Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/asO6fDu3xQ_k5_xoxqGkUmmCdiQ.roa
File: asO6fDu3xQ_k5_xoxqGkUmmCdiQ.roa (raw, json)
Hash identifier: KuqZv/NVMnD/Fd4vtymf7s80nLCEQdm+5RUgyn+ikB0=
Subject key identifier: 6A:C3:BA:7C:3B:B7:C5:0F:E4:E7:FC:68:C6:A1:A4:52:69:82:76:24
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F236895DE82892825DE1DE45236F185F4
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/asO6fDu3xQ_k5_xoxqGkUmmCdiQ.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31198
IP address blocks: 62.228.242.0/24 maxlen: 24
62.228.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:95:de:82:89:28:25:de:1d:e4:52:36:f1:85:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ac3ba7c3bb7c50fe4e7fc68c6a1a45269827624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:0f:70:ba:96:f2:59:b5:65:08:4f:d4:de:
10:eb:5a:49:7e:4b:6e:ea:5e:ef:97:a3:07:c5:86:
6e:1a:df:b3:0f:d2:e6:ba:79:90:8b:9c:5e:43:17:
a3:ab:8a:89:34:e1:b8:e7:dc:7d:4e:f1:21:9e:2b:
59:2a:0c:b9:49:01:39:0a:03:da:7d:30:4d:64:71:
b0:c5:bf:93:90:c2:0d:41:e5:61:89:35:00:5f:7f:
fd:a7:57:da:09:33:e5:a2:07:c3:f1:ab:6e:2b:53:
10:c3:48:b4:b0:16:01:84:e3:d3:97:3a:f9:c9:d3:
8b:fa:3d:39:dd:31:77:db:02:c9:68:74:7b:55:08:
85:64:8f:8d:c2:8e:a9:d0:9f:a1:e4:96:39:98:5a:
52:c4:bc:a3:58:a4:36:6c:99:60:10:a0:c7:29:1f:
01:b4:ea:3d:64:00:3d:42:3c:59:77:be:03:e6:a3:
1b:3f:9d:4e:12:02:85:69:9c:c0:47:ee:20:d3:1c:
e8:8e:a5:a7:7d:dd:aa:0c:11:a2:cf:bd:de:0f:f6:
e5:a0:b8:1b:96:a2:d9:33:3a:ed:30:fc:6e:c4:40:
be:cf:68:93:b6:ec:6b:23:05:d6:6c:78:db:58:c5:
1c:9e:40:b6:82:2c:c2:78:f4:67:3b:a3:24:05:eb:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C3:BA:7C:3B:B7:C5:0F:E4:E7:FC:68:C6:A1:A4:52:69:82:76:24
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/asO6fDu3xQ_k5_xoxqGkUmmCdiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.242.0/24
62.228.252.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ea:4c:3f:3a:28:8a:1a:b8:b5:5e:73:1f:d4:84:c1:fd:04:
0c:f4:db:28:7d:95:4f:bf:d4:29:20:25:c6:a2:da:74:55:81:
5e:95:0e:1f:c0:c6:95:f1:cd:b0:d8:90:b6:f7:4f:ea:82:b0:
3d:f6:08:46:c2:a4:ff:e9:ef:a0:b6:94:c6:0b:81:13:28:b4:
93:c7:ee:4c:34:82:ee:29:13:d2:5d:4f:0c:e6:ed:b1:a4:d2:
97:b1:cd:a9:cb:9e:cf:72:83:37:d0:95:46:d6:65:fa:8d:d0:
0f:80:d3:96:43:26:1c:1f:5c:b2:07:30:24:3c:cd:b1:05:15:
7a:5f:9f:8f:c5:9f:56:e3:2a:df:1d:df:db:35:b6:4f:3d:b1:
f6:08:d2:a1:ca:ca:af:06:6f:e2:bc:fe:45:ce:94:35:3a:64:
02:3d:8f:48:1c:91:0d:43:a4:48:9f:f6:0e:45:bb:ad:cb:48:
72:8b:59:a2:55:e2:8e:f2:cf:dc:89:6c:31:04:24:3f:84:7d:
0b:d8:c1:80:aa:56:07:d6:10:a0:0b:f8:cc:0a:18:8a:79:5a:
57:3a:f3:f4:82:51:60:20:7c:ef:88:09:e9:8f:75:d6:1c:08:
a5:ac:0c:eb:76:1e:f9:79:5c:a1:53:06:80:24:9a:8e:0d:3d:
95:f5:97:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:59:08 2026 by rpki-client