Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/62XjAsSPceuYT0PzBYNu3Q9FExw.roa
File: 62XjAsSPceuYT0PzBYNu3Q9FExw.roa (raw, json)
Hash identifier: vSn+AAQmNmDRBx+jCnQ6Hx582f2YSaJLSdPgW5PHXFY=
Subject key identifier: EB:65:E3:02:C4:8F:71:EB:98:4F:43:F3:05:83:6E:DD:0F:45:13:1C
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F236918EEB1CD9B296F3E702CCA47717C
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/62XjAsSPceuYT0PzBYNu3Q9FExw.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 264409
IP address blocks: 89.213.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:18:ee:b1:cd:9b:29:6f:3e:70:2c:ca:47:71:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb65e302c48f71eb984f43f305836edd0f45131c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:82:a9:76:81:3e:de:e8:be:79:63:84:9c:5e:
e8:f9:50:52:b9:b0:51:90:e1:e6:e9:b4:38:d3:fb:
16:22:2e:0f:c0:19:95:44:fe:f7:3e:74:10:be:e6:
54:80:8f:50:10:a3:f8:31:ca:32:f0:6f:e2:ab:09:
20:8e:6e:f0:01:4f:fc:a9:e7:78:fe:11:21:ea:79:
8f:88:80:dc:30:4a:c8:21:f6:db:2e:f9:2f:79:d1:
39:05:31:78:84:ef:1f:b9:99:4f:74:34:68:b2:ff:
b3:8e:a0:8f:77:9d:05:33:16:19:05:35:2c:28:9e:
91:a0:15:a0:b8:9a:51:b5:c6:c4:9c:b5:8f:8e:54:
6f:38:be:22:97:77:d5:b2:ea:8a:b5:00:ac:22:59:
71:d5:65:86:ea:8f:1e:bb:cf:50:ab:68:af:17:13:
54:f8:8e:da:a7:f1:c2:47:33:be:23:16:cf:a5:dd:
5c:6b:1b:04:62:fd:d2:25:df:65:b9:59:4d:de:c1:
3a:b8:78:6b:74:ec:0f:cf:88:13:a9:b2:1d:5f:04:
1a:8e:78:37:a9:6a:b6:64:81:fb:5f:36:15:a1:f8:
54:f6:b5:25:92:39:c2:e3:28:1c:79:b7:d2:3f:49:
5f:b4:5c:38:8d:0a:b4:73:b7:2d:ca:3a:ed:fb:83:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:65:E3:02:C4:8F:71:EB:98:4F:43:F3:05:83:6E:DD:0F:45:13:1C
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/62XjAsSPceuYT0PzBYNu3Q9FExw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.218.0/24
Signature Algorithm: sha256WithRSAEncryption
18:da:bf:8e:51:75:d6:c7:94:0d:07:18:2a:4a:df:e7:99:e4:
9f:ce:80:fb:0d:42:37:af:e7:59:c0:09:8e:81:6a:d8:55:e4:
a5:84:09:38:52:bb:fc:00:11:f6:33:9d:f2:3f:6d:84:9b:57:
6c:cf:85:78:14:08:cf:e2:a4:1f:d3:85:c3:3f:98:cc:be:6d:
b7:2d:2c:ac:a1:16:f9:ca:90:ed:3c:48:19:30:cf:c0:58:9c:
42:a6:fd:82:f6:b9:d5:25:2c:02:f3:79:b0:db:5b:28:8e:4c:
e5:3d:96:2e:83:02:4b:81:c7:cb:b4:14:f8:e2:de:ea:19:ef:
de:f1:13:66:72:b6:04:f4:46:03:51:f6:e0:57:dd:60:4e:b1:
e9:a4:96:87:ac:ca:e3:45:a3:b2:af:73:83:17:eb:5d:74:e3:
f3:67:6d:94:5d:37:73:6f:ba:a0:06:0c:e0:87:4c:8f:ee:92:
96:24:a6:54:8f:c3:b1:7a:92:6d:3a:af:8d:22:11:e5:5f:eb:
70:62:09:e9:10:5c:f2:33:da:f2:2a:c8:f4:a8:b1:f6:7f:e8:
1f:ec:9c:5e:88:8b:1e:a3:3c:c8:5b:dd:f1:13:a6:35:fb:00:
c1:77:85:13:2e:18:b8:47:5d:80:95:af:b1:3e:7a:07:74:6c:
49:7d:14:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:41 2026 by rpki-client