Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/62PYuvVnVIlB7J47dbRPfuvIXhc.roa
File: 62PYuvVnVIlB7J47dbRPfuvIXhc.roa (raw, json)
Hash identifier: K4rSsZ9lXadQ3EdK1WKO011ZwHOOOQfp9tb2MMg+PUs=
Subject key identifier: EB:63:D8:BA:F5:67:54:89:41:EC:9E:3B:75:B4:4F:7E:EB:C8:5E:17
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019FB963D698A3B55370F89A2F218988AEAC
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/62PYuvVnVIlB7J47dbRPfuvIXhc.roa
Signing time: Fri 31 Jul 2026 18:15:55 +0000
ROA not before: Fri 31 Jul 2026 18:15:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219095
IP address blocks: 150.251.141.0/24 maxlen: 24
150.251.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:63:d6:98:a3:b5:53:70:f8:9a:2f:21:89:88:ae:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jul 31 18:15:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb63d8baf567548941ec9e3b75b44f7eebc85e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:a8:91:64:c6:08:32:81:7a:70:26:ec:b1:
1c:09:bb:7a:82:65:1e:1d:b1:35:14:55:aa:09:1b:
50:90:94:da:4f:7b:ba:42:8d:97:34:72:7f:de:85:
19:f6:ee:b4:4b:64:7c:cd:09:46:9d:dc:ed:79:66:
8b:a2:9e:48:36:54:ae:6a:be:cf:5b:8b:6f:4a:0e:
13:83:57:95:bb:48:a3:a9:3a:f3:09:5f:21:68:a3:
8f:f6:49:03:48:01:a8:79:c7:9a:72:91:9e:55:c6:
ed:be:83:f0:2b:ce:9b:b4:67:7b:ee:31:5f:a5:13:
34:81:4b:d7:c5:21:c1:02:e5:95:79:4a:9a:07:76:
c1:78:f5:77:92:98:84:92:0f:35:56:89:51:f1:fb:
23:ca:18:cf:76:5e:e5:c1:40:ef:c7:10:f2:ca:ea:
9d:b8:72:86:30:0b:a1:66:a6:bd:42:55:ce:c2:df:
87:3d:57:9b:a5:60:63:e0:f8:91:3e:16:13:9f:a1:
e0:d8:ed:6b:d0:bb:fa:48:21:b3:fe:2a:a8:f1:42:
a7:2d:eb:da:22:d3:33:51:a1:45:e3:7b:e2:45:45:
d4:13:f7:d9:8a:b1:e9:99:de:83:9e:b4:68:22:f3:
21:ca:b9:e3:41:06:c0:28:97:e7:27:30:74:b1:99:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:63:D8:BA:F5:67:54:89:41:EC:9E:3B:75:B4:4F:7E:EB:C8:5E:17
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/62PYuvVnVIlB7J47dbRPfuvIXhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.141.0/24
150.251.143.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5f:26:b3:6e:2d:8e:e7:9e:a9:01:2a:a6:1e:23:d6:5f:21:
4f:24:d3:98:f7:6c:5e:35:fa:2f:7f:9f:2d:c6:ef:80:88:0f:
dc:cd:9d:9d:98:ef:82:34:0b:8c:5a:16:7d:1d:de:ef:d3:df:
8c:4a:09:2c:f4:d2:e2:ee:ec:b4:2f:20:11:f7:8a:bd:cd:00:
cb:7d:dc:ae:24:9d:b8:89:95:c2:c9:d1:c1:e8:bd:3b:30:b1:
f4:88:2e:1e:85:68:fe:27:38:1b:f3:00:f8:d0:4a:80:52:03:
1f:6d:f1:fa:8c:95:d4:8c:35:78:a3:eb:80:b3:b3:28:e1:8e:
9d:a6:fb:ce:03:52:75:87:ab:01:34:b6:61:e2:9e:bf:7c:9c:
e2:df:87:3c:b1:7a:44:32:15:6c:61:57:b3:4c:d0:e8:3d:72:
f9:a4:2e:a1:66:00:2f:00:3e:6a:cb:ee:f1:2a:03:be:47:6e:
0c:9a:8d:16:02:ac:6b:b9:04:f8:ec:a8:18:1e:e1:09:63:92:
65:d8:7a:c2:b7:99:11:c0:58:a8:76:ad:96:9a:56:31:95:84:
09:b2:c0:38:a5:85:04:45:5d:82:fc:bc:61:c0:b9:9a:d5:97:
be:0f:30:18:15:5e:cc:1d:a3:5a:6b:4e:e8:0c:c7:d7:15:15:
f6:14:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:26 2026 by rpki-client