Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/hYZbxMfDtkrJJ0OGSPR-AwqX4BI.roa
File: hYZbxMfDtkrJJ0OGSPR-AwqX4BI.roa (raw, json)
Hash identifier: FyvzqNs/DFqFEdYIOb+k/AxYw5XksOHLVMUkCECP37U=
Subject key identifier: 85:86:5B:C4:C7:C3:B6:4A:C9:27:43:86:48:F4:7E:03:0A:97:E0:12
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F2368A15C707A864917D3899ED1E3BE42
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/hYZbxMfDtkrJJ0OGSPR-AwqX4BI.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208601
IP address blocks: 62.228.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a1:5c:70:7a:86:49:17:d3:89:9e:d1:e3:be:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85865bc4c7c3b64ac927438648f47e030a97e012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:c1:da:a6:33:01:36:39:8c:14:16:32:b4:
80:6a:e8:c6:b1:41:0c:40:fe:aa:cd:eb:0a:86:33:
63:dc:86:2a:b9:1e:95:4d:86:ec:92:5e:66:26:2a:
3c:bf:e2:9c:fe:01:77:fc:13:6c:1c:5e:c2:2e:9e:
1d:04:a6:05:5b:c6:ee:a6:4b:34:df:3d:3c:86:19:
79:60:06:dd:0c:5b:51:61:9a:6a:5c:4b:8c:cc:1b:
f6:e8:b9:ba:47:85:92:f2:4c:13:df:59:3c:ad:1f:
82:b4:0e:20:35:9b:30:5a:c1:72:fc:59:92:ee:bf:
2d:49:9d:1f:65:bf:66:f4:f8:d3:e2:e6:13:fb:c7:
f4:50:87:8f:04:03:6a:86:43:56:9c:f1:ed:cc:46:
ca:04:c7:ae:42:b7:e7:f0:60:57:db:32:f3:a5:c8:
50:42:41:a2:5d:60:db:82:70:f2:be:1e:24:e2:47:
3d:ae:0d:0b:bc:0c:fb:e4:c4:cc:4c:fc:bf:cf:61:
d4:0e:90:c7:64:9c:f1:a0:a7:07:c1:f8:c9:10:88:
d8:24:95:8e:a9:18:31:30:61:1b:2c:93:ce:cb:4d:
77:4e:12:0b:6f:9b:08:b4:a8:4e:6b:aa:99:7e:59:
45:3d:1c:9e:a9:43:5f:19:e8:8b:a5:af:05:f4:33:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:86:5B:C4:C7:C3:B6:4A:C9:27:43:86:48:F4:7E:03:0A:97:E0:12
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/hYZbxMfDtkrJJ0OGSPR-AwqX4BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.235.0/24
Signature Algorithm: sha256WithRSAEncryption
36:42:ae:79:d8:3e:3c:ec:15:05:e4:32:14:37:d0:fb:72:c7:
b6:1e:14:65:6d:5e:97:b2:ba:e2:ef:e0:57:73:8e:c9:c5:e0:
a8:88:47:03:0a:9f:b7:25:9e:36:45:5c:46:5f:92:68:fc:b8:
45:4c:47:b1:23:a1:e9:7d:c9:8f:62:ba:26:e0:7a:1e:55:32:
39:d7:d8:cc:86:fd:b7:85:a1:f3:7d:3f:ca:f4:c0:1a:8a:3e:
3d:98:ac:b6:f2:bd:d4:c2:78:27:d4:01:06:09:5a:a3:14:1a:
44:2a:1b:2c:e5:06:34:20:01:cc:ca:d5:5c:e4:f5:78:dc:d8:
6f:4d:bc:3b:6f:75:db:57:2a:4a:8b:9e:f2:7f:f9:09:ff:5c:
29:e4:0b:dd:12:d2:0a:8d:a7:68:64:4d:40:d5:c7:6b:ed:29:
f7:c7:9a:4a:ac:34:5b:f7:fa:a2:a3:25:d3:7d:4c:3d:31:b9:
f0:f5:b6:ea:c6:2a:7f:61:ec:a6:a5:4a:c1:76:d2:42:0a:80:
d0:e9:7a:91:b2:55:06:6f:4d:c9:46:ca:f7:31:d6:0c:09:6d:
80:12:86:92:43:12:ea:3b:bf:a4:5f:e2:c8:03:b0:75:4f:07:
9b:bf:b5:d1:02:44:7a:92:61:24:da:86:2b:a8:78:2a:95:be:
16:0b:f4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:02 2026 by rpki-client