Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Q62mCKHhEbHG18o5QObD0I_JlIg.roa
File: Q62mCKHhEbHG18o5QObD0I_JlIg.roa (raw, json)
Hash identifier: UHmwxA41BQY27W1qQmrdAb6O19Ft6ewx2Mzzm9gzC+w=
Subject key identifier: 43:AD:A6:08:A1:E1:11:B1:C6:D7:CA:39:40:E6:C3:D0:8F:C9:94:88
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A145BE7E2E50BFF7881247D510B0742CDE
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Q62mCKHhEbHG18o5QObD0I_JlIg.roa
Signing time: Fri 16 Oct 2026 17:24:34 +0000
ROA not before: Fri 16 Oct 2026 17:24:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198130
IP address blocks: 200.163.82.0/24 maxlen: 24
200.163.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:be:7e:2e:50:bf:f7:88:12:47:d5:10:b0:74:2c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Oct 16 17:24:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43ada608a1e111b1c6d7ca3940e6c3d08fc99488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:2f:f2:38:ec:20:5e:da:49:3a:f9:87:3f:
c4:a5:c4:96:e0:67:d9:93:fa:69:86:ad:2e:d6:8d:
6e:ba:fe:2b:ec:43:2c:5b:51:ec:40:45:60:04:43:
c9:4f:20:6f:32:62:a8:e3:7e:49:95:fe:8d:e2:2c:
f9:ba:f8:ad:1e:aa:47:53:51:52:c3:ff:10:0d:7d:
9c:3a:ef:fc:be:50:f7:17:eb:7a:7d:6e:a7:44:14:
b9:77:01:fa:bb:7a:1e:cd:16:44:20:81:e1:08:21:
cf:34:b6:e5:9a:b1:bd:f3:21:e2:19:72:04:44:15:
08:bd:0c:2c:83:5d:dc:fc:32:89:f4:92:61:6e:5d:
0f:01:f6:06:e5:3a:f3:6c:64:cc:a4:93:26:5b:95:
0b:66:3c:ac:6d:d5:a8:20:2b:62:12:f0:49:15:6b:
5d:58:b6:18:d5:1a:0e:7e:23:ff:33:e3:ed:35:da:
54:dc:fa:92:23:49:df:c8:31:d7:7a:58:9a:b6:ee:
ad:d6:ee:dc:5c:10:b0:91:2d:a4:8a:2d:1a:71:25:
ed:72:ac:ff:34:0b:1b:f5:1d:67:bb:72:af:15:9c:
47:ad:40:8e:fe:d6:3c:31:29:09:6e:d1:e4:50:d6:
b6:2b:e7:8a:5f:7f:50:4d:ff:94:55:b6:16:e1:19:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AD:A6:08:A1:E1:11:B1:C6:D7:CA:39:40:E6:C3:D0:8F:C9:94:88
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Q62mCKHhEbHG18o5QObD0I_JlIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.163.82.0/24
200.163.86.0/24
Signature Algorithm: sha256WithRSAEncryption
38:47:21:ab:df:8a:fd:2f:f5:02:9e:0c:9e:d0:31:cf:14:99:
89:57:1d:ac:d6:bc:07:84:4e:27:5a:90:a8:28:ec:4e:1d:80:
59:7e:3e:6b:fe:f1:2b:2e:e4:f6:2a:a7:80:9f:13:79:d0:87:
0d:ed:e6:af:42:f7:8d:7c:a7:22:22:b1:e4:da:2a:ab:ef:2f:
ca:d4:61:e3:b5:17:14:64:03:e5:41:b7:d5:a2:64:78:b2:ec:
ed:f7:9a:b5:82:76:65:b2:e6:8e:12:9b:de:db:89:41:4a:f9:
60:df:08:fd:c2:ae:23:e7:c4:3e:6e:53:8c:d3:5d:37:86:a9:
58:a4:67:1d:b7:d0:02:d0:19:ae:ec:7e:29:10:cc:c2:1c:29:
89:d5:2b:73:c4:78:7d:56:b2:f6:05:e8:f9:09:cf:6f:92:b3:
c7:74:25:42:a3:48:7e:9d:d2:68:52:98:90:01:71:7a:80:6d:
ca:53:3e:5a:9d:d0:d3:d0:3d:f3:f2:a6:74:08:fe:9c:9d:90:
38:fb:6d:83:f1:1d:29:5e:ac:67:15:8c:00:01:d9:d7:1d:89:
79:eb:1e:29:47:7b:57:1c:72:83:68:ef:39:09:9e:e3:ca:6f:
21:eb:04:20:29:47:92:94:2b:82:c6:5c:0a:a3:9b:54:bc:40:
4d:3e:07:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 05:02:02 2026 by rpki-client