Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/sGKzNgSEW9ZR2UWfPjFfx7Y5i8s.roa
File: sGKzNgSEW9ZR2UWfPjFfx7Y5i8s.roa (raw, json)
Hash identifier: 1FJzlm32YyhJ9vJsD7WZN63skJx2wuGv8LsAMhrOWKg=
Subject key identifier: B0:62:B3:36:04:84:5B:D6:51:D9:45:9F:3E:31:5F:C7:B6:39:8B:CB
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F2368A043DF81C85C46B51FADB11354BB
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/sGKzNgSEW9ZR2UWfPjFfx7Y5i8s.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207971
IP address blocks: 62.228.246.0/24 maxlen: 24
62.228.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a0:43:df:81:c8:5c:46:b5:1f:ad:b1:13:54:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b062b33604845bd651d9459f3e315fc7b6398bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:96:70:fd:64:7a:83:17:c1:52:13:ad:5a:
5d:7a:83:81:3d:70:c5:e0:64:4a:27:03:91:99:22:
d1:83:1c:9b:9a:70:87:c3:41:0a:1c:89:29:3a:5c:
f2:fc:c0:d4:65:2c:04:1b:10:c9:00:c2:33:30:17:
5e:4d:9b:b6:8a:13:66:f2:96:a8:e9:a9:70:04:e1:
2e:1e:40:cd:45:b2:65:89:c8:f3:90:d9:c5:5a:1b:
8a:25:80:f6:27:21:48:7d:94:26:73:6a:8e:d0:d9:
21:48:70:f8:bf:08:e2:7b:6d:03:2a:15:a5:a5:68:
a0:c9:3b:2b:23:97:05:30:08:96:47:d0:e2:0c:9d:
1e:bc:06:f3:f2:b3:1c:a8:ae:cc:11:f9:d4:79:f9:
40:9f:68:c0:88:83:0f:2c:54:7a:a0:1d:9f:29:18:
86:67:0f:15:fa:3e:89:1e:20:7c:07:ff:de:c6:46:
4c:c2:04:f3:48:77:09:a1:c4:47:75:82:f7:ce:6a:
0b:a2:e9:20:1c:5b:f3:ce:e5:74:fc:9f:00:9b:b1:
e5:6b:60:07:fd:69:8c:e3:be:cc:19:00:1a:8e:e4:
37:f8:1f:7a:3b:0b:9f:b5:1a:1f:e5:2c:2a:67:16:
14:38:3f:46:c6:a1:65:f2:46:b2:f6:43:00:14:b4:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:62:B3:36:04:84:5B:D6:51:D9:45:9F:3E:31:5F:C7:B6:39:8B:CB
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/sGKzNgSEW9ZR2UWfPjFfx7Y5i8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.246.0/23
Signature Algorithm: sha256WithRSAEncryption
34:63:ae:1b:81:87:de:d2:82:cf:cf:e9:56:24:1e:01:7c:73:
7f:3b:11:38:1d:a0:d2:6e:40:da:d8:08:bd:d9:7b:1e:37:f7:
7e:3c:c6:a1:5a:5d:6b:11:30:60:79:43:25:bd:6e:27:fe:6b:
09:cb:95:f3:90:4a:7e:b2:d2:46:46:89:8c:de:e1:eb:07:ef:
4f:de:c3:0a:95:78:23:7f:d2:c9:0d:26:14:f7:e6:3d:57:c2:
3d:2d:54:0e:6a:91:b5:73:20:98:69:87:6b:0e:d2:1d:47:45:
cb:a7:c0:51:19:b9:08:63:9d:a1:b7:cc:9c:cb:83:0f:cb:ef:
ba:03:fc:61:ec:0a:5b:5d:e1:3e:97:2a:2b:d8:85:52:2f:6a:
86:c4:2b:ad:11:12:87:cb:1c:f4:78:26:ea:3f:b3:84:4e:95:
92:24:12:6a:7e:9b:f9:cf:06:20:46:e4:14:e6:b0:27:b5:71:
93:c1:17:c3:2d:9f:f2:83:71:d7:ef:19:65:ea:9c:d3:ea:e7:
6b:30:79:94:75:bf:14:2e:2e:68:26:5b:31:f8:cf:4a:1d:8f:
24:28:94:d1:52:03:5b:ee:8b:a7:52:49:57:33:7c:86:0b:fb:
02:42:c9:9d:d8:b3:59:b7:9a:32:a5:e4:df:70:2c:85:60:df:
3d:6d:5c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:27 2026 by rpki-client