Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/Z-jcKXJaSgf1__y9ezg7cGVAl98.roa
File: Z-jcKXJaSgf1__y9ezg7cGVAl98.roa (raw, json)
Hash identifier: ceq2+LIRVnlNgauj63qax+Op8eTt2wAzZKVPQi48mEU=
Subject key identifier: 67:E8:DC:29:72:5A:4A:07:F5:FF:FC:BD:7B:38:3B:70:65:40:97:DF
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 019F7A49A3A51040C67F43CF88D1C244E1F2
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/Z-jcKXJaSgf1__y9ezg7cGVAl98.roa
Signing time: Sun 19 Jul 2026 12:11:14 +0000
ROA not before: Sun 19 Jul 2026 12:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47589
IP address blocks: 62.150.52.0/24 maxlen: 24
62.150.56.0/24 maxlen: 24
62.150.92.0/24 maxlen: 24
62.150.119.0/24 maxlen: 24
62.150.164.0/22 maxlen: 22
62.150.202.0/24 maxlen: 24
62.150.204.0/22 maxlen: 22
62.150.210.0/24 maxlen: 24
62.150.224.0/22 maxlen: 22
62.150.228.0/22 maxlen: 22
62.150.236.0/22 maxlen: 22
62.150.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7a:49:a3:a5:10:40:c6:7f:43:cf:88:d1:c2:44:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Jul 19 12:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67e8dc29725a4a07f5fffcbd7b383b70654097df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:26:45:83:08:b5:bd:dc:15:75:c0:d2:03:
b1:af:4b:6b:48:29:02:19:00:61:3b:22:57:d0:80:
99:db:7d:df:d4:d1:03:61:2c:91:ac:cc:fd:83:f0:
20:07:30:e5:62:33:b2:32:5b:a5:21:29:bf:f7:18:
4a:d6:cd:ea:ad:dc:4b:10:8b:50:82:19:ba:fe:ef:
72:e6:48:df:f6:e4:7f:6e:73:5e:5d:1f:28:ee:b7:
51:41:f7:9d:c0:fa:9e:a5:c3:4e:5b:9a:1d:d3:bb:
21:53:1c:b1:ef:ff:1d:92:f7:95:5e:c9:a0:3f:b7:
a1:25:94:d7:8f:a6:70:d4:6d:cc:1e:5c:1a:7f:22:
86:32:a1:6f:53:37:40:1c:ce:69:49:f7:02:d5:e0:
79:f3:c5:26:72:c2:20:21:7d:4d:6d:a0:99:c6:32:
5c:76:bd:a5:10:9b:0c:99:5a:65:ea:df:06:a2:df:
b5:2a:7c:86:b7:cf:58:8f:7c:be:c2:19:36:fc:1a:
bf:75:98:ed:b5:95:7d:02:69:f0:d5:c6:d6:8c:e8:
95:33:77:83:3c:ce:21:f0:b1:20:ff:74:50:a1:27:
7a:f6:3c:a5:af:d7:c2:6b:b1:37:72:64:3c:14:f0:
93:ee:04:ef:d7:51:cb:5f:73:00:c7:ae:2a:a0:bb:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E8:DC:29:72:5A:4A:07:F5:FF:FC:BD:7B:38:3B:70:65:40:97:DF
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/Z-jcKXJaSgf1__y9ezg7cGVAl98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.150.52.0/24
62.150.56.0/24
62.150.92.0/24
62.150.119.0/24
62.150.164.0/22
62.150.202.0/24
62.150.204.0/22
62.150.210.0/24
62.150.224.0/21
62.150.236.0/22
62.150.244.0/22
Signature Algorithm: sha256WithRSAEncryption
63:8e:95:81:43:a0:b3:c8:2a:6f:52:0f:fb:e4:a5:a6:6c:b8:
ab:a9:39:09:cf:b4:43:30:b4:8c:4b:49:56:07:8c:7e:23:c9:
5a:18:8c:51:a0:64:cb:6e:9f:6f:87:21:d8:04:1c:a9:e9:cd:
60:e8:e3:6d:45:20:ae:3c:94:08:93:85:a9:ba:a6:60:5e:a4:
54:04:ca:48:80:f5:77:a0:9e:c9:76:ea:0d:d2:06:28:98:ec:
45:07:0d:9b:86:b0:b1:a1:69:f7:63:3e:33:8b:97:b2:0c:f7:
5f:1c:73:c1:57:63:ef:6c:ad:15:ad:44:7f:b0:b8:0e:c2:82:
c1:01:01:4c:51:b8:bd:64:df:fe:ca:9e:9f:4e:c0:f9:ec:ae:
e6:c4:70:83:9d:94:96:f5:ee:10:bb:5f:da:92:56:8b:29:af:
70:9d:05:4f:bf:8c:24:75:fa:e3:12:2f:a6:d5:60:3a:0b:05:
89:3d:4c:37:22:2c:85:87:96:bd:ac:21:93:bf:60:00:0b:3b:
4e:69:ac:fa:82:7b:8d:4b:2d:0d:73:a0:6a:2f:86:2f:53:6d:
e8:ae:20:08:b8:de:08:1f:16:7a:07:8e:1d:84:fd:57:81:fc:
3e:e6:c1:05:03:7a:f5:0f:b7:aa:bd:e2:cb:0a:62:81:a8:f2:
31:7a:91:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:32:56 2026 by rpki-client