Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/oN_pPwXKOTUMfYXf5zeVnZCKf74.roa
File: oN_pPwXKOTUMfYXf5zeVnZCKf74.roa (raw, json)
Hash identifier: v0FcXP474/zHfQ3kWoJcFKL7bYfYjlBrrhHk0VpC5nQ=
Subject key identifier: A0:DF:E9:3F:05:CA:39:35:0C:7D:85:DF:E7:37:95:9D:90:8A:7F:BE
Certificate issuer: /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial: 019FE39BD34E9B6F9675E4F9D1EE4B7732D0
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/oN_pPwXKOTUMfYXf5zeVnZCKf74.roa
Signing time: Sat 08 Aug 2026 23:01:07 +0000
ROA not before: Sat 08 Aug 2026 23:01:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 67.63.57.0/24 maxlen: 24
67.63.59.0/24 maxlen: 24
67.63.60.0/24 maxlen: 24
67.63.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e3:9b:d3:4e:9b:6f:96:75:e4:f9:d1:ee:4b:77:32:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
Validity
Not Before: Aug 8 23:01:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0dfe93f05ca39350c7d85dfe737959d908a7fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:34:17:37:e5:63:98:54:da:ca:5d:ed:c4:
3e:11:71:02:09:cd:ea:77:d1:29:b2:37:a0:51:8f:
4b:79:2f:26:c9:af:61:33:8d:5d:8c:ba:d6:57:d9:
09:ae:e6:5c:f8:89:1a:95:ed:22:1e:04:d6:87:3f:
40:9f:33:76:6e:60:70:9a:ad:31:d9:7c:bd:5b:37:
90:f6:de:e2:83:88:1f:54:e5:12:5d:d7:99:b9:42:
f5:ce:3e:b5:9c:59:58:8d:a9:5e:54:be:08:67:68:
ff:a7:a0:57:4a:df:e3:69:5b:f3:df:02:e8:c2:b6:
d2:ed:f5:11:46:72:ed:de:b3:9f:c5:e6:b4:95:7d:
a1:9d:35:14:b6:6c:0b:41:c2:0d:0f:4e:44:5d:f7:
40:09:b7:fb:11:3c:7e:8e:8f:2c:8d:1e:2f:2d:82:
db:ee:c6:fb:fb:25:8b:9f:3d:30:d0:f3:b1:94:ab:
4f:34:5a:fe:ab:b4:de:16:ce:a1:b0:63:95:de:79:
8d:7c:4f:ae:3c:ec:76:6d:21:d7:7e:24:36:22:da:
6f:b1:1b:dd:d3:eb:a1:22:13:4e:f6:b5:26:a9:05:
74:e1:ee:e3:37:e7:06:2e:2f:3c:87:7e:2c:e2:7f:
6f:07:5e:7d:82:4d:6d:79:98:d2:97:bf:f9:73:50:
fd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DF:E9:3F:05:CA:39:35:0C:7D:85:DF:E7:37:95:9D:90:8A:7F:BE
X509v3 Authority Key Identifier:
keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/oN_pPwXKOTUMfYXf5zeVnZCKf74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.63.57.0/24
67.63.59.0-67.63.60.255
67.63.62.0/24
Signature Algorithm: sha256WithRSAEncryption
19:23:e1:86:d8:d6:79:c7:06:5d:f5:51:f0:be:ae:66:90:a0:
08:40:ac:c0:ad:16:3f:f9:a7:56:44:b3:5a:5a:93:17:90:9d:
2a:94:2b:df:a1:b5:20:d9:5f:21:5f:28:68:ab:69:b2:33:f7:
e1:04:99:22:45:61:1e:06:49:03:b1:e7:e5:23:ed:57:d0:a0:
2c:03:04:41:fc:96:21:77:bf:b5:dc:7f:c7:4f:f3:91:df:c5:
b7:7c:b3:87:3a:a1:92:0e:23:74:f9:7d:6e:b0:cf:0a:d8:16:
59:51:28:8b:6b:d3:5f:7f:f5:e8:5f:bd:ee:61:f9:f4:b6:8d:
78:e2:cd:25:fc:d5:b7:58:c4:93:24:b5:94:9b:73:c2:4f:87:
9a:e3:1a:25:ec:6b:15:88:93:1e:ea:8a:2c:d4:83:7a:32:b7:
3e:09:84:c2:1c:6f:31:fb:35:65:54:5d:97:63:5c:cb:79:63:
8a:83:36:df:41:19:e0:34:6e:af:b5:be:a3:c3:5f:83:d1:ca:
af:90:31:07:cc:e9:07:63:7a:59:47:cb:d1:33:d4:76:6e:a1:
42:3d:64:55:1e:5f:da:b0:3a:9d:4a:31:4c:17:65:a9:84:2e:
4e:a9:5f:24:c8:bd:33:be:d0:c5:bd:12:23:20:b6:8e:a6:e9:
a1:a5:52:1f
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ/jm9NOm2+WdeT50e5LdzLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmUyMTcwYTdiY2JlYzMxMDE1NGYyYmNlOTk4MzNmZWMy
ODAxZmIwHhcNMjYwODA4MjMwMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGRmZTkzZjA1Y2EzOTM1MGM3ZDg1ZGZlNzM3OTU5ZDkwOGE3ZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttI0FzflY5hU2spd7cQ+EXECCc3q
d9EpsjegUY9LeS8mya9hM41djLrWV9kJruZc+Ikale0iHgTWhz9AnzN2bmBwmq0x
2Xy9WzeQ9t7ig4gfVOUSXdeZuUL1zj61nFlYjaleVL4IZ2j/p6BXSt/jaVvz3wLo
wrbS7fURRnLt3rOfxea0lX2hnTUUtmwLQcIND05EXfdACbf7ETx+jo8sjR4vLYLb
7sb7+yWLnz0w0POxlKtPNFr+q7TeFs6hsGOV3nmNfE+uPOx2bSHXfiQ2ItpvsRvd
0+uhIhNO9rUmqQV04e7jN+cGLi88h34s4n9vB159gk1teZjSl7/5c1D9lwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKDf6T8Fyjk1DH2F3+c3lZ2Qin++MB8GA1UdIwQY
MBaAFFguIXCnvL7DEBVPK86Zgz/sKAH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTct
YjJmZDliZjA5N2Y4LzEvb05fcFB3WEtPVFVNZllYZjV6ZVZuWkNLZjc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTctYjJmZDliZjA5N2Y4
LzEvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAQz85MAwD
BABDPzsDBABDPzwDBABDPz4wDQYJKoZIhvcNAQELBQADggEBABkj4YbY1nnHBl31
UfC+rmaQoAhArMCtFj/5p1ZEs1pakxeQnSqUK9+htSDZXyFfKGirabIz9+EEmSJF
YR4GSQOx5+Uj7VfQoCwDBEH8liF3v7Xcf8dP85Hfxbd8s4c6oZIOI3T5fW6wzwrY
FllRKItr019/9ehfve5h+fS2jXjizSX81bdYxJMktZSbc8JPh5rjGiXsaxWIkx7q
iizUg3oytz4JhMIcbzH7NWVUXZdjXMt5Y4qDNt9BGeA0bq+1vqPDX4PRyq+QMQfM
6QdjellHy9Ez1HZuoUI9ZFUeX9qwOp1KMUwXZamELk6pXyTIvTO+0MW9EiMgto6m
6aGlUh8=
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:28:43 2026 by rpki-client