Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/iQJFEogcmuEcf3e1YUWgCA2jhHs.roa
File: iQJFEogcmuEcf3e1YUWgCA2jhHs.roa (raw, json)
Hash identifier: R4DLgm0Woa+HAomEZejsM5VxONe5BX3yp63MRciIs1I=
Subject key identifier: 89:02:45:12:88:1C:9A:E1:1C:7F:77:B5:61:45:A0:08:0D:A3:84:7B
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F23689A27CEA28232F9C7691E9D0B3C63
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/iQJFEogcmuEcf3e1YUWgCA2jhHs.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202117
IP address blocks: 62.228.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9a:27:ce:a2:82:32:f9:c7:69:1e:9d:0b:3c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89024512881c9ae11c7f77b56145a0080da3847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:32:26:fb:7b:cb:26:7e:84:8c:ec:bf:08:
93:f2:c0:48:4e:a0:95:a8:6c:d1:5c:63:b9:81:19:
76:db:00:f8:55:c7:db:70:10:df:d2:8a:18:da:60:
68:7e:a3:f4:57:fe:51:7b:78:d1:53:9b:57:25:16:
11:1e:33:5a:51:5e:c4:c2:fa:b6:fc:44:d8:1e:0b:
96:9e:61:3b:98:ef:3c:1a:99:50:a7:8a:49:a9:08:
62:0e:e8:3e:84:94:78:a8:30:96:c3:54:a9:3f:28:
f5:23:99:61:6e:04:2b:33:94:ed:9e:5a:e1:e1:8a:
a8:ad:72:d8:74:63:84:9d:33:c7:4a:bb:c4:26:12:
3f:37:28:88:4b:2c:b8:c1:93:70:11:16:c4:08:c5:
56:cd:3a:8a:38:2e:38:b3:f9:80:3d:39:6a:50:47:
02:87:8a:24:c4:ed:89:ec:99:87:59:26:28:18:d3:
ac:4c:a6:c2:40:96:26:87:6c:db:4e:d7:17:6d:7d:
77:4b:54:bf:54:fb:e0:c3:40:4c:07:71:da:4b:86:
83:33:94:66:0c:6b:87:b1:b8:74:cc:36:bd:d2:91:
2d:28:81:4b:b9:f6:d9:06:d8:06:a9:30:17:ff:54:
f1:e0:05:d5:e5:a1:16:43:7b:b3:0f:64:83:3f:9d:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:02:45:12:88:1C:9A:E1:1C:7F:77:B5:61:45:A0:08:0D:A3:84:7B
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/iQJFEogcmuEcf3e1YUWgCA2jhHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.249.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c6:4b:71:aa:8e:e0:ba:e4:5e:45:2e:8d:44:a0:b8:5d:cf:
f5:3e:99:a8:3f:ee:31:7e:d7:45:11:4b:c5:74:04:4e:a4:a4:
bf:00:c5:8d:d5:58:9a:b0:75:15:5a:e5:b4:a0:e1:87:f3:b2:
95:df:9b:56:e4:5d:8c:c8:44:db:a4:6f:1c:7d:6f:6c:30:25:
1e:15:ce:dc:43:f8:4a:45:ee:3a:fc:74:d7:d5:ae:91:6e:bd:
b6:95:b2:ef:ec:2e:a8:f7:30:07:42:75:51:0d:59:f0:be:34:
e6:0b:96:21:5a:34:1b:1d:11:b7:29:73:0c:fb:6d:5a:20:1c:
c3:ac:7e:7d:d3:52:6a:1e:56:c0:2f:04:d2:11:d8:95:d3:f9:
ac:b6:2b:3f:6c:ae:1c:86:ca:6c:18:4f:1d:53:96:e8:df:49:
b7:f1:df:46:e6:25:b5:52:9e:25:2f:e4:33:af:a1:b0:82:24:
ad:2a:67:85:4f:f3:8f:3b:7a:61:8e:91:83:c0:f4:13:93:f6:
3d:99:20:8b:62:1a:d2:25:20:38:c4:d8:d7:2d:9e:91:3d:87:
0f:74:1e:c5:1a:9e:40:5c:50:3a:7b:3f:08:68:1a:fc:1d:e5:
e2:df:8f:e4:ba:74:81:ab:aa:c6:db:ee:d1:99:c0:4c:fc:10:
81:79:2d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:01 2026 by rpki-client