Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/pyKDaObepnnTMaR3rq2Q59TpNcg.roa
File: pyKDaObepnnTMaR3rq2Q59TpNcg.roa (raw, json)
Hash identifier: zk/m77Vze3pEZGmWk0C+TDK3TCT3ImHxAqVzukqevdY=
Subject key identifier: A7:22:83:68:E6:DE:A6:79:D3:31:A4:77:AE:AD:90:E7:D4:E9:35:C8
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F23689F4E0B8E23CBF39E5644BECC6C4D
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/pyKDaObepnnTMaR3rq2Q59TpNcg.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204592
IP address blocks: 62.228.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9f:4e:0b:8e:23:cb:f3:9e:56:44:be:cc:6c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7228368e6dea679d331a477aead90e7d4e935c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:34:d4:c9:a4:de:76:89:12:66:7d:91:89:
5d:ab:19:00:9d:5a:20:5f:45:68:cf:81:27:09:c9:
2a:5b:7b:e0:25:aa:e2:b3:aa:10:3d:2d:6f:e2:4c:
0c:f5:c6:f4:d2:b5:90:dc:2c:6f:fa:77:c2:3d:21:
8c:a7:5c:55:ad:d4:a5:c6:bc:1a:1f:1e:65:00:89:
cd:b5:35:7c:9c:99:4a:04:af:81:22:b0:33:af:29:
d2:b3:79:63:7f:21:29:e9:43:5b:c8:05:dd:a1:9a:
74:ce:52:50:2a:e4:4c:eb:ce:fb:0d:e2:db:a0:c5:
14:76:49:d0:fe:4b:8f:9c:27:1b:a3:3d:c3:e0:a5:
48:1d:1a:f0:63:bb:e9:d5:be:2c:73:bf:2e:67:a9:
d7:24:c2:15:03:53:f3:27:18:63:93:76:68:d4:bf:
61:49:a8:e5:f1:4b:9a:bb:dd:db:74:dd:1d:8e:ae:
4d:6f:4c:0d:2c:e2:40:09:4b:63:16:38:db:26:c9:
31:79:6d:cf:ce:99:74:29:03:6e:13:85:15:c3:ad:
78:d2:02:5f:d8:9c:19:01:3b:c6:b9:a3:dd:01:4a:
93:fe:59:69:58:c1:b9:5d:5f:e3:b7:fc:c1:6b:a8:
8c:78:e6:77:32:5c:b1:1e:d4:30:38:fb:c5:66:7e:
b8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:22:83:68:E6:DE:A6:79:D3:31:A4:77:AE:AD:90:E7:D4:E9:35:C8
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/pyKDaObepnnTMaR3rq2Q59TpNcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.244.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:23:91:14:37:b3:6e:d8:5d:8f:a0:be:ae:7c:c8:a7:83:4e:
62:3f:22:86:ad:e9:97:57:71:7b:9f:ef:a3:22:b5:b7:b7:e9:
30:41:9f:1d:57:84:a9:63:82:2e:ed:02:de:e7:23:c0:c8:a5:
3b:38:63:16:d5:91:c0:bb:a6:bf:0d:2b:a9:27:43:b4:8c:7b:
e5:b5:c7:85:aa:f9:80:69:c6:c6:7e:75:27:2d:c7:9c:84:56:
b9:e5:76:f6:86:6f:d5:0f:81:3c:11:06:0b:c3:2c:5c:aa:12:
31:f7:d7:0a:db:e1:a5:64:e1:38:93:a3:41:dc:dd:4a:8e:f5:
85:07:71:82:1f:98:72:bc:e3:dd:65:bb:3b:15:97:14:ab:c8:
8b:33:79:b9:1a:bb:6f:3d:5a:a3:7d:ad:01:1c:ed:25:80:70:
c5:ff:31:04:86:3d:fb:f5:ae:8c:67:58:16:80:cc:72:eb:54:
32:94:4e:9a:db:4e:f7:79:6c:18:5a:bd:f7:4f:b0:4a:10:3f:
3b:86:e4:c9:e0:3b:74:79:29:19:90:6a:79:b7:3e:1a:7d:f8:
9f:84:47:f6:a7:ff:b4:97:e9:e2:38:f3:ec:8b:cf:72:ac:08:
85:36:0a:a6:21:95:75:79:e3:34:be:d1:f3:e7:8a:64:b2:22:
16:ed:8e:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaJ9OC44jy/OeVkS+zGxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmU0Nzk0YWZjM2EyYmEyNWQyNTJhODU3MzQ3ZWQ0ZWVh
ZTZiNDAwHhcNMjYwNzAyMTUxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzIyODM2OGU2ZGVhNjc5ZDMzMWE0NzdhZWFkOTBlN2Q0ZTkzNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgM01Mmk3naJEmZ9kYldqxkAnVog
X0Voz4EnCckqW3vgJaris6oQPS1v4kwM9cb00rWQ3Cxv+nfCPSGMp1xVrdSlxrwa
Hx5lAInNtTV8nJlKBK+BIrAzrynSs3ljfyEp6UNbyAXdoZp0zlJQKuRM6877DeLb
oMUUdknQ/kuPnCcboz3D4KVIHRrwY7vp1b4sc78uZ6nXJMIVA1PzJxhjk3Zo1L9h
Sajl8Uuau93bdN0djq5Nb0wNLOJACUtjFjjbJskxeW3Pzpl0KQNuE4UVw6140gJf
2JwZATvGuaPdAUqT/llpWMG5XV/jt/zBa6iMeOZ3MlyxHtQwOPvFZn64oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKcig2jm3qZ50zGkd66tkOfU6TXIMB8GA1UdIwQY
MBaAFNZuR5Svw6K6JdJSqFc0ftTurmtAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW01SGxLX0Rvcm9sMGxLb1Z6Ui0xTzZ1YTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvcHlLRGFPYmVwbm5UTWFSM3JxMlE1OVRwTmNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMW01SGxLX0Rvcm9sMGxLb1Z6Ui0xTzZ1YTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPuT0MA0G
CSqGSIb3DQEBCwUAA4IBAQCeI5EUN7Nu2F2PoL6ufMing05iPyKGremXV3F7n++j
IrW3t+kwQZ8dV4SpY4Iu7QLe5yPAyKU7OGMW1ZHAu6a/DSupJ0O0jHvltceFqvmA
acbGfnUnLcechFa55Xb2hm/VD4E8EQYLwyxcqhIx99cK2+GlZOE4k6NB3N1KjvWF
B3GCH5hyvOPdZbs7FZcUq8iLM3m5GrtvPVqjfa0BHO0lgHDF/zEEhj379a6MZ1gW
gMxy61QylE6a2073eWwYWr33T7BKED87huTJ4Dt0eSkZkGp5tz4affifhEf2p/+0
l+niOPPsi89yrAiFNgqmIZV1eeM0vtHz54pksiIW7Y6F
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:02 2026 by rpki-client