Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/AuzmeUpM_SxpfBgEhLhD1987_aI.roa
File: AuzmeUpM_SxpfBgEhLhD1987_aI.roa (raw, json)
Hash identifier: vCf9za/qm6yqMbXZ2WsXiNRkpm9xQG6Sr9RvFWVkvpY=
Subject key identifier: 02:EC:E6:79:4A:4C:FD:2C:69:7C:18:04:84:B8:43:D7:DF:3B:FD:A2
Certificate issuer: /CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
Certificate serial: 019E4C4D061CD0EF80F9CA777C7B7C4BBAAB
Authority key identifier: DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/AuzmeUpM_SxpfBgEhLhD1987_aI.roa
Signing time: Thu 21 May 2026 20:49:36 +0000
ROA not before: Thu 21 May 2026 20:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 62.233.16.0/24 maxlen: 24
62.233.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4c:4d:06:1c:d0:ef:80:f9:ca:77:7c:7b:7c:4b:ba:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
Validity
Not Before: May 21 20:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02ece6794a4cfd2c697c180484b843d7df3bfda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:da:ed:65:88:75:38:e4:37:93:31:20:04:
a1:76:06:9d:0b:1b:07:db:1b:27:96:a8:9b:fe:a1:
81:9e:f9:fd:46:fd:a3:df:95:50:c0:a7:55:2d:16:
5a:e7:69:8f:6c:6f:63:bb:41:d5:20:b4:38:b5:38:
17:c2:76:ee:3c:8d:a3:21:f7:8a:22:f0:29:6b:fc:
04:7e:9e:29:c6:6e:d9:fd:0f:0e:e5:4e:a0:fc:16:
41:91:0f:d2:f2:06:e1:fe:ff:d0:c1:ef:8f:32:ec:
d2:a1:c1:4b:5b:f5:0f:70:29:e2:95:fa:b6:d7:98:
19:48:c4:7f:93:56:c6:df:c1:b5:b2:2f:54:19:69:
23:e6:1d:ed:7d:ad:63:06:18:66:9a:f9:a4:41:52:
0b:07:10:8b:c0:bf:d5:28:63:09:ea:d6:8c:85:f6:
fa:de:e7:23:8e:fa:da:d2:e1:2f:11:84:7d:a2:1b:
2b:34:af:27:60:d1:13:6d:9f:9c:65:1a:0f:85:38:
26:cc:d7:ab:67:04:cc:89:35:7f:8d:99:73:c9:fd:
8a:31:85:d4:67:b1:d4:b1:c6:1e:19:32:30:80:17:
7a:58:e6:28:67:60:7a:b6:1f:e3:bf:51:24:29:a1:
f7:7b:a4:86:38:99:d3:3f:6b:55:b1:e7:d3:c4:e1:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EC:E6:79:4A:4C:FD:2C:69:7C:18:04:84:B8:43:D7:DF:3B:FD:A2
X509v3 Authority Key Identifier:
keyid:DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/AuzmeUpM_SxpfBgEhLhD1987_aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.16.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:aa:a1:dc:b2:0e:85:9a:17:a5:d8:dd:0b:9a:0a:63:cc:32:
10:12:91:e9:ce:d1:4a:23:74:57:56:2f:fe:b7:65:b3:10:ea:
ef:de:65:91:05:3d:b4:7f:b0:c8:69:ba:5e:4e:7b:37:96:4b:
9e:36:72:e8:ad:c4:a1:26:18:0e:6d:cb:70:50:3c:3b:2e:ab:
f2:7d:27:92:eb:9c:51:84:89:ad:6d:0e:2e:e9:15:b1:e9:be:
ce:b2:a1:46:e7:3a:b6:e4:66:2e:1b:06:9a:34:8f:ab:4b:73:
3f:32:d8:01:91:a8:17:66:95:97:13:6d:13:e7:59:68:83:2f:
5a:c3:3c:63:56:61:36:85:b6:5b:bc:3d:5e:03:10:a9:98:b7:
dd:ca:3c:91:d6:4a:8f:96:e1:72:43:09:90:1d:7a:6c:ea:b6:
7d:29:42:f7:16:37:7e:6a:93:2a:6e:e9:d3:82:bd:16:32:ec:
10:5b:39:18:1b:0c:d4:bc:5f:02:de:98:74:27:ee:75:47:c7:
e5:82:04:a6:32:68:46:21:4c:fa:9f:b4:55:bb:30:57:d7:e9:
5a:23:18:1c:6d:21:c1:50:7b:8f:79:ba:48:63:65:e8:26:f8:
1b:c2:65:8b:d3:9b:91:f9:1b:a5:94:aa:63:6b:f3:1d:8e:f2:
43:11:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:04:11 2026 by rpki-client