Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/40RPb88TMToTQffHvVTDx-CJZTQ.roa
File: 40RPb88TMToTQffHvVTDx-CJZTQ.roa (raw, json)
Hash identifier: pMNWmtN+BBDYuo/k3evwHjrYikeIXQcLITCm4LTFzLg=
Subject key identifier: E3:44:4F:6F:CF:13:31:3A:13:41:F7:C7:BD:54:C3:C7:E0:89:65:34
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 019EB029D37A0A7055E98FFA24DA69427BE4
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/40RPb88TMToTQffHvVTDx-CJZTQ.roa
Signing time: Wed 10 Jun 2026 06:13:11 +0000
ROA not before: Wed 10 Jun 2026 06:13:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219504
IP address blocks: 62.56.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:29:d3:7a:0a:70:55:e9:8f:fa:24:da:69:42:7b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jun 10 06:13:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3444f6fcf13313a1341f7c7bd54c3c7e0896534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:3f:6d:a1:32:f6:fc:3e:d9:b1:a6:b0:d6:
be:6a:66:8b:ce:10:ee:11:d3:f1:83:7f:f5:e8:90:
a9:bb:8f:97:a7:63:ef:31:0e:86:0f:c8:f6:4b:6f:
69:b7:38:26:92:dd:11:bf:36:17:ad:1f:63:ff:85:
55:31:ce:52:d9:99:c7:66:6c:ce:8b:f3:fe:a7:cc:
aa:0c:fe:23:ef:1a:32:87:56:07:0d:14:63:5f:7b:
25:24:39:75:e2:60:53:c0:3d:ca:0d:c2:0d:0d:c8:
30:6e:0e:2f:0e:a1:1b:b9:42:98:de:20:8c:08:26:
59:bc:e7:66:13:1b:0d:4f:27:dd:cf:6a:74:21:44:
6c:ba:e6:25:cd:df:5d:66:57:6a:7b:2d:9e:5b:0f:
93:90:15:55:a4:a8:92:ee:94:42:52:f7:cd:89:db:
ee:ee:42:4e:33:a1:cc:e7:44:6e:1e:6c:5a:f4:0f:
09:bd:c5:e4:28:8d:87:e7:36:42:ea:40:60:1c:9f:
9b:24:73:0d:0b:96:61:67:96:d8:5f:cd:41:a7:76:
ae:20:43:0f:25:27:f7:49:90:66:21:15:5e:a8:a2:
58:f1:a0:a2:ce:43:57:ee:6b:ab:f2:08:3d:3a:45:
6d:16:a8:83:5e:e5:55:fe:3b:a5:2e:d7:0a:db:d7:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:44:4F:6F:CF:13:31:3A:13:41:F7:C7:BD:54:C3:C7:E0:89:65:34
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/40RPb88TMToTQffHvVTDx-CJZTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.166.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6b:37:f4:ed:a9:5e:e5:23:5d:c9:61:72:d1:79:b2:72:74:
46:4b:08:82:5b:f2:a9:64:e9:74:72:a9:46:d6:14:9c:38:a4:
dd:02:32:05:ed:d6:d7:65:ab:f4:3d:69:37:e2:59:ac:2f:db:
dc:ff:78:b8:a8:07:68:3f:de:d0:46:8e:89:bb:4a:72:d5:71:
aa:4e:92:ee:e3:fb:5f:2c:1b:25:49:05:c5:52:55:01:a3:02:
98:3f:89:7d:ff:08:95:9b:32:ee:0b:4c:ed:9d:1e:a6:4f:ee:
bd:cf:d0:b0:17:78:3c:48:f3:3e:01:32:02:ee:ea:81:69:6e:
2c:f1:21:fd:cb:e6:5f:8c:a4:e0:1c:14:17:46:9e:00:b9:cd:
e9:dd:4b:f1:7a:57:78:3c:cb:cc:74:97:23:8b:6b:aa:01:94:
eb:48:79:4b:9c:52:f1:4b:86:7e:02:09:17:f1:0b:bf:e0:67:
98:63:f0:49:5b:87:f0:4f:88:fd:ec:80:75:54:21:aa:41:4e:
55:f7:09:15:40:de:fd:6c:0f:fa:90:4e:62:d2:ac:ad:ad:9c:
1e:cd:b2:78:d3:5a:4e:4a:1e:62:c7:d2:82:b8:26:98:e2:58:
d3:a1:cd:29:d6:48:51:5f:8c:77:08:3c:59:50:1a:0d:f2:e4:
88:f2:28:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:06 2026 by rpki-client