Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/s5ebe4RMhYQDVXzU3lvl4jQJ4gs.roa
File: s5ebe4RMhYQDVXzU3lvl4jQJ4gs.roa (raw, json)
Hash identifier: 0FbAOs1EEUepQjM+Da5Te37MWjw79MSuPb2zJ0vlHT4=
Subject key identifier: B3:97:9B:7B:84:4C:85:84:03:55:7C:D4:DE:5B:E5:E2:34:09:E2:0B
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 019EA61C433371B701BE1A0371654F4B0146
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/s5ebe4RMhYQDVXzU3lvl4jQJ4gs.roa
Signing time: Mon 08 Jun 2026 07:22:10 +0000
ROA not before: Mon 08 Jun 2026 07:22:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204582
IP address blocks: 62.76.248.0/24 maxlen: 24
62.76.249.0/24 maxlen: 24
62.76.250.0/24 maxlen: 24
62.76.251.0/24 maxlen: 24
62.76.252.0/24 maxlen: 24
194.85.31.0/24 maxlen: 24
194.85.77.0/24 maxlen: 24
194.85.78.0/24 maxlen: 24
194.85.79.0/24 maxlen: 24
212.193.116.0/24 maxlen: 24
212.193.117.0/24 maxlen: 24
212.193.118.0/24 maxlen: 24
212.193.119.0/24 maxlen: 24
212.193.120.0/24 maxlen: 24
212.193.121.0/24 maxlen: 24
212.193.122.0/24 maxlen: 24
212.193.123.0/24 maxlen: 24
212.193.124.0/24 maxlen: 24
212.193.125.0/24 maxlen: 24
212.193.126.0/24 maxlen: 24
212.193.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:1c:43:33:71:b7:01:be:1a:03:71:65:4f:4b:01:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jun 8 07:22:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3979b7b844c858403557cd4de5be5e23409e20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:78:7b:40:ae:1f:56:72:1e:20:e7:34:fc:
47:af:15:a0:33:68:63:31:ad:16:55:b9:ce:87:6d:
0a:06:b5:39:91:c1:e9:b8:5c:fc:c3:67:af:91:76:
f7:c3:d1:f3:39:ee:84:e5:e5:78:7f:77:90:cd:d0:
09:66:12:80:55:e3:25:b2:7d:12:29:8c:e5:4d:51:
71:92:10:47:a3:e7:c0:24:95:7e:cb:22:d9:3c:9a:
d0:8c:6f:99:b9:52:c2:40:5c:8f:58:a5:e5:31:6e:
c1:b0:47:f3:b8:3b:39:44:e4:24:e7:aa:fd:c3:f1:
88:3f:60:22:7c:cd:05:cc:fa:8f:61:1c:e8:a7:8a:
1a:24:6e:30:d0:b2:fa:bf:ae:1c:65:bd:de:a8:0c:
50:25:3f:8a:84:7f:e2:ae:0a:88:74:43:f4:a1:58:
5a:b6:df:a6:2f:cc:e0:bf:36:d4:cb:25:48:3c:fb:
69:42:ee:68:2c:1d:31:b1:a9:5e:56:a6:fc:d8:d9:
b7:cb:e0:90:90:0a:2b:a3:82:ef:56:37:10:6d:4c:
d8:57:8f:a4:f3:27:6e:cc:f1:e2:db:d1:56:0f:ae:
ed:76:15:1f:77:af:8a:77:d2:d2:6f:cb:44:dd:76:
4b:93:90:6d:0e:9c:be:e2:c3:c8:60:7e:81:cb:e5:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:97:9B:7B:84:4C:85:84:03:55:7C:D4:DE:5B:E5:E2:34:09:E2:0B
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/s5ebe4RMhYQDVXzU3lvl4jQJ4gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.248.0-62.76.252.255
194.85.31.0/24
194.85.77.0-194.85.79.255
212.193.116.0-212.193.127.255
Signature Algorithm: sha256WithRSAEncryption
65:c2:c8:98:7b:83:72:15:53:aa:46:ce:bb:f3:2c:55:3f:b7:
22:5d:c7:35:74:89:2e:1d:77:7c:32:f9:2f:18:12:c7:5e:9a:
e4:e5:98:2c:52:53:ce:c7:81:57:4e:2a:72:b0:ed:c6:fa:09:
c2:44:86:14:05:17:00:ea:08:49:be:1e:5c:47:e9:ed:dd:2e:
f9:88:37:25:23:f0:68:22:58:5b:f7:68:e2:72:e2:91:7d:13:
fd:a3:4e:d5:14:4c:1e:6d:17:aa:5f:6d:1a:8d:ef:d5:28:26:
55:af:b5:d4:47:66:f1:fd:4d:b7:56:01:4e:0b:78:b7:30:0e:
dc:f4:da:38:27:d3:65:21:0b:ba:7d:cd:0c:1d:4c:74:f4:3e:
cd:8f:08:ef:b0:f5:c1:5a:a7:6e:87:63:4f:74:db:8d:30:31:
2c:2a:20:0d:4e:4f:dc:bf:c1:66:5e:09:64:8b:43:1f:4c:e7:
6b:96:f2:24:2c:f8:64:d7:33:fe:80:86:c3:07:34:34:bf:c5:
d3:ff:57:6f:c2:56:47:31:07:76:38:0f:cf:15:4c:53:69:59:
4d:54:98:7a:79:9b:25:79:79:7c:f2:2e:dc:8b:fa:8c:36:f2:
3f:68:4c:c7:83:11:ac:ab:dc:e3:91:46:f1:f8:e5:06:dd:ec:
0d:31:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:56:37 2026 by rpki-client