Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/CJ4Ho0rK-wEVhXGKy5EoeUaAqF8.roa
File: CJ4Ho0rK-wEVhXGKy5EoeUaAqF8.roa (raw, json)
Hash identifier: bi6qpQBcCAHeXpWf/tbi6W0Y+r+V6vixCToqurIcUo0=
Subject key identifier: 08:9E:07:A3:4A:CA:FB:01:15:85:71:8A:CB:91:28:79:46:80:A8:5F
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F23689DD3444BDC521EE0BBE93DA0E80F
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/CJ4Ho0rK-wEVhXGKy5EoeUaAqF8.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202534
IP address blocks: 62.228.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9d:d3:44:4b:dc:52:1e:e0:bb:e9:3d:a0:e8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=089e07a34acafb011585718acb9128794680a85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:bb:54:52:e6:a9:f8:22:e8:c8:90:fc:ec:
ae:b4:8f:33:c3:b6:45:67:95:07:65:a0:06:54:d8:
05:10:fd:e9:e9:7a:0d:30:fd:c3:bd:e7:fb:9e:1c:
d1:9a:8b:ca:aa:20:fd:3c:8c:eb:3c:b5:a8:ec:af:
5f:cc:21:e7:06:fd:aa:c1:23:3f:6e:7e:3a:ee:ed:
ef:7b:63:7b:43:ec:bd:8e:99:86:80:11:a7:72:a2:
2f:f8:5d:db:fe:eb:be:18:5f:01:9c:df:96:d1:e7:
bf:a7:3d:a8:39:ac:d4:7c:9c:a6:64:27:8b:2e:30:
3c:55:4c:20:04:16:37:f1:66:eb:fb:bf:2b:61:33:
dd:a8:50:f8:e1:c8:d7:4d:fb:8d:70:86:a5:42:59:
5f:0b:ab:81:45:52:50:36:d1:54:28:46:5a:31:dc:
8c:65:cb:22:47:7d:47:79:b6:72:8c:9c:ee:d0:93:
e2:05:5d:f3:1e:1f:6f:2a:80:54:b4:18:89:c7:df:
af:bf:80:bb:19:f2:a0:9e:15:0e:ec:66:09:47:d2:
45:8f:c3:bf:cb:10:ff:37:56:fd:dc:ad:a9:70:b0:
9f:9e:14:eb:05:45:c4:50:72:87:ea:f2:61:fc:c9:
b6:d6:80:5e:0f:60:e6:de:73:2a:4a:75:81:28:2f:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9E:07:A3:4A:CA:FB:01:15:85:71:8A:CB:91:28:79:46:80:A8:5F
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/CJ4Ho0rK-wEVhXGKy5EoeUaAqF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.239.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d3:c3:77:7a:83:85:0f:9b:b8:43:5a:73:41:94:7f:8e:02:
17:c5:4e:75:25:19:61:db:31:ad:d8:f2:d0:c7:c6:4e:f9:a4:
9b:ba:6e:32:80:e4:20:a8:f3:0a:f2:c9:7e:94:da:4e:3b:f0:
8e:a4:f6:a2:30:cf:fa:2c:e7:aa:7b:76:bf:3f:1b:c0:df:b4:
93:86:76:68:7b:d7:7b:74:fa:1c:00:4a:9b:b9:c5:97:57:f1:
9f:36:3b:a5:ba:40:cd:2c:4e:d5:4d:3a:26:b0:e9:a1:1f:d2:
77:cd:e1:05:9a:86:12:60:64:51:6c:77:c5:c9:08:12:8e:78:
25:ab:f6:0a:00:50:93:23:e8:f1:68:9f:52:c8:40:d8:bb:38:
30:46:79:fa:75:32:52:aa:74:6f:31:40:8a:74:91:5c:bb:19:
10:78:1d:44:a6:71:79:1a:ae:1e:f1:be:53:4f:de:9d:20:81:
44:4b:09:77:b3:8e:49:1e:02:5d:5c:0d:e7:ff:35:b1:9e:e0:
5e:c3:16:c3:c2:9b:b6:ba:43:e9:e2:4b:86:9d:b6:5b:26:06:
51:df:d9:5a:29:72:c3:24:e3:90:73:fb:aa:ae:78:96:8a:63:
85:7b:14:10:27:a3:e8:9a:4a:ab:ed:fa:31:2f:5f:3e:25:94:
1b:33:a6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:29 2026 by rpki-client