Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6wJo24JaEg4HCL13OwZyd_p8EuI.roa
File: 6wJo24JaEg4HCL13OwZyd_p8EuI.roa (raw, json)
Hash identifier: Ecy52IEyOsXieauOVtOGrI8MLaSGwR5ZywaJVjVouO0=
Subject key identifier: EB:02:68:DB:82:5A:12:0E:07:08:BD:77:3B:06:72:77:FA:7C:12:E2
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F23689F7EA0E75E890C887CE8635B6737
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6wJo24JaEg4HCL13OwZyd_p8EuI.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205972
IP address blocks: 62.228.238.0/24 maxlen: 24
2a00:1358:c002:5600::/56 maxlen: 56
2a00:1358:c100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9f:7e:a0:e7:5e:89:0c:88:7c:e8:63:5b:67:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb0268db825a120e0708bd773b067277fa7c12e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:fe:93:cc:d4:9d:97:4c:55:9b:33:3a:c6:
d5:24:a6:08:33:84:c9:c8:a8:ff:01:e4:e4:d5:06:
4c:b2:04:ba:7d:5f:be:71:6c:2d:6d:e4:20:63:aa:
a9:a2:c0:8e:5a:fe:66:92:ee:f8:a2:96:1f:08:49:
24:62:1a:da:15:e8:c7:03:b0:32:ca:a4:7c:2f:d3:
66:2e:6a:37:d7:3d:b4:02:00:23:61:ed:fd:7a:be:
c4:66:01:2d:38:70:bf:f1:9a:56:b7:f9:dc:c7:53:
18:8f:48:43:9a:d0:2d:f8:6f:12:8a:af:0c:68:de:
3d:18:a7:a2:76:55:b6:50:fc:b0:35:fb:cf:8c:23:
bc:63:b3:d9:c7:ca:b8:d5:f3:e6:10:f1:71:0d:42:
3a:53:f1:9b:de:f0:9c:21:57:40:61:85:bc:1e:80:
be:a7:44:1d:a7:ea:9b:66:7c:20:9f:ab:b8:39:9e:
6f:6f:d5:05:c9:e4:8e:f0:6c:b1:35:16:22:c9:3d:
8d:f4:d2:46:8c:2b:d3:b6:82:c1:5c:cf:97:22:ff:
48:11:2f:1a:13:a4:3b:16:25:60:b9:90:78:12:8c:
f7:8e:e8:0d:e3:42:82:c1:20:46:17:b3:a6:cc:00:
c0:0d:aa:bf:83:1f:ce:8b:b2:c2:b1:a7:da:a6:9a:
61:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:02:68:DB:82:5A:12:0E:07:08:BD:77:3B:06:72:77:FA:7C:12:E2
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6wJo24JaEg4HCL13OwZyd_p8EuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.238.0/24
IPv6:
2a00:1358:c002:5600::/56
2a00:1358:c100::/48
Signature Algorithm: sha256WithRSAEncryption
96:fd:76:5d:3a:17:a9:2d:c2:b2:f7:70:d9:55:69:6d:ae:55:
c3:7e:dd:7e:83:42:97:1e:1e:1c:bf:9a:ed:c8:72:ff:2d:a9:
db:1b:89:2b:99:cf:20:81:1b:4a:cc:ab:4b:40:c1:48:12:a0:
27:66:eb:46:b7:e4:b3:82:87:93:3c:7a:4b:84:0c:d0:74:31:
83:1e:dd:14:79:61:51:7f:d5:5e:ee:d2:09:28:e9:4f:4e:d0:
1b:fe:6d:c2:78:0b:28:77:8a:22:8a:7d:cc:8a:1b:54:eb:65:
55:8a:8e:9d:f4:e4:45:f2:4c:fd:52:27:51:01:cb:d5:36:17:
67:ff:3a:9d:dd:c4:d9:f5:81:64:86:4d:ad:73:1d:6f:40:bd:
58:4c:2c:4e:c2:9f:4a:54:28:8b:9f:f6:c4:dc:97:94:c6:3e:
c8:a2:9a:d5:3c:fd:f4:4f:b5:cb:c9:a6:b1:6b:14:3d:eb:c6:
03:ab:07:03:9c:44:2b:bd:35:7a:25:61:cc:09:f0:ef:ae:c7:
f6:20:5a:d8:3a:cc:51:42:33:b8:9c:ac:98:c1:24:63:70:74:
a5:8f:fa:cc:01:34:28:7f:1b:0c:36:c3:60:64:62:d9:8b:d7:
84:b0:40:0a:0f:ca:57:e2:96:33:7d:a0:80:f8:2f:76:e7:c8:
db:77:e8:88
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ8jaJ9+oOdeiQyIfOhjW2c3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmU0Nzk0YWZjM2EyYmEyNWQyNTJhODU3MzQ3ZWQ0ZWVh
ZTZiNDAwHhcNMjYwNzAyMTUxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjAyNjhkYjgyNWExMjBlMDcwOGJkNzczYjA2NzI3N2ZhN2MxMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqer+k8zUnZdMVZszOsbVJKYIM4TJ
yKj/AeTk1QZMsgS6fV++cWwtbeQgY6qposCOWv5mku74opYfCEkkYhraFejHA7Ay
yqR8L9NmLmo31z20AgAjYe39er7EZgEtOHC/8ZpWt/ncx1MYj0hDmtAt+G8Siq8M
aN49GKeidlW2UPywNfvPjCO8Y7PZx8q41fPmEPFxDUI6U/Gb3vCcIVdAYYW8HoC+
p0Qdp+qbZnwgn6u4OZ5vb9UFyeSO8GyxNRYiyT2N9NJGjCvTtoLBXM+XIv9IES8a
E6Q7FiVguZB4Eoz3jugN40KCwSBGF7OmzADADaq/gx/Oi7LCsafappphXwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFOsCaNuCWhIOBwi9dzsGcnf6fBLiMB8GA1UdIwQY
MBaAFNZuR5Svw6K6JdJSqFc0ftTurmtAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW01SGxLX0Rvcm9sMGxLb1Z6Ui0xTzZ1YTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvNndKbzI0SmFFZzRIQ0wxM093WnlkX3A4RXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMW01SGxLX0Rvcm9sMGxLb1Z6Ui0xTzZ1YTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAMBAIAATAGAwQAPuTuMBkE
AgACMBMDCAAqABNYwAJWAwcAKgATWMEAMA0GCSqGSIb3DQEBCwUAA4IBAQCW/XZd
OhepLcKy93DZVWltrlXDft1+g0KXHh4cv5rtyHL/LanbG4krmc8ggRtKzKtLQMFI
EqAnZutGt+SzgoeTPHpLhAzQdDGDHt0UeWFRf9Ve7tIJKOlPTtAb/m3CeAsod4oi
in3MihtU62VVio6d9ORF8kz9UidRAcvVNhdn/zqd3cTZ9YFkhk2tcx1vQL1YTCxO
wp9KVCiLn/bE3JeUxj7IoprVPP30T7XLyaaxaxQ968YDqwcDnEQrvTV6JWHMCfDv
rsf2IFrYOsxRQjO4nKyYwSRjcHSlj/rMATQofxsMNsNgZGLZi9eEsEAKD8pX4pYz
faCA+C9258jbd+iI
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:41 2026 by rpki-client