Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/06Sc0eMiZFBHUMpf5oZXoh19f3g.roa
File: 06Sc0eMiZFBHUMpf5oZXoh19f3g.roa (raw, json)
Hash identifier: BZKXDhv9T9YgTMEVFOAxa+R6XbC5n20pfmCWfGD92es=
Subject key identifier: D3:A4:9C:D1:E3:22:64:50:47:50:CA:5F:E6:86:57:A2:1D:7D:7F:78
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A09E9D0DF4A08CA8B5804343DEDC51DAAD
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/06Sc0eMiZFBHUMpf5oZXoh19f3g.roa
Signing time: Mon 14 Sep 2026 06:31:27 +0000
ROA not before: Mon 14 Sep 2026 06:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 62.233.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:9d:0d:f4:a0:8c:a8:b5:80:43:43:de:dc:51:da:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 14 06:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3a49cd1e32264504750ca5fe68657a21d7d7f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a1:31:1f:1a:17:95:22:bb:d2:7e:ea:fe:af:
3e:13:76:fa:3c:95:f2:b0:41:65:d0:13:39:25:aa:
a8:52:0a:99:7b:52:8c:ec:3c:9c:bf:b5:23:aa:c9:
9b:89:e4:c0:54:4f:57:73:44:d9:31:1f:e6:4f:b2:
bb:29:88:2e:94:ed:1b:b4:c8:3f:3f:07:5f:fb:6b:
c5:73:26:a0:2d:e9:f4:85:57:5b:16:21:fc:00:5c:
9f:51:82:b3:5c:6e:72:5c:d3:07:9a:93:a2:05:bf:
08:c2:d9:fb:d2:8c:93:e3:fa:da:a6:f1:76:9f:8c:
19:50:53:0d:86:5e:3d:a7:d2:c5:fe:2b:3b:a5:4d:
42:a5:c0:97:b8:1b:2e:bb:eb:e8:f8:1e:66:d6:50:
00:28:d5:20:90:02:d0:b0:cb:66:62:66:8c:70:d9:
d6:b2:23:87:a2:ef:fb:70:a6:52:87:2a:7f:53:8d:
1d:64:ff:0e:e3:26:d9:e5:8f:04:ad:d6:29:2a:dc:
7c:55:76:4e:98:18:48:fb:28:5a:ea:fa:db:bf:69:
77:88:87:b7:68:db:65:8e:e8:8f:0d:b7:66:e0:27:
34:95:d7:15:39:20:31:6a:05:22:9b:ec:1e:60:f7:
d7:8e:96:ff:de:a5:97:a8:28:76:39:d7:8b:7e:0c:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A4:9C:D1:E3:22:64:50:47:50:CA:5F:E6:86:57:A2:1D:7D:7F:78
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/06Sc0eMiZFBHUMpf5oZXoh19f3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ca:da:06:d8:6f:92:ba:20:35:66:a8:9e:47:68:bb:6f:b4:
e4:e4:70:18:ee:20:22:a6:8c:24:5a:d1:92:ec:95:ae:0c:f5:
94:25:04:d3:35:13:9c:5c:78:f4:5b:26:4a:72:0c:59:f2:69:
1b:82:b1:75:c1:19:81:ce:9b:13:10:1c:8a:41:33:8d:e8:af:
dc:77:e4:2f:90:1f:86:05:bd:08:76:c2:d8:81:dc:e7:03:a1:
85:df:a0:68:2d:56:43:94:b8:3b:5a:0d:97:ef:2e:a8:dc:8f:
70:5c:76:4c:1e:55:48:0c:d1:d2:f6:35:03:5c:c8:b4:ac:47:
df:e2:17:94:29:cc:5a:77:6e:af:88:da:f7:72:2c:4c:5a:df:
f2:54:7a:80:b7:e8:54:40:87:99:59:a1:32:6a:f3:61:ae:3f:
10:e4:f0:48:e1:e8:04:b4:1a:6e:e3:9f:4c:f5:6d:f5:bb:17:
62:49:ce:f6:47:1a:91:3f:09:54:4e:a8:b6:0f:0a:7a:e8:cb:
cf:2a:3a:d2:5b:df:c3:c6:31:b7:99:7c:e7:29:1b:f4:55:cf:
4d:41:71:5c:e3:bc:b6:07:95:94:12:cc:44:88:15:6c:d6:cd:
c7:86:d8:71:5e:95:7c:dd:2d:a4:67:f3:e0:80:1e:a4:cb:ac:
8d:f8:09:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:55:51 2026 by rpki-client