Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1TCFwnAu9Bd618Yxt_hrk2Dmqs8.roa
File: 1TCFwnAu9Bd618Yxt_hrk2Dmqs8.roa (raw, json)
Hash identifier: J8LDyB6g4nIb/S7rHW7Ee7sl+MoxAI303p3G2FqnO0Q=
Subject key identifier: D5:30:85:C2:70:2E:F4:17:7A:D7:C6:31:B7:F8:6B:93:60:E6:AA:CF
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01A018102B529EF448FC5BACCF707DE03B22
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1TCFwnAu9Bd618Yxt_hrk2Dmqs8.roa
Signing time: Wed 19 Aug 2026 03:28:27 +0000
ROA not before: Wed 19 Aug 2026 03:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400072
IP address blocks: 62.164.224.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:10:2b:52:9e:f4:48:fc:5b:ac:cf:70:7d:e0:3b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 19 03:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d53085c2702ef4177ad7c631b7f86b9360e6aacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:37:c2:8a:3a:ff:7b:cd:4e:91:c9:bd:e6:
b4:77:b5:b2:47:90:50:52:9b:43:8e:e2:4e:bb:f6:
3c:af:be:f0:4e:85:d8:4f:78:cd:fb:87:c1:33:cd:
36:88:04:e0:92:f6:ac:ea:16:d7:cf:3b:9a:71:ea:
2a:25:e2:90:66:24:20:6d:e2:b8:cb:34:5d:03:56:
8d:d2:5c:e7:da:1f:7e:2e:e9:59:16:60:95:4e:c8:
c2:92:af:eb:16:88:96:10:e6:68:78:0c:e0:64:36:
6d:5e:0d:3b:72:2d:8f:50:01:ff:88:29:8b:f1:c5:
7f:fe:a5:73:06:10:b8:06:51:54:a1:91:2d:18:46:
0a:40:54:99:53:7d:cf:e5:e1:d7:9d:39:80:2f:9c:
ff:24:53:d4:cc:3e:1b:56:c7:05:ae:d0:dc:e7:8b:
fb:be:84:87:b6:5b:6f:82:fe:a0:d5:c0:5a:bc:3b:
72:65:42:e9:d5:3a:d2:8b:1f:9f:2a:bc:c9:a0:90:
5a:d4:3b:82:d9:46:23:60:65:fe:55:c1:70:df:d0:
b7:36:d1:e0:41:79:f0:3f:ac:bf:dd:7a:02:5d:6c:
f7:45:d3:8e:ef:8e:31:7a:ee:96:d9:b8:c4:30:da:
f4:49:67:bf:65:0a:3d:63:ea:07:1a:6b:5e:b1:1a:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:30:85:C2:70:2E:F4:17:7A:D7:C6:31:B7:F8:6B:93:60:E6:AA:CF
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1TCFwnAu9Bd618Yxt_hrk2Dmqs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.224.0/19
Signature Algorithm: sha256WithRSAEncryption
19:28:63:0e:8d:0a:f5:6c:2a:0d:9d:d7:1b:df:01:d2:43:96:
b8:03:c4:1d:4b:6a:31:0a:44:81:c5:fc:fb:ec:dd:40:a3:04:
5e:ea:4d:a5:81:11:67:49:30:c6:c4:d1:8b:87:05:03:60:da:
da:e3:7e:b7:7f:a6:4c:3b:72:6c:ff:c0:bc:8f:a9:69:bd:c1:
1e:f3:cd:7d:74:36:18:a2:23:78:87:dc:a7:17:95:a6:87:cf:
20:87:be:a1:fd:03:f6:a8:fa:46:62:da:cc:4a:0c:35:65:3a:
bc:e6:43:56:10:fe:c9:52:e6:c8:3f:22:63:9f:9b:2f:86:e1:
91:11:73:74:cf:3a:24:4b:a4:d1:31:b9:c5:04:76:e2:13:38:
78:3b:11:f4:62:29:23:46:60:66:87:46:40:72:66:7a:95:f8:
10:43:9d:79:08:42:8c:f8:15:d2:30:e2:9e:2e:e6:1d:53:01:
e0:6a:fc:6d:75:8f:ca:da:dd:7c:2c:5b:dd:38:a3:74:b8:bf:
fc:bc:8d:d1:b2:57:93:27:d4:94:51:a2:78:e6:e2:18:1c:5f:
e1:34:75:48:51:c0:1d:a6:41:45:50:1a:9c:8f:2d:d8:ea:0f:
21:dd:40:68:d2:ce:b6:18:58:aa:dd:95:12:6b:44:29:e2:d1:
c5:d4:46:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 18:49:48 2026 by rpki-client