Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/y4ib_LgrxEdhHHtEW83XhEfkxAA.roa
File: y4ib_LgrxEdhHHtEW83XhEfkxAA.roa (raw, json)
Hash identifier: aJQKzXEaHtvyQ8mVh2ttdf6AWDHmUy9MG03EsOsN3TI=
Subject key identifier: CB:88:9B:FC:B8:2B:C4:47:61:1C:7B:44:5B:CD:D7:84:47:E4:C4:00
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F23689CB65F2F498A459134DEE2BECF60
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/y4ib_LgrxEdhHHtEW83XhEfkxAA.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202232
IP address blocks: 62.228.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9c:b6:5f:2f:49:8a:45:91:34:de:e2:be:cf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb889bfcb82bc447611c7b445bcdd78447e4c400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:2c:f1:ba:96:29:37:c3:b3:31:9e:5c:24:
e1:cc:7b:b2:de:06:5c:84:80:26:f2:df:9f:2e:48:
5a:c1:f7:65:d7:25:a4:ce:6e:6b:a4:13:75:8c:3d:
e9:62:8f:43:59:b4:38:0d:08:28:a4:40:11:5b:16:
cb:4d:56:ee:48:af:a2:ae:c7:5c:b8:54:49:84:7e:
5a:d6:3e:bd:c2:bf:a6:56:18:7b:4d:4b:d9:14:2a:
1b:3e:39:e4:9d:c2:4c:3f:3a:fd:b3:37:1a:05:61:
b8:29:e2:e7:f8:f0:d5:45:16:a3:cc:cc:a1:86:7c:
07:d2:43:64:37:92:40:e6:ce:32:7d:ed:60:8a:d0:
f0:4d:72:d3:4f:bf:60:35:1e:68:13:dc:84:8e:1b:
bd:af:c9:90:a8:fa:ba:0f:93:c1:76:59:d6:1c:7d:
5b:64:98:9e:e3:38:67:fd:ab:88:5c:b9:e1:0b:c3:
e1:21:39:80:35:34:1c:87:b1:40:ed:74:f7:12:83:
70:98:a3:9b:72:09:65:4b:2d:45:3b:e8:6f:5c:a7:
37:04:96:9d:86:29:eb:af:b5:e3:bc:80:30:ad:1b:
bc:09:b4:94:6f:3b:93:d1:38:f3:a3:b4:89:b7:6d:
82:38:f3:c5:00:60:d7:29:9b:ab:36:b4:96:dd:86:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:88:9B:FC:B8:2B:C4:47:61:1C:7B:44:5B:CD:D7:84:47:E4:C4:00
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/y4ib_LgrxEdhHHtEW83XhEfkxAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.250.0/24
Signature Algorithm: sha256WithRSAEncryption
79:93:5f:e0:5c:2c:50:75:56:7f:f1:61:21:9b:ab:22:17:4e:
1f:49:3e:c4:7c:01:ff:5b:62:b3:62:c8:6a:41:b6:b1:12:0f:
f6:1f:59:d9:91:12:21:4b:52:66:a9:33:a9:e9:1f:4b:d4:c8:
9e:2a:bb:19:e3:6e:a7:95:5e:2d:8b:9d:4a:83:13:17:bd:91:
f8:82:a4:5e:da:d1:7a:ae:bb:2d:2d:04:3b:98:82:3e:17:8e:
11:5a:1d:2b:23:31:90:4f:91:af:7e:24:f8:bd:c4:e0:52:ae:
3f:f4:f4:63:13:7b:a9:b3:e3:d9:d2:a9:8d:6f:ae:d3:58:c8:
17:fe:c3:00:9c:ce:45:8a:da:7d:d1:d0:62:a0:81:d2:0c:cd:
de:0a:8d:91:13:fb:8d:a8:96:9d:c4:b7:e0:ff:2b:34:52:39:
37:5b:15:fb:e3:40:14:2f:09:3a:67:f1:42:b3:1b:90:4b:a4:
ad:72:ab:ce:5d:fb:0d:21:0b:fb:42:de:98:7e:89:f1:8d:a1:
81:87:93:2f:bf:d1:17:af:f3:61:c0:30:20:ad:91:29:01:16:
b8:7c:9e:76:99:c8:68:79:bc:96:af:8b:0d:ad:7e:18:93:fc:
d8:cb:ad:51:25:c6:3c:28:85:a7:de:a9:da:df:d5:1b:07:54:
e5:ed:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:57:59 2026 by rpki-client