Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/pB_jEBT845qiq_XLt-ZbMdSYI9Y.roa
File: pB_jEBT845qiq_XLt-ZbMdSYI9Y.roa (raw, json)
Hash identifier: EXgWfKPbjwdqrdAv9y6pI3rTT0729xGjj1/jOYtBdig=
Subject key identifier: A4:1F:E3:10:14:FC:E3:9A:A2:AB:F5:CB:B7:E6:5B:31:D4:98:23:D6
Certificate issuer: /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial: 019F8424D5BC639484AF1C65CC6B6F71BC4D
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/pB_jEBT845qiq_XLt-ZbMdSYI9Y.roa
Signing time: Tue 21 Jul 2026 10:07:14 +0000
ROA not before: Tue 21 Jul 2026 10:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207856
IP address blocks: 62.115.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:24:d5:bc:63:94:84:af:1c:65:cc:6b:6f:71:bc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Validity
Not Before: Jul 21 10:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a41fe31014fce39aa2abf5cbb7e65b31d49823d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:d6:e0:f5:25:f7:83:4e:d7:9e:55:93:40:
61:0b:97:e4:1c:24:73:ac:8e:84:3a:b1:07:fb:52:
be:3f:48:20:13:9a:f2:c0:63:86:3b:0f:e6:db:b9:
73:cb:08:da:7b:fb:df:c2:82:d2:82:a3:56:ea:b3:
b3:75:31:f3:87:a8:e3:aa:bb:5c:57:6d:56:f1:44:
68:e7:a4:23:79:be:3e:fd:ad:42:7b:ee:57:74:3b:
a0:09:4f:ac:4b:78:30:8a:e1:a3:dd:ce:0a:d5:df:
5b:4b:e9:0d:e5:91:92:3c:4c:13:a2:2d:1e:02:0b:
77:6c:0c:a6:ae:3d:60:4c:9b:fa:26:97:22:a5:6d:
28:6c:48:d2:5e:6b:c9:76:a0:79:10:ba:fd:35:0d:
99:87:8a:cb:b2:62:1a:eb:ed:ae:39:62:46:36:a2:
b6:8b:df:db:f6:86:4f:bb:33:af:2f:2b:54:a8:1c:
f6:a5:70:ff:b9:07:99:b1:57:bd:e0:c8:d2:2e:6f:
95:9e:38:89:75:72:b4:87:ff:0d:94:98:d1:ca:3e:
df:9b:74:09:23:9d:25:bf:b0:9b:e8:47:20:51:43:
05:1a:7d:89:7d:00:be:0c:4a:24:dd:87:58:db:e7:
f7:8f:9a:64:19:a1:00:60:56:c4:87:ac:eb:61:71:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1F:E3:10:14:FC:E3:9A:A2:AB:F5:CB:B7:E6:5B:31:D4:98:23:D6
X509v3 Authority Key Identifier:
keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/pB_jEBT845qiq_XLt-ZbMdSYI9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.115.245.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6c:27:fa:73:c4:7a:e0:bc:38:1b:37:d4:1b:99:08:56:5f:
c9:fa:b1:38:99:99:e3:3d:30:44:49:0b:f3:d0:42:8b:c1:55:
7c:24:a6:a7:72:e5:db:12:27:e4:ce:84:30:7a:d6:6e:7d:82:
52:3a:cf:d9:f2:ae:2f:41:4c:89:ce:0d:74:ee:52:b3:53:14:
b1:35:7e:ba:6a:b8:1f:6a:fe:42:92:e9:9c:47:23:d9:13:01:
13:b9:2b:4f:8f:9e:84:7c:ab:de:94:8c:92:0f:bd:6f:6d:85:
8e:ca:3f:f0:81:5c:03:5a:36:55:1a:3d:96:23:22:ab:5c:44:
62:cd:ca:bf:c0:9f:84:77:49:7d:9a:24:4d:20:09:a4:1f:5c:
d8:79:67:f1:8e:53:3f:0d:0a:ef:4d:2d:fc:50:28:c0:47:63:
ff:20:e3:32:8e:60:da:d0:55:e0:77:3e:67:0b:36:4a:ca:98:
a7:ec:71:c9:24:05:e1:42:1d:90:46:48:e7:c5:7c:36:96:6e:
d7:ff:50:0c:db:c2:ed:71:12:f5:b7:24:c4:ec:d0:24:8c:de:
e3:76:95:b4:c2:3e:f0:bc:14:3a:ea:53:38:3e:60:e3:72:15:
4f:da:cc:80:3b:30:d2:76:95:84:7a:a1:f3:f2:7d:8f:c2:7f:
e7:10:64:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:43 2026 by rpki-client