Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cpk2odn-dVwaOoVywb0ktLA-PdI.roa
File: cpk2odn-dVwaOoVywb0ktLA-PdI.roa (raw, json)
Hash identifier: tZfOnsDHEu4SeXmoF68PzBg7rRhFL5jE8J9FxZm6NI0=
Subject key identifier: 72:99:36:A1:D9:FE:75:5C:1A:3A:85:72:C1:BD:24:B4:B0:3E:3D:D2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FDB4979C7309D936CC3073E1E6C9E0404
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cpk2odn-dVwaOoVywb0ktLA-PdI.roa
Signing time: Fri 07 Aug 2026 08:14:13 +0000
ROA not before: Fri 07 Aug 2026 08:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219275
IP address blocks: 62.192.152.0/24 maxlen: 24
153.76.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:49:79:c7:30:9d:93:6c:c3:07:3e:1e:6c:9e:04:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 7 08:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=729936a1d9fe755c1a3a8572c1bd24b4b03e3dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:1c:a5:78:1f:d7:5b:7f:d0:5a:03:35:12:
6a:45:ae:5c:19:40:a3:a4:03:98:a9:52:95:2d:d1:
fa:6a:61:a6:a1:52:76:4e:ae:5c:2a:bf:a5:a4:d5:
23:60:02:f4:74:93:43:df:31:96:36:bf:46:ee:9f:
aa:4e:06:78:89:a2:db:09:03:76:ed:32:60:30:36:
7e:6e:74:ec:86:43:a0:33:4d:18:95:91:f2:5d:65:
1f:55:f4:14:f8:a6:dc:99:08:f0:ec:fd:3e:70:88:
6a:21:ff:2a:9b:4e:ce:ee:10:c3:26:1d:d9:dd:0b:
ad:3b:66:fb:9d:9e:33:88:70:4b:eb:3d:5e:5f:c6:
47:85:28:06:83:64:38:2f:0b:9c:d4:52:89:ec:50:
73:65:21:ec:16:0d:af:22:8a:87:29:5a:28:8f:6f:
7b:25:ea:a1:31:1b:41:cd:bf:cc:fb:ca:1a:00:1e:
1c:77:26:05:85:a0:f8:cd:b0:76:a4:6e:3d:0d:71:
67:f6:59:42:ad:6e:a2:70:b6:c2:b0:3d:a2:38:3d:
39:bd:a4:06:f0:b1:1e:e9:de:a5:d2:47:a7:77:46:
18:51:95:41:87:d1:14:6a:94:cf:3d:9d:93:99:0a:
f6:97:c8:01:1a:0b:1b:21:3a:07:f2:d8:60:e9:48:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:99:36:A1:D9:FE:75:5C:1A:3A:85:72:C1:BD:24:B4:B0:3E:3D:D2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cpk2odn-dVwaOoVywb0ktLA-PdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
153.76.218.0/24
Signature Algorithm: sha256WithRSAEncryption
50:08:b0:cc:47:30:2f:1f:44:42:cb:02:ec:42:c6:6e:68:02:
a8:f5:03:ab:d6:62:88:15:ab:78:6a:6a:fa:4a:e2:5d:3a:4b:
35:96:d4:15:81:7b:af:03:fa:f1:ac:7f:07:a5:48:37:ab:af:
f2:79:ba:c1:a4:a5:88:0d:ff:27:9e:ff:cd:f8:00:c2:32:2a:
41:ee:82:07:c7:f6:e1:79:0a:10:93:f3:63:00:f2:40:3c:e8:
eb:80:30:8c:2f:4b:f0:10:80:aa:2f:87:74:d6:0a:3d:d3:ce:
80:df:2d:ec:7a:bf:19:6d:25:3d:f9:20:9c:33:ea:b0:d6:9a:
97:f6:c3:8a:12:eb:a4:20:2e:2a:e7:5b:9f:1b:eb:88:aa:89:
34:5d:7e:85:90:e1:cc:bb:80:45:a6:c2:f5:2b:8e:1b:40:63:
cf:2c:54:1d:2b:aa:7a:f9:a6:11:54:83:0e:33:d4:e5:9c:64:
dd:86:aa:e1:9d:7b:6a:b2:e0:f9:6e:f9:90:08:0b:d2:76:a0:
7b:a0:f8:61:9e:bd:cb:af:cb:3c:ad:23:4e:3d:b1:04:fc:1d:
9a:d4:9a:9d:aa:27:39:3e:30:67:49:b4:b0:68:94:f2:b8:98:
45:15:57:13:1e:dc:95:38:28:25:07:e7:9d:a4:3e:51:af:21:
8b:07:6b:65
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/bSXnHMJ2TbMMHPh5sngQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwODA3MDgxNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mjk5MzZhMWQ5ZmU3NTVjMWEzYTg1NzJjMWJkMjRiNGIwM2UzZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwwcpXgf11t/0FoDNRJqRa5cGUCj
pAOYqVKVLdH6amGmoVJ2Tq5cKr+lpNUjYAL0dJND3zGWNr9G7p+qTgZ4iaLbCQN2
7TJgMDZ+bnTshkOgM00YlZHyXWUfVfQU+KbcmQjw7P0+cIhqIf8qm07O7hDDJh3Z
3QutO2b7nZ4ziHBL6z1eX8ZHhSgGg2Q4Lwuc1FKJ7FBzZSHsFg2vIoqHKVooj297
JeqhMRtBzb/M+8oaAB4cdyYFhaD4zbB2pG49DXFn9llCrW6icLbCsD2iOD05vaQG
8LEe6d6l0kend0YYUZVBh9EUapTPPZ2TmQr2l8gBGgsbIToH8thg6UidSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHKZNqHZ/nVcGjqFcsG9JLSwPj3SMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvY3BrMm9kbi1kVndhT29WeXdiMGt0TEEtUGRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPsCYAwQA
mUzaMA0GCSqGSIb3DQEBCwUAA4IBAQBQCLDMRzAvH0RCywLsQsZuaAKo9QOr1mKI
Fat4amr6SuJdOks1ltQVgXuvA/rxrH8HpUg3q6/yebrBpKWIDf8nnv/N+ADCMipB
7oIHx/bheQoQk/NjAPJAPOjrgDCML0vwEICqL4d01go9086A3y3ser8ZbSU9+SCc
M+qw1pqX9sOKEuukIC4q51ufG+uIqok0XX6FkOHMu4BFpsL1K44bQGPPLFQdK6p6
+aYRVIMOM9TlnGTdhqrhnXtqsuD5bvmQCAvSdqB7oPhhnr3Lr8s8rSNOPbEE/B2a
1Jqdqic5PjBnSbSwaJTyuJhFFVcTHtyVOCglB+edpD5RryGLB2tl
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:57:13 2026 by rpki-client