Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/dZUEtJOg8buS0KSq3TP_LatHVeo.roa
File: dZUEtJOg8buS0KSq3TP_LatHVeo.roa (raw, json)
Hash identifier: HKrpoxg/elM/P+fh5BgNzbrOsO/5w+yqFe6WOxefcu0=
Subject key identifier: 75:95:04:B4:93:A0:F1:BB:92:D0:A4:AA:DD:33:FF:2D:AB:47:55:EA
Certificate issuer: /CN=ec7e3dd4e3e6186fc857f410014109185fd3e0b3
Certificate serial: 01A0AE88F93F9DD3F6D206F56BAAAF2A401F
Authority key identifier: EC:7E:3D:D4:E3:E6:18:6F:C8:57:F4:10:01:41:09:18:5F:D3:E0:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/dZUEtJOg8buS0KSq3TP_LatHVeo.roa
Signing time: Thu 17 Sep 2026 08:43:27 +0000
ROA not before: Thu 17 Sep 2026 08:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219389
IP address blocks: 62.68.82.0/24 maxlen: 24
2a07:9400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:88:f9:3f:9d:d3:f6:d2:06:f5:6b:aa:af:2a:40:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7e3dd4e3e6186fc857f410014109185fd3e0b3
Validity
Not Before: Sep 17 08:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=759504b493a0f1bb92d0a4aadd33ff2dab4755ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:21:9b:3d:e2:8c:29:a2:e9:53:e0:72:c4:
28:ff:8a:cf:c4:4e:4d:de:fd:a4:4d:a1:e1:84:7d:
d6:5e:fa:72:35:c3:1d:bf:57:d1:8f:41:df:12:9d:
28:3c:09:93:aa:23:5e:1e:fd:2e:60:15:15:1b:3d:
89:25:f1:f0:c8:07:98:e9:14:28:e7:4a:a8:d4:68:
dc:a2:5f:be:1f:1a:41:f9:0c:a0:27:20:eb:4c:b0:
57:98:1e:50:a4:e6:17:6a:dc:7a:e8:5b:17:96:a4:
90:ed:71:53:e8:26:29:8b:41:0b:59:b3:2c:7a:e9:
74:75:b9:df:a7:f8:92:0b:3d:fd:d8:30:a2:3a:70:
3a:38:e8:6c:61:c6:65:29:68:bd:64:6e:08:13:c5:
39:36:5d:a8:76:ff:2c:05:e8:af:ed:94:4b:19:cf:
5b:82:d9:7b:99:53:ce:6a:65:b9:0d:1d:de:36:31:
18:ba:4e:d5:c8:1f:23:67:1d:82:d7:e7:72:c0:78:
e0:a6:81:7b:32:3f:c3:c5:b6:cd:33:00:da:ec:94:
b4:6b:36:39:92:de:88:b2:ea:d0:ee:eb:7a:93:bc:
3c:4e:59:dd:e2:fb:33:e7:3c:4e:ff:b4:be:0c:84:
c7:b8:d6:b7:c6:08:b7:a3:ec:b9:37:00:7d:ff:74:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:95:04:B4:93:A0:F1:BB:92:D0:A4:AA:DD:33:FF:2D:AB:47:55:EA
X509v3 Authority Key Identifier:
keyid:EC:7E:3D:D4:E3:E6:18:6F:C8:57:F4:10:01:41:09:18:5F:D3:E0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/dZUEtJOg8buS0KSq3TP_LatHVeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.82.0/24
IPv6:
2a07:9400::/32
Signature Algorithm: sha256WithRSAEncryption
41:fb:25:75:59:cb:2c:a5:ec:ab:42:41:c1:bb:34:e4:49:20:
95:03:6b:28:51:a1:16:20:e0:32:5e:db:98:73:68:c5:42:e6:
61:a6:32:0b:fe:ba:a5:b2:1a:b9:f5:83:3e:f1:12:77:f1:e8:
7e:38:6b:20:7b:1c:94:5c:9b:83:01:16:99:e4:fd:ac:40:da:
70:3e:64:9d:30:2b:ea:d0:2c:2a:65:2d:70:a0:6a:2c:f9:8c:
a1:fd:28:cb:c4:db:2e:6a:f9:c1:bf:a9:0e:d7:19:a2:bd:d8:
7e:5b:36:84:e4:66:dd:33:c5:91:c0:80:a2:53:72:42:12:af:
9e:4f:8b:7e:ff:41:a9:c8:ac:e4:7a:81:e2:b0:99:f3:d8:01:
69:bf:fa:40:20:d4:27:61:8c:3f:ba:78:99:50:86:58:ed:39:
95:5e:22:9f:aa:3f:b4:65:39:72:cd:57:a2:dc:69:de:e0:65:
c3:58:37:29:97:15:6a:55:01:fe:60:c7:76:35:e0:53:93:92:
6c:b9:c6:e3:a9:40:ed:06:95:15:93:20:6a:ab:80:e4:18:0c:
25:fc:09:c7:ae:a5:24:89:81:70:80:48:e7:00:84:15:a5:0e:
f2:71:39:65:f2:57:85:81:04:28:cd:b1:31:14:94:87:f4:c3:
08:70:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:25:38 2026 by rpki-client