Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/e7YLs7d9BooaEXjfhj35M1zCANk.roa
File: e7YLs7d9BooaEXjfhj35M1zCANk.roa (raw, json)
Hash identifier: 6kVp3Z3Ls+TJhmXsKC3JdMydn7wc1r4A0PwZJ8RWk5k=
Subject key identifier: 7B:B6:0B:B3:B7:7D:06:8A:1A:11:78:DF:86:3D:F9:33:5C:C2:00:D9
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F236895A12F9D643A50C680BACD63B949
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/e7YLs7d9BooaEXjfhj35M1zCANk.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24655
IP address blocks: 62.228.230.0/24 maxlen: 24
62.228.233.0/24 maxlen: 24
81.4.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:95:a1:2f:9d:64:3a:50:c6:80:ba:cd:63:b9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bb60bb3b77d068a1a1178df863df9335cc200d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:b6:68:dd:d9:fa:b3:6a:2d:cb:c8:be:8f:
db:55:bd:7a:57:bd:f4:f8:4c:90:5a:e3:ce:60:e6:
28:69:b7:66:37:70:ce:0c:11:e7:df:46:44:31:d7:
6b:a8:8b:4c:9f:7f:95:93:48:4d:54:9a:b2:11:ed:
51:53:45:7e:f3:cf:f7:72:7a:3c:29:13:98:be:d4:
f8:c4:cd:e5:2f:7f:f8:e2:bf:90:de:8b:e1:32:ea:
98:09:08:48:d8:2e:7e:3d:1c:7e:c6:79:e1:b3:eb:
87:5f:ae:97:fd:02:78:b1:32:e3:13:04:23:c8:08:
c4:42:cf:3d:ee:74:84:0c:d1:8f:aa:c3:5e:d6:7b:
4d:78:7a:94:6e:30:66:50:a6:a0:f4:3a:e9:cf:37:
27:c9:67:65:5e:81:a1:2c:b8:e5:80:4e:6d:2d:02:
26:ef:1a:5b:67:92:cb:b6:c3:6c:d2:b8:dd:3f:58:
9d:c4:aa:0f:ce:df:62:74:da:f1:27:34:f9:1a:da:
c7:a8:95:fd:80:52:db:8e:b0:6b:c4:ac:d1:5d:f7:
74:57:13:e7:74:b5:a7:3c:33:54:9b:11:e6:47:06:
ed:a9:f6:37:0e:fd:41:30:ac:93:46:8b:5f:95:42:
54:aa:e4:3a:95:f5:b2:14:b2:e7:de:fe:e4:05:92:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B6:0B:B3:B7:7D:06:8A:1A:11:78:DF:86:3D:F9:33:5C:C2:00:D9
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/e7YLs7d9BooaEXjfhj35M1zCANk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.230.0/24
62.228.233.0/24
81.4.190.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:22:99:7d:46:dc:2f:ee:b4:28:ff:a5:34:ae:af:2a:21:dc:
b5:ae:ef:54:f5:b6:41:64:2b:a2:7e:88:d9:22:6c:65:40:d5:
6a:66:d8:c6:23:ed:0e:0e:95:bb:1e:14:01:fe:3e:0e:d9:92:
60:2d:b2:e5:fc:33:ee:36:b2:3c:2f:6e:95:11:b7:5b:40:8f:
40:74:63:36:ee:8c:49:99:80:92:ea:de:f9:5f:46:76:27:de:
7f:2f:8b:e2:8e:eb:e1:bb:4b:e2:82:dd:4e:ad:82:ef:e0:6e:
a1:80:ca:a7:13:4b:29:a5:8d:0b:c3:21:65:45:e9:de:39:4c:
2c:74:55:0b:ef:50:02:db:92:01:69:7a:00:f7:17:a4:aa:46:
f9:48:16:07:dc:53:38:61:3c:37:44:9c:db:9e:5b:6d:b0:13:
59:88:e3:8d:9e:0f:73:10:98:d3:56:46:13:15:58:17:6b:47:
e2:92:dc:99:a0:8e:12:de:52:5f:e6:e1:aa:9e:5d:94:03:23:
7d:6c:bc:b9:a1:89:ad:52:85:7b:69:89:e0:5c:66:f2:8a:58:
b8:4d:2b:c8:2a:47:fd:d5:06:5c:1f:6d:7f:64:97:c2:b1:1c:
fc:19:14:19:45:d9:8f:55:e2:d5:90:1e:f2:aa:cb:dd:e7:ce:
ce:e7:6d:cd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8jaJWhL51kOlDGgLrNY7lJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmU0Nzk0YWZjM2EyYmEyNWQyNTJhODU3MzQ3ZWQ0ZWVh
ZTZiNDAwHhcNMjYwNzAyMTUxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmI2MGJiM2I3N2QwNjhhMWExMTc4ZGY4NjNkZjkzMzVjYzIwMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvC2aN3Z+rNqLcvIvo/bVb16V730
+EyQWuPOYOYoabdmN3DODBHn30ZEMddrqItMn3+Vk0hNVJqyEe1RU0V+88/3cno8
KROYvtT4xM3lL3/44r+Q3ovhMuqYCQhI2C5+PRx+xnnhs+uHX66X/QJ4sTLjEwQj
yAjEQs897nSEDNGPqsNe1ntNeHqUbjBmUKag9DrpzzcnyWdlXoGhLLjlgE5tLQIm
7xpbZ5LLtsNs0rjdP1idxKoPzt9idNrxJzT5GtrHqJX9gFLbjrBrxKzRXfd0VxPn
dLWnPDNUmxHmRwbtqfY3Dv1BMKyTRotflUJUquQ6lfWyFLLn3v7kBZKWJQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHu2C7O3fQaKGhF434Y9+TNcwgDZMB8GA1UdIwQY
MBaAFNZuR5Svw6K6JdJSqFc0ftTurmtAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW01SGxLX0Rvcm9sMGxLb1Z6Ui0xTzZ1YTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvZTdZTHM3ZDlCb29hRVhqZmhqMzVNMXpDQU5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMW01SGxLX0Rvcm9sMGxLb1Z6Ui0xTzZ1YTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPuTmAwQA
PuTpAwQBUQS+MA0GCSqGSIb3DQEBCwUAA4IBAQCtIpl9Rtwv7rQo/6U0rq8qIdy1
ru9U9bZBZCuifojZImxlQNVqZtjGI+0ODpW7HhQB/j4O2ZJgLbLl/DPuNrI8L26V
EbdbQI9AdGM27oxJmYCS6t75X0Z2J95/L4vijuvhu0vigt1OrYLv4G6hgMqnE0sp
pY0LwyFlReneOUwsdFUL71AC25IBaXoA9xekqkb5SBYH3FM4YTw3RJzbnlttsBNZ
iOONng9zEJjTVkYTFVgXa0fiktyZoI4S3lJf5uGqnl2UAyN9bLy5oYmtUoV7aYng
XGbyili4TSvIKkf91QZcH21/ZJfCsRz8GRQZRdmPVeLVkB7yqsvd587O523N
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:02 2026 by rpki-client