Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/BI0vsV_pNzMBX3hoCNbiOQQ2Lj0.roa
File: BI0vsV_pNzMBX3hoCNbiOQQ2Lj0.roa (raw, json)
Hash identifier: FTSWcIBrpAoN+BaWjFgyeHzR2aPhUIX+vxQU4l8lXDg=
Subject key identifier: 04:8D:2F:B1:5F:E9:37:33:01:5F:78:68:08:D6:E2:39:04:36:2E:3D
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F236894C87CBDBBF9D7BDB30CCF855725
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/BI0vsV_pNzMBX3hoCNbiOQQ2Lj0.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 62.228.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:94:c8:7c:bd:bb:f9:d7:bd:b3:0c:cf:85:57:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=048d2fb15fe93733015f786808d6e23904362e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:a1:98:9f:3a:ea:00:d6:26:b2:29:ea:dc:
4c:0e:ac:94:55:3e:0c:bd:e1:40:e9:62:23:3e:ea:
30:9d:45:e1:4f:c5:e0:3b:4a:64:c2:42:b1:50:b4:
b5:de:50:e0:6d:0c:e6:75:3e:57:a7:e9:88:e6:59:
91:b8:4b:af:c0:85:4d:96:f1:f3:21:b9:15:32:bf:
48:96:c9:da:1e:a1:1c:7e:b1:75:24:b1:f7:13:14:
81:73:25:f5:64:6b:4f:c4:9a:82:45:1b:4f:bf:7e:
bd:fe:10:dd:94:f8:e6:5b:aa:82:56:ad:31:58:2b:
99:84:c5:30:94:96:91:d5:25:a1:1a:39:0f:6e:5a:
36:b2:90:2a:a0:a7:2d:48:9d:c8:e3:29:84:fe:d7:
9c:b7:ea:c8:46:1b:75:67:62:06:26:8b:a6:6e:89:
a0:46:b9:41:f2:3a:f4:02:7e:ce:ef:12:5e:28:10:
9f:fc:2e:f2:c8:c2:52:21:e1:f3:7f:3f:a2:3e:e6:
21:4d:d6:e5:e0:f5:8f:c0:1a:86:62:c3:37:a0:4a:
28:d0:ed:bc:6c:32:cf:fc:87:5f:42:26:19:b4:f6:
cc:3e:05:fe:53:88:ab:f6:da:24:c2:d7:94:67:2c:
40:29:b7:83:cb:de:c6:c6:69:50:a5:3b:4d:01:38:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8D:2F:B1:5F:E9:37:33:01:5F:78:68:08:D6:E2:39:04:36:2E:3D
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/BI0vsV_pNzMBX3hoCNbiOQQ2Lj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.230.0/24
Signature Algorithm: sha256WithRSAEncryption
19:32:17:d0:93:1b:88:f9:c4:15:99:67:99:06:e9:95:c0:5b:
2d:f2:65:57:33:85:16:a9:b4:52:9e:66:56:65:8f:74:69:58:
01:75:4b:20:f9:3e:9d:e6:78:0c:1a:94:43:b7:6c:11:bc:ac:
a5:fd:9e:8f:05:b7:1a:f2:18:22:e7:ef:f2:a4:0d:b0:81:4d:
3c:58:e1:13:24:a9:41:9b:c6:a8:da:f9:a8:0b:ba:91:b0:56:
e9:ae:f9:d4:d4:14:fd:a9:5d:fa:3a:11:8d:49:97:33:6c:7b:
f6:3e:69:7a:82:9d:5b:9a:e1:56:08:70:47:6f:3b:28:74:e3:
ca:62:2d:9c:05:4f:29:f9:4b:c3:22:ba:a3:bd:6a:1a:44:64:
fd:b3:7d:7d:4b:f2:67:54:13:0a:fb:00:4a:a5:6e:0a:17:01:
ff:d9:49:e8:5d:c3:28:90:f4:c6:47:4f:80:6a:d8:df:78:d5:
8d:b3:fe:39:51:85:b7:ba:98:ba:af:61:b4:e9:61:0b:9b:f2:
c2:aa:e0:b8:55:c3:c2:5c:11:49:90:b1:85:bd:15:41:f9:3a:
c3:1c:10:bb:7e:7e:b7:22:85:0a:99:b2:91:b7:a3:04:4c:c8:
07:6e:20:78:62:4a:fa:4a:ca:d4:5b:87:f2:fc:41:f3:50:ad:
de:21:6d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:48 2026 by rpki-client