Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/dJ58BurgqXZpPqkhcT_jaenhUrw.roa
File: dJ58BurgqXZpPqkhcT_jaenhUrw.roa (raw, json)
Hash identifier: dLxvYlPZ9yGSqG/kGTBaW1RvMYRWO2oTa+cptYPPNrU=
Subject key identifier: 74:9E:7C:06:EA:E0:A9:76:69:3E:A9:21:71:3F:E3:69:E9:E1:52:BC
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 019FCBD9CA587752306C719588E59F757A52
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/dJ58BurgqXZpPqkhcT_jaenhUrw.roa
Signing time: Tue 04 Aug 2026 08:17:55 +0000
ROA not before: Tue 04 Aug 2026 08:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48806
IP address blocks: 62.100.192.0/22 maxlen: 22
62.100.200.0/22 maxlen: 24
62.100.212.0/22 maxlen: 22
62.100.220.0/22 maxlen: 22
93.188.68.0/22 maxlen: 22
157.97.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:d9:ca:58:77:52:30:6c:71:95:88:e5:9f:75:7a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Aug 4 08:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=749e7c06eae0a976693ea921713fe369e9e152bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:7e:c4:2e:73:8a:b3:d5:d3:10:24:6d:f5:
fb:6b:37:d7:ce:8e:01:75:73:f7:24:0b:e1:15:fe:
24:9e:aa:e9:c6:b8:8a:81:de:19:ea:b1:ee:b8:ac:
c6:eb:0e:24:ad:9f:e3:29:3f:09:91:1d:60:86:10:
fb:2a:d7:77:32:c9:24:22:83:d8:16:bc:b3:03:da:
65:c2:08:98:2d:b9:6e:86:32:24:49:6b:cb:7d:84:
1a:82:5c:72:c9:51:9b:01:e8:f9:70:ab:3c:a6:e1:
53:6a:db:90:8f:bd:e7:29:b6:54:97:60:a4:24:5a:
0c:0b:de:db:4f:46:51:cc:bb:1b:28:08:07:c7:47:
2d:53:94:72:5d:5f:3d:1f:5e:b8:29:23:d4:cc:5a:
25:fc:4a:21:9a:c1:7f:a5:a0:85:98:9b:9b:69:f3:
3a:a7:de:7c:05:4e:a6:9a:be:81:55:df:e6:3e:32:
bf:81:1a:a2:43:52:0f:98:98:34:52:d2:a1:62:0c:
03:97:7e:90:4e:74:e1:9c:68:74:07:f9:87:3c:aa:
d6:bb:9c:91:39:db:b8:66:6f:26:ca:98:b0:cc:3c:
ec:a2:f7:2f:3b:05:d1:2b:b2:05:7a:fb:03:1e:fe:
e1:08:95:95:91:e7:c3:4b:b8:57:0b:50:4d:47:7a:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9E:7C:06:EA:E0:A9:76:69:3E:A9:21:71:3F:E3:69:E9:E1:52:BC
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/dJ58BurgqXZpPqkhcT_jaenhUrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.192.0/22
62.100.200.0/22
62.100.212.0/22
62.100.220.0/22
93.188.68.0/22
157.97.123.0/24
Signature Algorithm: sha256WithRSAEncryption
40:51:64:ba:20:6f:b1:b1:e1:3a:83:65:55:e0:a4:c2:2a:5b:
c1:6e:90:d2:e1:4b:8e:59:8c:78:1b:3f:50:e1:9f:bc:60:a1:
8f:69:31:df:1c:bf:26:17:5a:8b:c5:15:20:55:6d:a7:fc:ae:
7b:dc:42:f1:74:d8:f0:f2:f0:b7:9a:19:24:11:8a:8f:df:db:
d9:eb:a4:52:54:46:6c:ef:f9:bb:4a:05:10:0e:3b:0b:10:84:
93:4a:5e:f1:76:58:a3:97:eb:8b:ee:30:3f:75:6c:4f:e0:3b:
8c:bb:87:79:92:39:57:89:d2:9b:2f:2a:40:c2:c2:56:95:93:
ff:c8:95:df:1f:08:10:50:3b:de:3f:7d:c4:e9:3f:9e:a1:e1:
c6:db:e6:c5:25:34:4b:33:b1:11:8e:6a:2d:1c:2f:b2:94:0a:
53:b6:56:ce:90:88:d7:c1:1c:c0:fb:05:0e:f8:22:25:19:c9:
24:45:a9:b7:2b:71:28:17:11:09:13:f7:5d:4b:6e:bb:90:c8:
78:cd:b7:3c:6b:03:e0:6c:8e:90:d7:1b:6a:81:d0:05:d7:c0:
13:f3:14:38:46:f7:65:86:e9:42:f5:50:4c:28:a2:2f:93:07:
12:8f:86:6d:59:62:5d:99:aa:d7:d0:6a:fc:0f:40:47:cb:f7:
27:2d:f5:c5
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ/L2cpYd1IwbHGViOWfdXpSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjYwODA0MDgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDllN2MwNmVhZTBhOTc2NjkzZWE5MjE3MTNmZTM2OWU5ZTE1MmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtud+xC5zirPV0xAkbfX7azfXzo4B
dXP3JAvhFf4knqrpxriKgd4Z6rHuuKzG6w4krZ/jKT8JkR1ghhD7Ktd3MskkIoPY
FryzA9plwgiYLbluhjIkSWvLfYQaglxyyVGbAej5cKs8puFTatuQj73nKbZUl2Ck
JFoMC97bT0ZRzLsbKAgHx0ctU5RyXV89H164KSPUzFol/EohmsF/paCFmJubafM6
p958BU6mmr6BVd/mPjK/gRqiQ1IPmJg0UtKhYgwDl36QTnThnGh0B/mHPKrWu5yR
Odu4Zm8mypiwzDzsovcvOwXRK7IFevsDHv7hCJWVkefDS7hXC1BNR3q6CQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFHSefAbq4Kl2aT6pIXE/42np4VK8MB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvZEo1OEJ1cmdxWFpwUHFraGNUX2phZW5oVXJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCPmTAAwQC
PmTIAwQCPmTUAwQCPmTcAwQCXbxEAwQAnWF7MA0GCSqGSIb3DQEBCwUAA4IBAQBA
UWS6IG+xseE6g2VV4KTCKlvBbpDS4UuOWYx4Gz9Q4Z+8YKGPaTHfHL8mF1qLxRUg
VW2n/K573ELxdNjw8vC3mhkkEYqP39vZ66RSVEZs7/m7SgUQDjsLEISTSl7xdlij
l+uL7jA/dWxP4DuMu4d5kjlXidKbLypAwsJWlZP/yJXfHwgQUDveP33E6T+eoeHG
2+bFJTRLM7ERjmotHC+ylApTtlbOkIjXwRzA+wUO+CIlGckkRam3K3EoFxEJE/dd
S267kMh4zbc8awPgbI6Q1xtqgdAF18AT8xQ4RvdlhulC9VBMKKIvkwcSj4ZtWWJd
marX0Gr8D0BHy/cnLfXF
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:33:13 2026 by rpki-client