Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/8d6xXk1vEJlOmHGXhwKrF5m6GFc.roa
File: 8d6xXk1vEJlOmHGXhwKrF5m6GFc.roa (raw, json)
Hash identifier: hIwaksOJP0zxQbZYSD2p0uscCDCl37ZQQd1k8/2OOCo=
Subject key identifier: F1:DE:B1:5E:4D:6F:10:99:4E:98:71:97:87:02:AB:17:99:BA:18:57
Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial: 019F2369078EFAC76A2726A60C69FFCED474
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/8d6xXk1vEJlOmHGXhwKrF5m6GFc.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 62.3.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:07:8e:fa:c7:6a:27:26:a6:0c:69:ff:ce:d4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1deb15e4d6f10994e9871978702ab1799ba1857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:22:ad:3e:48:ca:e7:1a:76:a3:1d:18:9a:
de:d8:00:67:e2:98:3a:03:63:02:fe:2c:cb:a3:07:
46:76:49:04:7f:9a:9b:42:f9:ff:12:9b:26:ab:c5:
46:97:38:f9:82:24:2f:28:a6:a3:57:50:3b:60:f6:
af:4b:fb:9d:8a:9f:90:be:1e:b5:10:37:24:f1:7a:
52:47:26:74:80:a6:58:9c:45:03:ee:c2:8d:1a:fc:
22:dd:cd:d9:00:36:cf:df:97:9f:cd:36:24:b9:e3:
da:02:cf:c2:f1:8b:66:a7:f1:91:6d:e1:c5:2e:a4:
28:3b:e1:82:5a:93:ef:f5:c7:b0:7f:4c:5b:b2:b1:
49:13:c8:c0:68:59:6c:c1:db:f7:3d:25:93:52:e7:
07:e2:4b:d2:ab:f5:04:e8:e7:fd:40:bf:9d:80:07:
02:a1:34:12:30:84:52:d7:10:9a:3c:78:e1:3b:5f:
a3:64:ba:b7:73:34:56:84:5b:66:fc:92:a2:c9:82:
99:cb:85:a2:fc:7f:0f:38:38:73:b9:8a:c8:3a:a0:
2e:6e:d0:72:b7:17:5b:6d:8b:0e:b0:ed:6c:7e:df:
85:00:17:97:f4:0c:88:e4:fa:60:30:21:25:b5:6c:
45:1c:a6:d1:ea:0f:e0:58:15:52:43:ae:c2:e5:c8:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DE:B1:5E:4D:6F:10:99:4E:98:71:97:87:02:AB:17:99:BA:18:57
X509v3 Authority Key Identifier:
keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/8d6xXk1vEJlOmHGXhwKrF5m6GFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.54.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d9:cb:14:16:5d:81:4b:d9:a2:8b:5f:41:e7:ef:aa:60:3e:
25:a9:81:33:ec:d7:10:a6:ba:56:f1:6c:bd:87:7a:11:19:81:
50:26:ff:38:03:8b:e2:73:4d:ea:07:8c:aa:97:07:6f:66:a8:
c2:c4:d5:90:d3:59:78:ff:bc:50:c4:3f:73:b8:77:ad:06:f8:
49:80:e8:c9:a6:56:bc:22:12:53:bb:e0:42:8f:0b:f2:fa:bf:
3e:4b:7b:1c:55:a9:41:e0:78:6c:ac:e6:36:82:87:db:35:7f:
65:85:ce:7f:8e:00:bd:6b:be:38:c4:8c:7f:79:ae:24:d6:f6:
9b:d5:c8:be:11:f2:f5:ff:01:3b:cd:23:90:dc:3d:41:22:67:
81:e1:eb:ac:ad:94:6f:70:79:7d:e5:95:d9:98:b0:03:f0:a4:
a7:a8:30:0d:bf:71:73:cd:b3:a6:94:4b:b6:82:ac:3d:d1:ac:
a5:ae:9e:c1:b2:3e:5f:73:58:6a:f6:16:0f:71:21:fe:33:0d:
d6:2b:c3:4f:33:6a:23:59:2c:bf:36:bf:90:6f:1b:64:c1:3e:
ea:f8:37:54:26:73:8c:2e:28:c4:0c:59:8a:6f:c6:87:b7:47:
2a:1d:a9:c2:76:1c:8b:1f:a1:e1:23:d6:b4:59:e7:b3:f4:ab:
57:68:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:22:03 2026 by rpki-client