Hr6g+bSk6pQ
F87DYKafow45vi6oGSMJWfdVVlWIPE7AgA==
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:49 2026 by rpki-client