Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/2-VpeMgr8WlOJ7qhVALa8xf34sA.roa
File: 2-VpeMgr8WlOJ7qhVALa8xf34sA.roa (raw, json)
Hash identifier: iQSGWDL9tXr7gqFzhBNlU6VdCbvCnvQDAQmo6oV6nR8=
Subject key identifier: DB:E5:69:78:C8:2B:F1:69:4E:27:BA:A1:54:02:DA:F3:17:F7:E2:C0
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F2368979727DC19CE12D7E11CC70F1A3E
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/2-VpeMgr8WlOJ7qhVALa8xf34sA.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51228
IP address blocks: 62.228.254.0/24 maxlen: 24
62.228.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:97:97:27:dc:19:ce:12:d7:e1:1c:c7:0f:1a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbe56978c82bf1694e27baa15402daf317f7e2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:38:18:a3:d4:a5:32:a5:75:2a:e0:8b:ba:d7:
39:d1:5a:53:0b:c4:16:b0:07:a7:41:0b:31:e5:10:
50:8b:57:0f:65:cf:df:a4:8c:49:4a:ee:bc:b5:0e:
14:d2:b5:46:13:4a:58:0c:62:68:32:d3:66:51:bf:
44:6a:e3:2a:c7:01:ca:04:4e:27:67:8b:5b:2f:1e:
a1:bd:f6:b1:84:4e:15:d0:6c:7c:0b:53:8f:10:91:
71:66:00:d0:bb:c5:e4:46:e6:55:c6:7d:6f:c5:26:
0b:c6:c6:b7:2b:dc:d6:5c:44:c2:58:8e:88:be:dd:
5e:fa:63:fc:0f:43:01:68:3c:2c:d7:fa:aa:a2:33:
59:e1:74:0e:07:9a:6b:50:d2:36:f7:aa:f9:36:bc:
95:30:0e:29:58:9a:11:e7:9e:20:4a:1f:62:fb:38:
d8:7e:a8:e4:84:b2:a1:df:27:c9:cf:5e:2c:74:1d:
ac:e0:29:e0:21:41:3e:7e:4b:bd:64:2c:23:31:ef:
31:b0:a5:94:88:09:c4:fc:37:4a:3d:b6:28:c7:0a:
19:c4:2f:eb:d1:a9:e3:6a:af:ed:df:5e:cf:0f:b8:
f8:6f:f2:64:e7:2c:52:74:f5:19:1f:f7:33:02:24:
11:c4:dc:dd:38:a8:66:a7:1d:be:d1:de:e1:74:06:
83:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:69:78:C8:2B:F1:69:4E:27:BA:A1:54:02:DA:F3:17:F7:E2:C0
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/2-VpeMgr8WlOJ7qhVALa8xf34sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.254.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:79:ab:d8:51:21:1b:78:9a:02:9a:2b:6d:5b:5b:12:d2:b7:
75:62:31:90:f0:6d:a1:40:6f:7e:af:e3:17:17:2f:e0:52:5c:
33:06:ec:70:c7:6c:32:1e:70:40:1e:55:27:47:2e:f3:a8:90:
88:ed:4e:0e:73:b8:6e:05:61:f7:e8:d1:87:f2:18:56:d2:d7:
02:a6:c6:ae:19:d9:c8:d3:c1:21:9a:82:e9:f9:b9:a2:49:89:
1c:38:7d:0b:4a:36:55:6a:46:8c:1e:d8:38:2e:cd:d6:82:0e:
98:d0:04:de:fc:f6:a3:48:c0:cb:78:d5:4f:d9:66:40:d1:0c:
9c:93:48:46:27:bb:37:58:e1:a2:3e:dd:9b:07:2d:56:6c:eb:
e6:00:a6:b3:d5:4e:6b:e0:15:32:25:6e:84:bb:aa:64:0f:39:
81:99:a3:08:4a:91:26:dc:0e:6c:fc:82:81:38:a2:de:a4:fc:
59:69:75:4c:ca:47:bd:6f:0a:77:3a:71:2e:a0:70:a4:b2:08:
e9:2d:e8:cb:68:ff:af:34:8f:85:bc:64:cd:9e:ec:82:8b:76:
27:b9:1b:f1:21:43:f1:33:ff:ed:12:0c:c4:d3:08:e1:d6:e0:
42:ca:fa:b5:19:1f:d5:1a:25:34:d7:48:dd:9f:16:d7:92:02:
a3:ff:a6:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaJeXJ9wZzhLX4RzHDxo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmU0Nzk0YWZjM2EyYmEyNWQyNTJhODU3MzQ3ZWQ0ZWVh
ZTZiNDAwHhcNMjYwNzAyMTUxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmU1Njk3OGM4MmJmMTY5NGUyN2JhYTE1NDAyZGFmMzE3ZjdlMmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zgYo9SlMqV1KuCLutc50VpTC8QW
sAenQQsx5RBQi1cPZc/fpIxJSu68tQ4U0rVGE0pYDGJoMtNmUb9EauMqxwHKBE4n
Z4tbLx6hvfaxhE4V0Gx8C1OPEJFxZgDQu8XkRuZVxn1vxSYLxsa3K9zWXETCWI6I
vt1e+mP8D0MBaDws1/qqojNZ4XQOB5prUNI296r5NryVMA4pWJoR554gSh9i+zjY
fqjkhLKh3yfJz14sdB2s4CngIUE+fku9ZCwjMe8xsKWUiAnE/DdKPbYoxwoZxC/r
0anjaq/t317PD7j4b/Jk5yxSdPUZH/czAiQRxNzdOKhmpx2+0d7hdAaDoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNvlaXjIK/FpTie6oVQC2vMX9+LAMB8GA1UdIwQY
MBaAFNZuR5Svw6K6JdJSqFc0ftTurmtAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW01SGxLX0Rvcm9sMGxLb1Z6Ui0xTzZ1YTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvMi1WcGVNZ3I4V2xPSjdxaFZBTGE4eGYzNHNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMW01SGxLX0Rvcm9sMGxLb1Z6Ui0xTzZ1YTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPuT+MA0G
CSqGSIb3DQEBCwUAA4IBAQCceavYUSEbeJoCmittW1sS0rd1YjGQ8G2hQG9+r+MX
Fy/gUlwzBuxwx2wyHnBAHlUnRy7zqJCI7U4Oc7huBWH36NGH8hhW0tcCpsauGdnI
08EhmoLp+bmiSYkcOH0LSjZVakaMHtg4Ls3Wgg6Y0ATe/PajSMDLeNVP2WZA0Qyc
k0hGJ7s3WOGiPt2bBy1WbOvmAKaz1U5r4BUyJW6Eu6pkDzmBmaMISpEm3A5s/IKB
OKLepPxZaXVMyke9bwp3OnEuoHCksgjpLejLaP+vNI+FvGTNnuyCi3YnuRvxIUPx
M//tEgzE0wjh1uBCyvq1GR/VGiU010jdnxbXkgKj/6bJ
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:28 2026 by rpki-client