Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/RKDTZDAapjyGjmgcOC5hOMUCT48.roa
File: RKDTZDAapjyGjmgcOC5hOMUCT48.roa (raw, json)
Hash identifier: GdUclTSeXMaBONqcsxJlGmgC4gytMMz114zVwX8TEdA=
Subject key identifier: 44:A0:D3:64:30:1A:A6:3C:86:8E:68:1C:38:2E:61:38:C5:02:4F:8F
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E78CF0329235F2ED635217B95B1A
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/RKDTZDAapjyGjmgcOC5hOMUCT48.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29322
IP address blocks: 62.39.77.0/24 maxlen: 24
62.39.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e7:8c:f0:32:92:35:f2:ed:63:52:17:b9:5b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44a0d364301aa63c868e681c382e6138c5024f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:08:96:bb:5d:d3:a1:c7:9d:5a:7c:0a:8f:
f1:65:d3:cf:ee:f4:47:43:ed:5a:be:f2:5b:72:94:
c1:d1:bb:ce:7e:d6:09:a4:ae:78:d6:53:5c:77:e9:
15:35:d6:91:f9:27:2e:51:e8:71:1a:d1:e5:97:2a:
61:fe:6d:5b:d6:e9:12:3b:6c:cc:da:14:66:e3:e5:
3c:05:a7:46:e9:d9:13:ff:66:ad:d3:6a:ee:92:22:
96:98:66:8d:fc:65:fe:85:19:aa:1d:3d:97:4f:2c:
ed:9d:0f:eb:52:33:48:50:ff:c6:8d:46:81:88:59:
67:85:68:af:41:38:f2:7c:00:9b:0f:54:4e:92:a7:
79:cc:75:6a:f6:f3:30:e9:ee:6e:8c:ab:09:c3:3c:
4d:9e:a5:e3:c7:50:81:c6:63:d5:88:00:3e:b1:18:
a7:49:ec:c5:1f:75:e4:56:0a:69:16:76:d8:a6:f1:
9f:f6:13:c4:b2:71:f6:f9:c1:19:51:2c:e7:65:61:
39:ed:5a:ae:64:09:a6:3f:25:5c:2c:3c:d2:38:25:
d8:e6:eb:02:23:2e:82:6a:e7:fd:11:f9:d6:6b:e8:
e3:d4:0e:25:41:19:7e:aa:d1:2b:4a:a0:a5:51:d1:
0c:39:c1:76:30:f4:ff:03:47:28:73:4e:d0:ff:1a:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A0:D3:64:30:1A:A6:3C:86:8E:68:1C:38:2E:61:38:C5:02:4F:8F
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/RKDTZDAapjyGjmgcOC5hOMUCT48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.39.77.0/24
62.39.100.0/24
Signature Algorithm: sha256WithRSAEncryption
88:bb:21:32:7e:3d:67:2e:d6:ad:06:67:c6:d4:e7:9e:d0:b3:
38:14:e2:35:b2:ad:cc:0b:e4:d1:0a:23:fb:2b:f0:c9:f5:e3:
fe:6f:d6:2e:68:2b:ae:d8:e5:df:bd:3e:a0:86:53:aa:71:9a:
0d:4e:59:d4:a5:e1:65:1e:7b:8a:3a:b2:a7:a5:54:cb:53:a0:
84:36:e3:ba:12:6d:96:ab:44:c0:53:3b:cf:94:4e:2d:f7:3b:
a0:5f:d2:29:43:2d:60:d2:1d:83:75:dc:66:dd:88:fe:bd:d7:
3e:6c:e4:11:c0:2d:62:15:32:e2:2d:3e:ee:ad:2a:82:f0:5d:
06:70:85:0e:a4:be:ae:f6:e9:f6:78:e6:5a:c6:ea:9a:21:e2:
72:36:93:ba:f0:46:e5:89:29:44:f4:ed:ac:43:56:d9:36:06:
a7:69:f2:31:7c:46:8e:d2:f5:75:17:f8:ad:06:4d:0d:5a:96:
a2:0d:92:2b:7a:6e:be:de:2f:88:87:14:98:a6:83:26:c9:76:
da:b3:c3:3d:37:f9:87:91:9c:ce:c8:40:aa:08:5d:f9:8e:94:
39:26:45:71:26:1a:00:46:17:8c:2b:bc:c2:f1:41:49:f7:a1:
1d:4f:5b:13:71:b4:ec:85:a6:f4:11:b1:cd:81:cb:68:51:0f:
48:28:4f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:49 2026 by rpki-client