Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/18KME0HeKFuHrNvIY68L9Bcfs70.roa
File: 18KME0HeKFuHrNvIY68L9Bcfs70.roa (raw, json)
Hash identifier: AyshvCVXKhmVa+h9WFDV4WjBTA/LHbxYy4vbGMWCxIA=
Subject key identifier: D7:C2:8C:13:41:DE:28:5B:87:AC:DB:C8:63:AF:0B:F4:17:1F:B3:BD
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A131787086C847062E526991685C478B41
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/18KME0HeKFuHrNvIY68L9Bcfs70.roa
Signing time: Mon 12 Oct 2026 18:55:39 +0000
ROA not before: Mon 12 Oct 2026 18:55:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53363
IP address blocks: 171.22.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:78:70:86:c8:47:06:2e:52:69:91:68:5c:47:8b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 12 18:55:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7c28c1341de285b87acdbc863af0bf4171fb3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b0:bc:49:12:9b:fd:54:2a:eb:48:46:69:95:
f2:89:97:bc:c6:af:94:8e:57:a4:66:b6:f6:3e:0d:
7d:5d:7b:b8:88:6b:2d:06:f1:3f:4b:45:2e:90:33:
b6:21:d7:d3:af:d7:81:84:b7:99:f9:88:48:7d:18:
a2:61:ea:4e:ef:ae:f2:b6:47:30:e7:c9:8f:35:93:
5e:25:f8:d4:4b:d2:7b:65:97:28:57:0b:6c:08:64:
fa:b6:41:bf:d9:3b:d3:1d:5a:f1:27:24:02:44:34:
2e:17:6a:96:b9:c9:7e:eb:35:9d:b3:73:fc:b7:c4:
a6:25:d6:97:54:f0:58:4a:1f:d2:59:f0:7b:ed:16:
23:45:77:24:b5:19:cd:2c:0f:f4:d9:ec:b9:94:41:
a3:21:9d:6e:9e:25:ea:95:2e:2c:0b:ed:cd:b1:ed:
a5:f6:f0:57:1b:e4:93:c2:9a:ba:2b:c6:fb:10:b6:
f2:d2:76:3f:52:64:4c:58:02:d4:40:1b:0e:9d:ce:
ad:4d:d9:2a:2e:77:09:50:ec:cb:eb:52:8c:c3:c8:
72:11:6d:8a:10:fd:cc:9c:33:dc:84:ad:5e:50:40:
2b:5d:2f:e1:a4:bb:c2:f8:65:3e:3e:c9:21:67:b2:
22:45:43:58:ef:44:7c:f8:7a:d6:96:0f:b6:ad:9e:
08:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C2:8C:13:41:DE:28:5B:87:AC:DB:C8:63:AF:0B:F4:17:1F:B3:BD
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/18KME0HeKFuHrNvIY68L9Bcfs70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.122.0/24
Signature Algorithm: sha256WithRSAEncryption
37:9e:c8:3f:14:69:a1:db:97:4b:ef:df:10:e1:71:3f:f4:21:
9a:49:86:00:95:36:8e:64:07:5d:7d:b8:10:7b:5a:4e:8c:dc:
90:43:af:8e:8b:e5:94:ec:cf:a4:21:0f:9e:18:29:e5:9e:88:
ff:a4:b1:a6:ac:44:2b:20:53:92:40:6a:8a:b2:90:2a:ee:0f:
4b:d7:83:1c:a6:f4:e4:78:cf:a4:63:79:56:50:f6:db:38:7d:
5d:80:0b:ab:fd:34:54:42:a6:62:8b:3b:46:39:02:35:3b:21:
8f:cc:e6:03:6a:a3:e6:0e:b0:f0:44:39:a7:3b:8f:04:39:b4:
08:f5:80:5c:d0:7d:d1:5b:33:51:9b:b6:27:3c:ef:b0:f2:f0:
a2:8a:07:3e:ee:b6:24:52:89:65:eb:80:09:38:d9:07:b9:44:
1a:b2:24:31:aa:b8:2d:df:85:57:fe:0e:b7:dd:c4:18:2f:21:
67:c8:c3:51:4a:59:09:a4:bb:cb:12:8a:e8:f6:5d:84:8b:45:
98:99:ef:dd:8a:3b:f8:c7:91:59:67:d5:0d:c2:9d:58:e1:83:
28:95:48:fa:26:3c:0f:7a:4f:13:9d:9b:75:82:3a:be:fa:cc:
04:eb:04:5e:3f:6e:d3:69:bb:f8:78:69:aa:24:4a:0e:dc:3e:
ba:ee:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 22:56:47 2026 by rpki-client