Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Y-819dZ70kF1HRfiIjcP_qPwqbI.roa
File: Y-819dZ70kF1HRfiIjcP_qPwqbI.roa (raw, json)
Hash identifier: CUeY5Y0OM0Vapauz3RdME7eF7ehpIWRsUXmM44EGVYg=
Subject key identifier: 63:EF:35:F5:D6:7B:D2:41:75:1D:17:E2:22:37:0F:FE:A3:F0:A9:B2
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 019E736DA9D39510154537E3FC89C1B2D16C
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Y-819dZ70kF1HRfiIjcP_qPwqbI.roa
Signing time: Fri 29 May 2026 11:10:27 +0000
ROA not before: Fri 29 May 2026 11:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 62.100.211.0/24 maxlen: 24
157.97.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:6d:a9:d3:95:10:15:45:37:e3:fc:89:c1:b2:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: May 29 11:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63ef35f5d67bd241751d17e222370ffea3f0a9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:09:31:de:01:4b:6c:a1:7a:c2:5e:a7:1e:
3f:15:4e:be:74:50:ff:35:d3:18:62:bd:45:83:f8:
24:77:f2:31:72:76:3b:d4:7b:2e:ab:c7:78:60:e1:
d7:e3:e2:4f:ff:28:07:3d:ef:13:3f:c0:52:d0:b0:
d0:82:3f:33:9c:39:17:42:e2:6a:30:89:05:f0:5d:
93:c5:96:7c:98:4a:82:10:fc:65:e4:a2:e9:c3:12:
79:b6:94:36:26:d3:68:f0:f1:b5:9a:73:8b:09:dc:
06:7d:af:fd:f1:f0:fc:d1:b8:14:ff:d9:4c:09:9c:
ba:25:96:6b:72:d2:90:f4:66:68:d3:49:23:3e:9a:
c1:20:dd:66:0c:66:cf:94:9f:af:18:7c:59:38:df:
c5:c3:9d:bc:87:69:43:6c:ca:6d:cf:d7:e5:42:54:
96:c2:a2:ff:cc:4d:5c:3a:b5:d3:10:db:44:32:65:
e6:66:17:00:22:ca:89:c0:bd:b4:f3:51:a7:9c:f6:
56:3a:55:fc:12:98:72:7d:7e:31:ae:23:f9:b1:71:
46:d3:f5:d1:26:73:d8:a0:6e:13:fa:bf:bf:8c:ed:
65:c9:38:ad:43:6b:03:2a:c5:a5:06:48:e3:bc:1a:
33:a1:19:ad:c0:bd:f2:a5:d5:52:ed:04:26:fc:7e:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EF:35:F5:D6:7B:D2:41:75:1D:17:E2:22:37:0F:FE:A3:F0:A9:B2
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Y-819dZ70kF1HRfiIjcP_qPwqbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.211.0/24
157.97.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2c:e9:aa:cd:88:e0:18:af:b4:e9:5a:39:b9:ff:d3:07:52:
d7:a3:2e:2c:cd:78:2e:07:4a:00:ca:e7:72:70:9b:c2:a6:b7:
08:4e:3f:3a:cb:9d:30:9b:94:c8:15:9f:bc:97:18:b1:c7:f7:
31:c1:00:63:39:be:b6:73:6d:6b:56:10:f1:72:68:51:f4:5f:
5e:56:7e:68:65:50:ce:02:a9:c3:5e:02:cf:ba:b4:21:a6:94:
a5:6a:81:82:2f:fe:fd:68:a3:be:85:12:56:d1:29:1a:71:aa:
bc:38:b4:f6:ee:49:ba:77:0f:65:53:12:a0:f8:a3:b5:5e:d8:
af:84:28:3c:b2:61:bc:31:8f:54:7c:05:5c:ea:bd:c9:75:d3:
3a:7c:f4:35:07:e0:5f:18:82:21:ba:2d:70:e7:f3:15:70:cc:
f3:96:c7:d3:67:f7:80:b6:0f:09:c5:88:1e:c1:6a:9b:01:13:
ee:26:34:8b:82:bf:39:3a:2a:e3:cd:71:bf:2a:ea:7d:2c:f1:
c4:9c:7c:80:cd:46:5a:07:46:e6:dd:82:65:e7:15:81:c8:c9:
ce:51:31:55:22:3a:b5:12:b4:cc:24:ee:74:1e:b2:01:d7:e5:
d7:b1:07:e5:89:fc:63:db:21:97:28:5c:8c:0e:fc:33:7d:54:
3c:04:3c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:48:18 2026 by rpki-client