Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/6HatfdixY2P5gSgvmX5-6wUd1wc.roa
File: 6HatfdixY2P5gSgvmX5-6wUd1wc.roa (raw, json)
Hash identifier: 3HNrydriuFOEzSXWmClbpJIH0oZDXxGv93C16WVaK7I=
Subject key identifier: E8:76:AD:7D:D8:B1:63:63:F9:81:28:2F:99:7E:7E:EB:05:1D:D7:07
Certificate issuer: /CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
Certificate serial: 019E4C562DEC2593CFC3CEAD7A502614132D
Authority key identifier: DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/6HatfdixY2P5gSgvmX5-6wUd1wc.roa
Signing time: Thu 21 May 2026 20:59:36 +0000
ROA not before: Thu 21 May 2026 20:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 62.233.16.0/24 maxlen: 24
62.233.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4c:56:2d:ec:25:93:cf:c3:ce:ad:7a:50:26:14:13:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
Validity
Not Before: May 21 20:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e876ad7dd8b16363f981282f997e7eeb051dd707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:6d:90:75:7f:3c:81:de:46:b9:9d:0a:2a:
62:dc:d1:36:ee:a7:a2:a8:87:1c:8c:ea:a2:4c:82:
63:96:87:62:39:5f:4c:c7:c2:85:ee:49:ae:5b:84:
0b:8b:f9:6c:9a:7d:de:2d:e9:6f:f9:76:0a:98:a5:
26:d8:1d:46:eb:4c:78:2e:2f:72:26:35:6f:a9:23:
75:b1:9b:2d:48:33:8a:23:5e:db:2f:8e:6a:b8:c7:
2c:df:e6:2b:03:b0:13:b6:2f:75:34:15:08:e5:30:
51:43:51:b3:39:b6:21:e9:52:b8:2d:b4:f9:23:58:
8b:e0:c0:2d:fa:6c:b1:f3:cb:d2:4c:6c:4c:69:80:
de:34:2d:dc:19:65:32:03:26:c3:94:ad:1c:1f:42:
78:b4:1d:83:9c:25:a0:82:d6:16:c7:c3:d8:e2:84:
2b:7a:bf:a5:90:12:b2:24:b0:e6:ae:32:29:ce:af:
01:53:ce:2e:18:fc:ca:39:dd:a8:60:53:c1:92:7e:
43:b0:bd:0a:f1:ae:47:2c:b0:04:08:3b:cf:fc:9d:
d7:d5:29:f2:63:c0:8a:54:4e:ba:44:95:c9:87:b4:
17:5e:7b:ff:4c:4f:1c:5f:e5:03:0c:f6:03:9f:41:
c9:9f:d9:ee:fb:0a:ab:98:0b:c1:61:ef:fd:27:3f:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:76:AD:7D:D8:B1:63:63:F9:81:28:2F:99:7E:7E:EB:05:1D:D7:07
X509v3 Authority Key Identifier:
keyid:DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/6HatfdixY2P5gSgvmX5-6wUd1wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.16.0/23
Signature Algorithm: sha256WithRSAEncryption
13:b5:9b:75:9f:20:0c:ca:7f:4f:82:78:90:5a:07:76:75:5f:
93:41:7c:b0:5e:8b:5f:70:9c:0e:8e:a1:32:a3:d9:90:44:35:
c9:dd:da:7a:21:5f:1b:68:49:a5:ee:87:e1:4f:17:fb:0d:45:
6d:80:05:f1:f8:0c:e3:49:ed:c2:3d:f5:45:46:33:0e:14:33:
20:81:08:ac:d9:ee:8b:46:8f:18:c5:c6:e5:7b:6f:9f:4d:fa:
de:96:fb:a6:45:64:03:b6:0c:0c:ba:b3:cc:10:25:fd:be:a8:
94:11:66:53:2e:06:5b:c2:52:e7:5a:7f:71:e8:54:0c:06:20:
25:6f:91:99:1f:14:49:f1:ff:44:d3:b5:ec:87:4f:85:17:b9:
11:57:1f:20:e1:24:bd:36:ce:fe:b4:3a:c9:73:01:c6:ee:94:
96:bb:8f:71:09:bf:f2:cb:af:86:90:f7:15:e9:2c:8b:2d:94:
e6:f4:f0:7e:98:b1:57:ce:2d:f9:43:38:cb:02:6c:bc:9d:89:
73:2a:72:df:a7:5a:28:6d:15:c5:98:50:41:1a:d6:5d:3e:fc:
b6:5a:e1:09:52:9c:c1:e2:0b:00:21:e1:aa:12:db:31:3d:78:
c9:ce:73:43:b6:09:37:c2:6b:de:b2:88:1a:7b:e8:25:b8:a6:
f5:b0:64:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:18:35 2026 by rpki-client