Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/uNIlA6ca-2CQnlOgm_khWGK_KeQ.roa
File: uNIlA6ca-2CQnlOgm_khWGK_KeQ.roa (raw, json)
Hash identifier: wR746BXfUg0EQqUZIqyYoo2UiBtxVdcw2McS7HbXvek=
Subject key identifier: B8:D2:25:03:A7:1A:FB:60:90:9E:53:A0:9B:F9:21:58:62:BF:29:E4
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F23689902199EF764B2DAB0B6909D9607
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/uNIlA6ca-2CQnlOgm_khWGK_KeQ.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199598
IP address blocks: 62.228.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:99:02:19:9e:f7:64:b2:da:b0:b6:90:9d:96:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8d22503a71afb60909e53a09bf9215862bf29e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:8c:f7:80:d2:56:a4:75:52:38:7b:06:90:
8f:75:86:0a:56:ee:a0:82:6b:c9:d4:31:07:31:27:
9b:e3:79:c3:cb:56:7e:86:d0:d8:b0:74:61:91:2a:
9a:fd:b8:89:1c:b2:df:59:a2:50:c8:1e:80:04:96:
20:09:9a:0c:ee:f2:5d:c5:a4:1d:62:01:b1:bd:37:
6f:b4:af:12:ba:a4:7a:46:89:a8:eb:d4:89:07:d1:
fd:73:c0:f8:b7:af:b8:05:6d:a6:17:58:b7:d0:b4:
a1:05:4d:0c:d3:0b:f4:8a:41:c7:21:71:17:da:36:
85:13:1e:c1:df:2b:4a:6e:04:c7:a9:a3:f8:7c:a1:
94:91:f5:d7:bd:29:a6:d7:00:97:6b:c1:b5:fa:cb:
0e:56:c7:d8:6c:10:b9:b5:e5:c2:a6:ce:48:98:4a:
d5:a5:90:ef:86:c5:09:da:86:15:75:11:b8:a1:08:
6f:bd:0b:aa:f5:57:fb:3d:e3:4a:00:8c:9d:70:c4:
41:9e:58:fc:50:1a:ef:f9:46:f3:18:54:98:df:ee:
17:d9:4b:66:f2:2d:b9:c0:7a:da:1a:1a:a2:83:69:
03:0d:c0:5d:a2:2d:49:71:4c:2c:d2:0c:09:d0:79:
49:d2:0b:f4:46:56:38:3d:3b:81:7b:00:37:1e:df:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D2:25:03:A7:1A:FB:60:90:9E:53:A0:9B:F9:21:58:62:BF:29:E4
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/uNIlA6ca-2CQnlOgm_khWGK_KeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:13:9f:94:db:bf:c4:10:10:1b:84:c9:2a:e2:1c:02:01:62:
f9:25:4b:98:d4:a1:09:d8:7b:4c:9f:6f:6a:36:73:da:e6:8b:
30:91:fb:01:29:49:45:40:00:aa:71:46:67:49:9b:4a:06:58:
00:dc:ce:1f:8b:53:6e:fe:6d:42:53:1e:99:7e:da:ca:74:b5:
80:d4:5d:ac:eb:2d:e1:13:ee:1d:b2:fa:a6:24:39:d7:84:33:
df:4b:b5:e6:b5:8e:33:a1:68:1a:ea:c9:83:c2:17:5f:ce:9c:
84:94:00:d5:0f:ce:88:a9:32:c4:a6:12:2a:2b:cc:e1:e7:c8:
f8:a3:57:c7:95:e8:09:b7:24:00:6d:21:69:c5:af:86:39:ed:
6b:0e:95:9e:ce:07:bd:6e:ed:74:f7:a2:83:9b:54:a8:9e:63:
70:b6:fd:99:23:2d:11:5d:0b:e8:51:b2:23:bd:27:9d:ac:58:
fc:f9:22:ca:28:67:0b:fe:67:b1:e2:a2:07:fa:bd:70:98:35:
63:d2:8b:3a:35:73:57:43:ae:eb:cd:75:54:df:0d:5a:5b:58:
84:3a:01:ce:29:94:0f:2b:cc:c7:54:6e:68:ed:41:76:e1:d1:
00:25:3b:d1:cc:10:55:af:67:d7:1c:fd:97:3f:0e:3e:c1:7e:
a3:4a:92:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:29 2026 by rpki-client