Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/RKccBzAjfAgdOH1QdushhT7AryI.roa
File: RKccBzAjfAgdOH1QdushhT7AryI.roa (raw, json)
Hash identifier: A/QzLDENuO4yPz22/8nn+nO2J9VEx9TuDbqFSEgKIeo=
Subject key identifier: 44:A7:1C:07:30:23:7C:08:1D:38:7D:50:76:EB:21:85:3E:C0:AF:22
Certificate issuer: /CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
Certificate serial: 019F192A32D5C22808A4B5F83E29CA3BD147
Authority key identifier: DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/RKccBzAjfAgdOH1QdushhT7AryI.roa
Signing time: Tue 30 Jun 2026 15:33:43 +0000
ROA not before: Tue 30 Jun 2026 15:33:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 62.233.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:2a:32:d5:c2:28:08:a4:b5:f8:3e:29:ca:3b:d1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
Validity
Not Before: Jun 30 15:33:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44a71c0730237c081d387d5076eb21853ec0af22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:e4:ae:e8:bc:44:79:3f:40:5d:3e:dc:c8:
54:fe:35:58:68:b5:e4:96:de:c2:1f:97:8b:57:e1:
bd:69:6f:59:18:ff:e9:28:74:2f:d4:d8:dd:0e:f4:
80:5c:6d:c6:cc:19:8a:0e:2c:83:ec:07:88:cf:12:
36:c0:ea:e4:92:52:a3:8e:55:11:3b:c1:ce:ec:ce:
97:85:9f:a4:b8:35:a3:53:93:aa:28:37:dc:bd:72:
0e:44:4a:7d:ba:f6:0f:98:00:74:c5:22:a9:ce:55:
54:ef:8a:a7:97:b2:af:d9:59:cd:48:ce:d7:46:c5:
e9:fa:3b:c8:2a:de:b6:e7:f6:27:b4:0e:5a:d0:ba:
a6:26:e9:25:1d:10:6c:33:70:57:39:c4:0c:77:6d:
6c:52:28:d4:15:7b:0a:03:39:d7:6c:a0:4c:2c:f7:
db:1e:56:b9:4b:08:2d:35:a0:b3:46:8b:fa:29:2b:
01:bd:2b:61:41:8f:40:c1:b3:c6:5d:3b:03:7f:73:
8c:20:40:c0:c5:d7:ef:e5:0a:d5:d7:0d:ef:43:df:
79:17:cb:7e:d9:85:40:01:3a:91:b5:af:2b:de:1d:
d8:e6:86:67:18:47:37:d3:bb:7f:f8:42:5c:a6:80:
c9:db:c9:40:48:61:3c:1d:07:14:de:8d:28:70:1d:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A7:1C:07:30:23:7C:08:1D:38:7D:50:76:EB:21:85:3E:C0:AF:22
X509v3 Authority Key Identifier:
keyid:DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/RKccBzAjfAgdOH1QdushhT7AryI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.18.0/24
Signature Algorithm: sha256WithRSAEncryption
23:8d:60:de:d5:84:74:46:a5:bc:79:51:bd:0c:4c:79:04:22:
6a:34:72:52:40:6f:df:93:1f:df:9e:21:ab:7e:87:4c:c5:53:
e0:36:1f:a9:15:fe:0e:86:d0:92:6e:47:e0:58:c3:1a:f7:51:
03:61:0f:8d:fc:1a:a7:1d:c7:51:7f:0a:39:60:ab:64:c8:72:
9f:26:96:f3:d2:c9:d9:5e:33:ec:2d:ff:8b:02:4b:82:7c:b8:
38:af:e3:34:8d:d8:7d:62:03:b7:9c:17:b1:8e:33:bf:89:8f:
4f:94:c7:c6:06:3b:90:a7:6e:3d:19:e1:18:f0:00:03:53:0d:
ea:24:d8:98:67:bc:dd:18:be:f3:af:b5:6c:86:96:87:8c:d4:
f3:27:ff:3b:1d:cf:b0:3e:d9:5e:1e:3d:48:c8:21:3f:ad:db:
99:b7:50:97:6c:af:66:d9:4f:80:c8:02:e5:6f:98:d5:08:e5:
5d:8c:79:a7:ae:11:28:d3:77:43:b4:46:4a:55:4a:7e:50:36:
6d:5c:eb:c1:26:bb:c0:1f:00:49:2f:65:05:78:45:7f:6a:bd:
c0:c0:16:cd:b5:d5:68:1c:08:8e:5b:c4:f5:fa:9b:80:09:8e:
1f:a5:f7:15:d2:d9:06:6f:2e:06:98:74:74:94:2d:9c:2b:0c:
85:68:4b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:08:36 2026 by rpki-client