Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/JWw_FABd9Q-ewURwU3IZ1GpRRJY.roa
File: JWw_FABd9Q-ewURwU3IZ1GpRRJY.roa (raw, json)
Hash identifier: ZCt1hbjV0Oxdybocx7QzONRXEhTOvQ3xXy28wEkffEM=
Subject key identifier: 25:6C:3F:14:00:5D:F5:0F:9E:C1:44:70:53:72:19:D4:6A:51:44:96
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01A014374007BC792444C45B4B7F5392B9F9
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/JWw_FABd9Q-ewURwU3IZ1GpRRJY.roa
Signing time: Tue 18 Aug 2026 09:32:40 +0000
ROA not before: Tue 18 Aug 2026 09:32:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211192
IP address blocks: 62.171.249.0/24 maxlen: 24
62.171.250.0/24 maxlen: 24
217.180.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:37:40:07:bc:79:24:44:c4:5b:4b:7f:53:92:b9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Aug 18 09:32:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=256c3f14005df50f9ec14470537219d46a514496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:d5:39:04:eb:29:bc:35:28:a9:90:0e:76:
93:1f:aa:71:b5:dc:39:52:17:26:1a:b1:1b:79:bb:
e2:74:4c:8a:a4:f7:a3:f7:f9:79:de:12:63:eb:d3:
ea:c3:3d:01:36:30:a9:79:93:b5:a3:0f:38:4f:f1:
50:31:cc:a1:ac:fd:69:30:52:3e:29:f7:66:42:ab:
0f:ed:53:3a:3f:a2:31:4f:2d:91:00:e5:07:8d:75:
00:d2:93:05:8f:16:f3:51:a6:16:cb:76:33:57:4b:
2b:a8:f3:70:43:35:d5:38:a7:9c:02:27:8c:56:eb:
3f:ba:87:55:b8:ef:86:66:9f:13:69:de:0d:43:00:
7d:8f:37:70:01:f5:60:8e:b9:24:70:55:36:90:5b:
ac:88:4f:5f:3b:0c:4d:23:52:d4:3d:81:25:e3:c1:
65:aa:f3:22:cb:20:7b:68:8c:80:1e:51:77:a4:2e:
1a:fd:c5:3f:f5:16:86:57:e7:b3:52:00:9a:78:e1:
15:d9:2d:60:e8:28:dd:96:53:d4:5d:43:cb:2e:84:
47:b3:59:8e:9a:e7:83:7d:4a:89:2e:99:5c:0d:ba:
d3:9b:f4:b9:9f:e7:d5:84:fa:fe:8d:63:46:b2:d7:
4e:cf:ad:68:4f:ba:0c:c5:c6:63:41:39:72:27:be:
97:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6C:3F:14:00:5D:F5:0F:9E:C1:44:70:53:72:19:D4:6A:51:44:96
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/JWw_FABd9Q-ewURwU3IZ1GpRRJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.249.0-62.171.250.255
217.180.56.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f4:71:04:38:e3:d4:1e:80:69:64:1f:5f:c5:b9:f6:06:87:
39:d3:55:54:f6:c0:be:99:d3:02:a4:13:39:b0:92:fc:3b:63:
ae:c7:29:c6:23:99:36:8e:90:c6:b4:4e:fc:d6:86:49:19:eb:
7a:fd:a9:85:10:8f:db:e3:42:5a:c0:3f:69:b7:18:97:ab:13:
f7:ea:f8:70:70:93:fd:22:80:cc:2b:31:a0:45:93:7f:c4:fe:
d0:27:b7:48:c3:75:f1:53:b9:37:61:82:2e:25:3d:81:cb:c0:
05:05:0b:64:54:b4:2d:a8:14:38:ce:ca:ab:d7:00:3d:b5:4b:
d8:f1:54:d0:67:6a:ab:f2:1d:14:48:18:b2:71:41:a9:ff:b3:
be:d8:04:b1:8f:45:be:d7:a1:c2:36:5d:c2:7f:a3:85:14:0f:
a0:68:e6:f4:2c:f7:fa:d7:bb:85:cb:85:69:36:7f:37:e8:94:
52:3c:b6:86:78:fc:cf:8e:79:49:72:c9:29:5d:be:c2:e5:e1:
45:8d:38:e2:5a:49:75:20:67:47:fb:4a:bc:5b:67:5c:8f:ec:
4c:9f:5b:9c:0d:e8:28:67:5d:29:48:ef:d5:66:2b:04:b3:3a:
59:42:e7:bf:e2:ae:1f:b8:5b:03:a1:9d:02:6f:36:05:00:20:
a9:3e:04:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:41:41 2026 by rpki-client