Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/RKrqTtYG_Fe_KVJLcjjb0-2n1a0.roa
File: RKrqTtYG_Fe_KVJLcjjb0-2n1a0.roa (raw, json)
Hash identifier: hIoZe4ofxuefQgY+02PSJVYUbiRMyVoxMXnTqNZmGH4=
Subject key identifier: 44:AA:EA:4E:D6:06:FC:57:BF:29:52:4B:72:38:DB:D3:ED:A7:D5:AD
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 019C9F8DF6B18C50DE4F7E17199D88F0C039
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/RKrqTtYG_Fe_KVJLcjjb0-2n1a0.roa
Signing time: Fri 27 Feb 2026 14:43:26 +0000
ROA not before: Fri 27 Feb 2026 14:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8300
IP address blocks: 62.202.201.0/24 maxlen: 24
62.202.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:8d:f6:b1:8c:50:de:4f:7e:17:19:9d:88:f0:c0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Feb 27 14:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44aaea4ed606fc57bf29524b7238dbd3eda7d5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:b1:45:43:13:61:38:f2:04:4d:5a:6d:25:
10:7b:ef:79:d2:b5:62:73:80:7f:3f:fb:3a:ce:fa:
8c:c0:f5:61:f0:0f:79:af:cc:8e:95:69:30:8f:03:
b7:4c:91:ce:83:29:40:93:3d:a5:b8:21:76:1a:40:
e3:94:11:a8:5d:41:d9:06:b8:a3:a3:75:69:1e:f0:
3d:d7:66:83:fb:84:14:a9:d9:35:bc:27:e1:73:92:
65:60:57:e4:7b:8e:0d:32:29:97:89:51:cc:90:c3:
c0:18:05:12:18:cf:51:20:1d:48:42:ce:aa:41:90:
14:f8:03:c7:c0:2a:5d:be:9e:76:28:74:a0:44:de:
d5:6a:7f:c3:6b:33:ef:a2:9f:2c:01:d6:8c:5f:9f:
ce:2a:86:39:eb:be:d4:bd:23:ce:72:06:59:eb:f6:
82:94:2f:fc:05:c1:c9:5a:ee:4e:63:6a:10:a0:f5:
3e:31:1d:35:55:9e:e3:0e:1e:e8:95:34:96:8d:53:
73:c1:76:b3:2f:1e:50:b5:35:22:80:4f:22:5d:eb:
f0:13:87:91:24:76:ef:61:ba:1a:4e:ed:ee:44:63:
65:ae:90:6d:5f:e6:96:4f:c2:20:80:97:1a:dd:3a:
22:21:1b:9c:d9:7a:b9:89:b9:6f:0d:b1:8a:b8:56:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AA:EA:4E:D6:06:FC:57:BF:29:52:4B:72:38:DB:D3:ED:A7:D5:AD
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/RKrqTtYG_Fe_KVJLcjjb0-2n1a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.202.201.0/24
62.202.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:72:2c:e3:75:ab:1b:b4:34:f7:af:9c:00:a8:0c:ff:dc:7d:
bf:0f:11:9d:31:77:d5:aa:28:9e:b6:6f:6f:3b:56:76:b9:ad:
96:f8:9a:9b:25:53:d7:20:41:02:70:f2:46:56:1d:10:df:1a:
d9:e6:7f:4b:3a:da:70:6f:55:de:75:1c:75:74:9e:2a:d6:d2:
5a:db:82:bd:14:d0:15:8f:48:fc:f1:15:93:c8:4d:63:df:8f:
c3:dd:ee:48:21:c2:e1:1f:e9:e0:2e:a1:06:52:ab:0f:03:72:
3a:f2:8f:c1:c2:f5:23:08:e5:c6:da:6c:a1:9e:19:c5:55:fa:
68:fa:5b:bc:0a:60:fd:fe:7b:a7:45:34:c0:6a:e3:fb:bc:38:
53:5d:41:59:38:22:59:4b:86:0a:4d:45:e0:24:fa:0f:c0:f5:
c8:33:50:d3:e3:18:53:e0:61:41:62:74:c6:dc:78:88:ea:7a:
97:ab:33:b7:4e:0b:57:bd:25:fd:b6:a8:dc:65:f0:c1:89:d7:
6a:8a:e6:25:e7:6b:d2:73:4a:84:5b:02:50:88:9f:3b:24:8b:
79:68:55:ca:38:6c:a6:23:30:af:d5:50:d0:0e:b9:30:68:ad:
bb:69:72:91:d0:ae:8c:b5:1d:fe:8a:2a:fd:6f:a6:f7:9e:52:
ee:1b:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:13:00 2026 by rpki-client