Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tyE_P1gc4frv-NuRaWMg1Xh2dvk.roa
File: tyE_P1gc4frv-NuRaWMg1Xh2dvk.roa (raw, json)
Hash identifier: oMAmUvG7Sy7dsI3aBL7HXNn3WmLctni4EBxjYRZ/ZFo=
Subject key identifier: B7:21:3F:3F:58:1C:E1:FA:EF:F8:DB:91:69:63:20:D5:78:76:76:F9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EC9E16722A1E49F69489027A61594AAAF
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tyE_P1gc4frv-NuRaWMg1Xh2dvk.roa
Signing time: Mon 15 Jun 2026 06:04:12 +0000
ROA not before: Mon 15 Jun 2026 06:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48974
IP address blocks: 62.41.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c9:e1:67:22:a1:e4:9f:69:48:90:27:a6:15:94:aa:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 15 06:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7213f3f581ce1faeff8db91696320d5787676f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:44:62:6f:74:60:fc:88:c9:88:a0:3a:ea:
95:e6:2c:c0:93:d6:c1:ff:7a:14:80:2f:66:59:fb:
0f:8f:0f:0b:d9:67:fe:16:05:ea:0e:d3:7d:d4:c6:
56:59:16:03:6f:69:1f:06:99:eb:91:bd:fd:64:8e:
f6:d9:7d:d5:77:3c:a1:09:b5:9d:2d:dc:38:36:8b:
d1:11:2c:8c:12:a2:20:74:e5:91:e9:ce:ea:a3:b9:
e4:52:89:2b:0e:f5:78:1d:bf:c3:28:9c:37:1e:77:
98:a5:1e:3a:61:01:5e:89:71:19:77:eb:74:37:ad:
95:85:27:e5:a1:a9:af:d2:b1:30:b6:60:34:41:5b:
ad:4a:69:01:ec:66:8b:89:c2:ff:af:be:12:73:dc:
ec:8b:aa:87:35:bb:ba:c0:01:8b:dd:3d:c8:66:36:
fd:d4:7b:16:1e:d8:9f:b8:60:7f:a6:51:c2:01:6a:
a7:d9:dc:ec:9a:83:2a:9b:2c:0f:58:4f:be:62:e4:
ec:0e:62:8f:db:f3:93:b2:03:2e:cf:7c:67:bf:76:
bf:5d:1b:68:0c:8d:eb:15:7c:a4:81:00:95:bb:3b:
25:f2:90:ba:7f:d4:f1:22:81:01:bc:e8:c2:df:d2:
e4:ef:18:e1:2b:6b:e0:4a:f8:76:1d:d7:e4:1f:38:
ec:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:21:3F:3F:58:1C:E1:FA:EF:F8:DB:91:69:63:20:D5:78:76:76:F9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tyE_P1gc4frv-NuRaWMg1Xh2dvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:88:ab:50:9f:44:5c:bd:8b:12:83:15:2d:aa:a0:74:e5:90:
19:48:99:4d:ae:98:55:f8:fb:6b:a0:48:1a:76:86:41:ff:6a:
1b:7f:7d:86:3a:a7:48:b5:2e:0f:86:8e:43:d9:f8:de:73:9b:
7b:09:1c:af:2a:ab:85:2b:65:c0:66:15:a5:82:75:ed:a3:81:
c0:c0:57:0a:87:96:18:08:ae:71:58:58:8c:6f:b6:e9:42:2d:
68:f1:a2:7b:5b:88:11:af:e5:e2:d9:8e:7a:08:b4:b8:a4:09:
a5:be:c9:f9:62:80:b1:93:98:0c:fd:78:99:f6:c3:4b:06:ab:
c7:26:15:e2:f8:42:3b:9f:48:5b:1f:08:77:3a:11:e0:22:09:
15:53:51:5d:df:f8:23:3d:66:77:5b:07:ce:3d:e2:5b:7e:43:
8c:90:91:66:4e:da:f9:94:eb:f3:ee:49:e4:ee:d2:58:5c:59:
96:bc:4e:ae:f2:40:cf:c1:b2:54:c0:54:32:b4:52:d3:32:3c:
49:13:e0:e4:7c:28:88:65:a8:b1:33:64:65:d0:e0:2d:d3:3f:
8a:a1:5e:ce:3b:9c:3e:5a:23:cb:a8:de:0f:4d:c0:c2:5b:c7:
7e:03:7e:f3:6f:8d:38:4c:6f:af:fb:08:ce:ff:db:96:50:a9:
ff:e7:3e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:21:30 2026 by rpki-client