Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dXvSLf8L1U-7ztybqAaOdQkADEI.roa
File: dXvSLf8L1U-7ztybqAaOdQkADEI.roa (raw, json)
Hash identifier: pGj7sI5D/hX68w5K2tiFrX0S36rfPecB/QbIPrx/HSQ=
Subject key identifier: 75:7B:D2:2D:FF:0B:D5:4F:BB:CE:DC:9B:A8:06:8E:75:09:00:0C:42
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019DAFD1645B56DDD783FEAD46638A2567EF
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dXvSLf8L1U-7ztybqAaOdQkADEI.roa
Signing time: Tue 21 Apr 2026 11:33:48 +0000
ROA not before: Tue 21 Apr 2026 11:33:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29226
IP address blocks: 62.233.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:d1:64:5b:56:dd:d7:83:fe:ad:46:63:8a:25:67:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Apr 21 11:33:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=757bd22dff0bd54fbbcedc9ba8068e7509000c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:93:e8:b2:ac:97:cc:f6:9c:6b:a5:a7:61:
48:9f:bb:39:eb:c7:7d:4d:7e:2b:83:73:bc:1e:bb:
42:52:3f:76:66:5f:50:43:17:6a:8d:b7:7d:33:56:
71:78:63:46:a4:2a:23:98:e0:33:c1:37:5f:9d:04:
6f:54:2f:91:4e:d4:f0:84:b2:95:ad:cc:27:b0:26:
c2:2f:38:e6:5b:a9:54:14:5e:c4:f5:32:50:92:c0:
34:de:c7:2f:01:14:eb:9f:a2:84:dc:6d:16:9b:f1:
91:d0:83:e8:23:3d:48:98:ff:c3:8c:a9:07:5e:45:
1f:15:ec:2b:de:32:d3:91:2f:99:2a:ba:35:1e:3e:
aa:b9:c8:0b:56:44:8b:78:f3:eb:69:6d:f4:d9:f8:
8c:7a:8b:82:46:61:6d:2d:5d:af:8a:2c:05:76:4b:
73:bc:d4:ae:63:a7:bf:78:51:78:54:78:bc:cc:5b:
23:e4:5b:41:a3:d8:53:6d:ac:21:36:48:e3:d1:d2:
e0:5a:79:01:50:30:52:57:29:94:63:5f:d0:06:ec:
42:eb:c9:9b:bf:cb:a3:3a:01:37:12:a7:c9:ab:f4:
bc:3e:5d:59:83:f4:8f:7e:7c:d1:67:c2:98:3c:f7:
21:6c:ea:d6:c9:b9:88:ea:9c:0a:b9:46:d9:05:d6:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7B:D2:2D:FF:0B:D5:4F:BB:CE:DC:9B:A8:06:8E:75:09:00:0C:42
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dXvSLf8L1U-7ztybqAaOdQkADEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:70:6c:ca:69:11:01:ef:d2:4f:13:3e:f8:59:18:c0:bf:04:
66:d9:e7:d1:e2:0d:0b:7e:07:9b:9a:86:4d:e3:fd:d0:f8:a2:
b5:c9:f6:62:99:6f:3d:20:d7:47:05:da:33:f2:78:ff:33:11:
2b:b6:15:f9:7c:fd:90:12:e7:c8:fe:ca:b5:34:37:38:81:2c:
0c:2f:bf:6f:ff:ad:d9:49:ed:e3:0c:96:46:d6:91:70:e4:0f:
57:81:5f:c6:3e:41:3a:a4:c7:ca:c6:c9:c5:e6:94:f3:a6:b2:
f8:0f:18:00:3b:df:3f:86:ca:eb:b4:97:df:0b:89:40:00:5d:
f4:54:1c:07:aa:f3:1e:99:1d:31:d1:8c:c9:1b:48:b9:80:dd:
6f:fc:ea:22:7e:23:b2:8f:7d:e7:1f:0e:82:bd:c9:19:c2:ff:
fe:56:11:52:22:56:fc:1b:1d:64:ce:89:c7:74:a2:76:ca:8e:
55:c6:40:ad:1a:dd:5f:ad:af:f5:11:05:77:9e:e7:5c:93:3f:
bf:20:93:cb:73:30:46:37:4c:66:27:db:b4:ad:e2:5f:24:b3:
d8:05:8e:c7:e0:8e:49:8d:02:93:90:d6:2d:af:7d:48:1d:56:
7a:6e:43:6f:d5:c7:9c:00:20:85:da:22:f5:f4:44:22:e6:7d:
ca:d5:9a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 09:25:40 2026 by rpki-client