Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/4ugcXWTew_-RTsexCcRaMYVlSJQ.roa
File: 4ugcXWTew_-RTsexCcRaMYVlSJQ.roa (raw, json)
Hash identifier: 3pTb9i59TWEwdsk0USORPlbOcbLxAM6aj2enaiKbwk8=
Subject key identifier: E2:E8:1C:5D:64:DE:C3:FF:91:4E:C7:B1:09:C4:5A:31:85:65:48:94
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F236899EE517D89525459DE39AB29F81D
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/4ugcXWTew_-RTsexCcRaMYVlSJQ.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201444
IP address blocks: 62.228.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:99:ee:51:7d:89:52:54:59:de:39:ab:29:f8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2e81c5d64dec3ff914ec7b109c45a3185654894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:7f:21:2f:50:4b:59:39:d8:67:26:26:b6:
72:51:f1:b8:9e:af:f1:14:3f:bc:31:49:a0:a5:6e:
98:47:fb:cf:77:95:37:3c:77:c9:40:3d:cd:0e:3f:
64:d2:4a:fb:97:ab:6f:73:5d:59:2c:6f:d3:6a:91:
4d:74:06:f7:7d:a2:8f:0f:12:1f:1e:d9:d0:a4:d4:
4b:e2:57:69:de:68:94:9a:87:08:8d:b3:89:87:64:
92:ac:1e:4c:c1:78:d8:f9:f7:04:42:c9:20:1c:38:
15:59:64:34:5b:18:8e:04:4d:d3:fe:c5:8d:37:9b:
8c:c8:c1:a0:86:fb:af:93:14:a0:c6:21:ca:f7:9d:
bd:4a:8c:27:65:9f:d8:b4:3c:1c:52:35:a4:3a:c1:
50:a5:ea:a3:04:b8:4e:70:24:ee:3a:76:95:7b:cf:
b2:5f:9f:75:92:39:15:19:58:f5:f1:f3:95:ea:51:
26:f2:64:ac:6c:93:7b:fa:75:e0:e0:30:e5:b8:4c:
49:15:45:00:37:6f:f4:5b:98:2b:95:ec:6b:e2:12:
8f:28:9e:e4:ac:0e:68:77:45:a5:e5:08:cc:0e:35:
6d:02:d8:c2:55:e7:3d:e7:26:ca:19:5f:8b:69:a2:
3a:4f:0e:ca:c3:eb:03:7a:f3:be:df:5e:07:98:39:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E8:1C:5D:64:DE:C3:FF:91:4E:C7:B1:09:C4:5A:31:85:65:48:94
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/4ugcXWTew_-RTsexCcRaMYVlSJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:63:48:41:e4:f8:a1:95:c4:9d:d5:f6:c9:af:8d:83:96:89:
6b:83:77:21:da:65:ed:02:91:05:87:7d:0b:e5:e1:6c:6b:fe:
4d:42:e0:71:82:1e:d4:ed:a5:72:df:ca:fb:4d:9d:d4:21:9b:
ad:2d:1b:d7:fb:05:39:83:c4:57:e4:c8:32:76:a3:47:67:fa:
fd:ed:af:29:70:3a:ee:5c:fa:b7:15:6a:64:c2:f9:f1:10:3b:
9a:32:2d:32:eb:92:dd:45:61:c2:50:ff:38:4e:7c:75:29:d5:
40:9f:08:17:ee:5c:a7:3c:f9:d7:14:b5:22:b6:f3:74:4b:11:
62:6e:0d:6d:3f:e8:39:87:11:a6:6a:7b:68:f8:8b:05:39:75:
56:b1:76:78:f2:6f:2b:67:21:6f:66:b0:01:91:84:87:ac:ba:
35:46:86:87:12:87:d8:fe:16:2d:e0:1e:db:e2:ce:0b:72:88:
0f:f3:38:05:57:0e:78:33:ef:ba:6f:58:ba:a9:19:2a:aa:80:
42:28:bf:f6:0e:30:e1:22:7d:a3:11:ba:f8:8d:08:ac:28:8e:
b0:f8:43:46:6c:8c:68:1f:fd:42:3f:62:5d:fb:33:53:29:8e:
4c:d6:54:1b:ac:62:fc:8f:e9:46:ba:74:5c:f3:e0:bf:88:da:
30:c7:b4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:59:09 2026 by rpki-client