Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/xxI-hj6mHmiHl2OwN4j5ztBMH8U.roa
File: xxI-hj6mHmiHl2OwN4j5ztBMH8U.roa (raw, json)
Hash identifier: 1zAXiE+IF/aHyRDjomYAlxs9J+15UvpbWtlzl8GfuYE=
Subject key identifier: C7:12:3E:86:3E:A6:1E:68:87:97:63:B0:37:88:F9:CE:D0:4C:1F:C5
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019CD6C74ACC072546296CC39C845CD2C417
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/xxI-hj6mHmiHl2OwN4j5ztBMH8U.roa
Signing time: Tue 10 Mar 2026 08:05:10 +0000
ROA not before: Tue 10 Mar 2026 08:05:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213825
IP address blocks: 62.82.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d6:c7:4a:cc:07:25:46:29:6c:c3:9c:84:5c:d2:c4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Mar 10 08:05:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7123e863ea61e68879763b03788f9ced04c1fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:78:d6:62:2c:c9:1a:0d:f0:2c:a6:3d:ea:
6e:ac:59:69:14:54:12:1b:48:03:83:82:f3:a8:44:
f3:31:86:70:71:07:3d:fe:3a:33:f2:45:97:55:0b:
d4:83:7e:c8:d6:44:29:2a:a8:20:d9:3a:a4:62:38:
4b:24:ae:ff:54:49:ac:45:5d:47:26:10:d3:67:26:
dd:5a:b7:69:27:95:52:67:97:a9:b8:ea:37:64:1e:
b3:a7:eb:37:b3:8f:98:58:66:2e:3e:67:5c:f8:8b:
61:8b:e0:f4:43:23:8e:75:a1:d6:7d:2f:bc:a3:f1:
42:b3:5f:87:b9:f4:f0:5a:d3:59:ca:fb:5f:59:88:
ab:93:8d:38:a7:23:fc:06:dd:92:5c:06:e9:62:d6:
9d:93:71:99:97:6c:87:3e:17:a5:05:29:76:f1:20:
12:f9:28:0f:00:fa:dc:9a:24:f2:8f:f7:2d:83:e0:
7b:88:96:7b:3a:b8:55:6a:95:61:e6:35:f1:ed:7a:
e0:19:a5:83:c0:04:c2:44:c3:f3:59:83:63:d9:54:
a6:2e:89:fa:a6:4e:26:e4:a5:b9:25:32:55:d8:29:
bd:46:fc:d0:36:1c:7a:2d:47:64:6c:06:77:16:b8:
55:ea:3b:08:9c:a6:3c:8d:f3:15:ab:47:a5:d3:8a:
92:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:12:3E:86:3E:A6:1E:68:87:97:63:B0:37:88:F9:CE:D0:4C:1F:C5
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/xxI-hj6mHmiHl2OwN4j5ztBMH8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.82.48.0/24
Signature Algorithm: sha256WithRSAEncryption
43:cc:94:be:6d:b5:28:b9:b6:46:d3:ad:59:00:32:35:5e:8b:
e5:53:b5:2e:ac:57:4d:a4:1e:4f:ae:56:19:68:b5:56:2c:73:
50:b5:1b:2e:d2:f1:95:0d:51:75:ae:90:57:4a:d0:df:5b:8d:
c8:23:2e:7c:d4:2f:7b:13:4e:ad:49:20:22:fc:a1:f1:ee:b7:
17:d8:75:35:ad:de:6c:f7:f5:75:8b:fd:0e:37:ec:28:05:52:
90:09:4f:b3:97:c9:78:18:4d:fb:29:d0:95:4f:f8:56:e3:5d:
9f:0d:fa:49:da:53:41:5f:ff:60:cd:7d:ee:66:f5:93:9c:b0:
79:9e:bc:23:aa:8f:76:99:4e:8f:bc:cd:0b:fb:55:1a:37:d3:
7f:5b:c7:3c:f4:15:09:08:b2:a6:80:42:ed:44:7a:30:dc:62:
36:64:ce:2a:db:a9:19:23:13:1d:f0:6d:f7:26:d3:a9:9e:0c:
8e:ce:13:cf:94:d6:aa:73:8e:23:ab:50:5e:70:75:1f:fe:ca:
72:d3:97:79:e9:a4:53:6a:7e:37:c1:b3:d3:28:e2:3a:f1:87:
9b:ad:3b:10:9b:bf:22:c9:16:fb:9d:fd:7c:2f:17:54:92:3f:
0c:06:3b:36:e1:d5:a9:b3:c4:cb:71:e6:93:23:87:b1:34:33:
80:1d:3e:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzWx0rMByVGKWzDnIRc0sQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjYwMzEwMDgwNTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzEyM2U4NjNlYTYxZTY4ODc5NzYzYjAzNzg4ZjljZWQwNGMxZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyl41mIsyRoN8CymPepurFlpFFQS
G0gDg4LzqETzMYZwcQc9/joz8kWXVQvUg37I1kQpKqgg2TqkYjhLJK7/VEmsRV1H
JhDTZybdWrdpJ5VSZ5epuOo3ZB6zp+s3s4+YWGYuPmdc+Ithi+D0QyOOdaHWfS+8
o/FCs1+HufTwWtNZyvtfWYirk404pyP8Bt2SXAbpYtadk3GZl2yHPhelBSl28SAS
+SgPAPrcmiTyj/ctg+B7iJZ7OrhVapVh5jXx7XrgGaWDwATCRMPzWYNj2VSmLon6
pk4m5KW5JTJV2Cm9RvzQNhx6LUdkbAZ3FrhV6jsInKY8jfMVq0el04qSmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMcSPoY+ph5oh5djsDeI+c7QTB/FMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEveHhJLWhqNm1IbWlIbDJPd040ajV6dEJNSDhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlIwMA0G
CSqGSIb3DQEBCwUAA4IBAQBDzJS+bbUoubZG061ZADI1XovlU7UurFdNpB5PrlYZ
aLVWLHNQtRsu0vGVDVF1rpBXStDfW43IIy581C97E06tSSAi/KHx7rcX2HU1rd5s
9/V1i/0ON+woBVKQCU+zl8l4GE37KdCVT/hW412fDfpJ2lNBX/9gzX3uZvWTnLB5
nrwjqo92mU6PvM0L+1UaN9N/W8c89BUJCLKmgELtRHow3GI2ZM4q26kZIxMd8G33
JtOpngyOzhPPlNaqc44jq1BecHUf/spy05d56aRTan43wbPTKOI68YebrTsQm78i
yRb7nf18LxdUkj8MBjs24dWps8TLceaTI4exNDOAHT6J
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:34:23 2026 by rpki-client