Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/dBSDP6Gc4F0vUJietrVIlYi8x5w.roa
File: dBSDP6Gc4F0vUJietrVIlYi8x5w.roa (raw, json)
Hash identifier: 4uu2kwh2x9bYdXpys7yyeAfZRrt8ENd/az4lWpFmo5I=
Subject key identifier: 74:14:83:3F:A1:9C:E0:5D:2F:50:98:9E:B6:B5:48:95:88:BC:C7:9C
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 01A0669B2D9FC01165C4F08C699E1DB48D11
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/dBSDP6Gc4F0vUJietrVIlYi8x5w.roa
Signing time: Thu 03 Sep 2026 09:30:40 +0000
ROA not before: Thu 03 Sep 2026 09:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205025
IP address blocks: 62.101.161.0/24 maxlen: 24
62.101.162.0/24 maxlen: 24
62.101.163.0/24 maxlen: 24
62.101.164.0/24 maxlen: 24
62.101.166.0/24 maxlen: 24
62.101.167.0/24 maxlen: 24
82.198.32.0/24 maxlen: 24
82.198.33.0/24 maxlen: 24
82.198.34.0/24 maxlen: 24
82.198.35.0/24 maxlen: 24
136.148.194.0/24 maxlen: 24
136.148.195.0/24 maxlen: 24
136.148.196.0/24 maxlen: 24
136.148.197.0/24 maxlen: 24
136.148.198.0/24 maxlen: 24
136.148.199.0/24 maxlen: 24
136.148.204.0/24 maxlen: 24
136.148.205.0/24 maxlen: 24
136.148.206.0/24 maxlen: 24
136.148.207.0/24 maxlen: 24
185.53.102.0/24 maxlen: 24
185.53.103.0/24 maxlen: 24
195.146.17.0/24 maxlen: 24
195.146.19.0/24 maxlen: 24
195.146.21.0/24 maxlen: 24
195.146.23.0/24 maxlen: 24
195.146.25.0/24 maxlen: 24
195.146.27.0/24 maxlen: 24
195.146.29.0/24 maxlen: 24
195.146.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:9b:2d:9f:c0:11:65:c4:f0:8c:69:9e:1d:b4:8d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Sep 3 09:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7414833fa19ce05d2f50989eb6b5489588bcc79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:b9:e0:ec:ed:e9:b3:3a:3a:2f:7a:e4:09:
b6:a9:59:96:aa:f0:18:02:4d:9f:21:e7:13:1c:04:
88:f4:94:27:f2:5e:6a:38:82:b4:52:ae:fe:cd:5c:
89:16:94:98:46:c6:f6:1f:f5:48:29:f7:53:82:ad:
fd:e7:50:94:4d:47:28:6a:68:ed:dd:ae:0c:33:57:
72:a2:50:ba:00:c9:58:70:ad:bc:d9:77:46:33:84:
c1:df:12:c3:f0:d8:23:20:b9:d3:79:98:9a:14:87:
96:49:44:8f:46:28:83:73:4e:a9:1a:7d:b9:44:52:
23:63:27:94:c9:45:a4:07:9c:53:50:bc:36:a9:73:
6b:ab:c4:0b:ef:e6:21:84:ea:25:52:e2:d4:ef:99:
3e:16:30:24:16:18:6a:3d:ce:93:52:cf:19:c3:3d:
eb:e0:cd:76:79:02:79:18:27:7a:00:f6:13:48:ab:
97:e5:20:6c:be:1c:c7:9c:ce:2e:66:c8:91:2a:f6:
19:d6:06:b3:5f:e2:43:8f:f7:e4:ea:a0:3f:99:a0:
47:71:97:ad:1f:72:ad:73:04:ad:dd:d9:ea:79:40:
74:f6:ef:cb:f8:a0:fd:9d:58:1c:3d:36:66:d4:46:
fa:ce:cc:3a:04:67:f7:03:49:06:3f:4c:ad:1f:79:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:14:83:3F:A1:9C:E0:5D:2F:50:98:9E:B6:B5:48:95:88:BC:C7:9C
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/dBSDP6Gc4F0vUJietrVIlYi8x5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.101.161.0-62.101.164.255
62.101.166.0/23
82.198.32.0/22
136.148.194.0-136.148.199.255
136.148.204.0/22
185.53.102.0/23
195.146.17.0/24
195.146.19.0/24
195.146.21.0/24
195.146.23.0/24
195.146.25.0/24
195.146.27.0/24
195.146.29.0/24
195.146.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:83:e7:b9:b0:aa:a8:e2:d4:23:0c:e4:ad:0e:09:f6:78:94:
6a:c2:43:df:e3:51:e1:2a:b5:39:2d:94:65:33:9d:6b:1b:2f:
ae:dd:69:3d:a7:76:af:f1:e6:af:07:00:29:bb:54:0c:74:96:
2e:38:58:80:49:c9:01:29:ce:1b:a3:a0:f2:e4:49:7e:e5:fa:
a6:0f:68:5b:f3:64:36:64:2c:2c:51:41:09:12:a6:57:6f:94:
90:41:ba:02:5b:47:04:98:4e:29:cc:71:2c:7d:51:dd:64:37:
cc:a9:57:6e:d1:f6:39:e5:a1:e3:a8:9b:2b:19:1b:fb:65:24:
ef:c4:28:fb:37:28:c4:91:c5:6b:7b:97:1b:fc:fd:dc:7b:55:
38:03:d9:7a:4e:5f:4f:60:c1:5e:37:78:18:53:36:d8:47:7a:
44:3a:48:40:89:c2:44:b1:3e:9f:24:2c:03:73:e3:7f:eb:e2:
77:af:f5:b1:33:78:d1:2b:8c:c1:c7:e8:e6:fa:7b:97:3a:a0:
79:02:95:5a:8f:fd:9f:3a:87:be:95:e5:20:01:74:95:82:ac:
74:0e:27:75:e2:c7:02:ae:e8:7e:3d:b3:0c:72:95:c8:92:18:
05:5d:1a:98:cb:ef:b4:76:cb:3d:8f:2f:39:87:0a:10:7b:5f:
6c:d9:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:28:35 2026 by rpki-client