Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/uZAkdvgnla4W0XfXq_LcU0XnYDc.roa
File: uZAkdvgnla4W0XfXq_LcU0XnYDc.roa (raw, json)
Hash identifier: yjPqez282iszAcd+/RqL31Peh6NQ/8RPBG85snT1+sw=
Subject key identifier: B9:90:24:76:F8:27:95:AE:16:D1:77:D7:AB:F2:DC:53:45:E7:60:37
Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial: 019C9E7E0CFBB4C74A55CE99266720936887
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/uZAkdvgnla4W0XfXq_LcU0XnYDc.roa
Signing time: Fri 27 Feb 2026 09:46:26 +0000
ROA not before: Fri 27 Feb 2026 09:46:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31055
IP address blocks: 62.168.192.0/19 maxlen: 19
62.168.192.0/24 maxlen: 24
62.168.193.0/24 maxlen: 24
62.168.194.0/24 maxlen: 24
62.168.195.0/24 maxlen: 24
62.168.196.0/24 maxlen: 24
62.168.197.0/24 maxlen: 24
62.168.198.0/24 maxlen: 24
62.168.199.0/24 maxlen: 24
62.168.200.0/24 maxlen: 24
62.168.201.0/24 maxlen: 24
62.168.202.0/24 maxlen: 24
62.168.203.0/24 maxlen: 24
62.168.204.0/24 maxlen: 24
62.168.205.0/24 maxlen: 24
62.168.206.0/24 maxlen: 24
62.168.207.0/24 maxlen: 24
62.168.208.0/24 maxlen: 24
62.168.209.0/24 maxlen: 24
62.168.210.0/24 maxlen: 24
62.168.211.0/24 maxlen: 24
62.168.212.0/24 maxlen: 24
62.168.213.0/24 maxlen: 24
62.168.214.0/24 maxlen: 24
62.168.215.0/24 maxlen: 24
62.168.216.0/24 maxlen: 24
62.168.217.0/24 maxlen: 24
62.168.218.0/24 maxlen: 24
62.168.219.0/24 maxlen: 24
62.168.220.0/24 maxlen: 24
62.168.221.0/24 maxlen: 24
62.168.222.0/24 maxlen: 24
62.168.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:7e:0c:fb:b4:c7:4a:55:ce:99:26:67:20:93:68:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Validity
Not Before: Feb 27 09:46:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9902476f82795ae16d177d7abf2dc5345e76037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:99:34:5b:33:75:e7:5b:56:9b:1a:f8:8d:18:
be:ad:1f:46:10:50:de:3e:1a:1a:d5:30:15:9f:6e:
8d:5a:45:cb:37:c7:eb:e2:4b:45:93:46:e6:dd:90:
7d:7e:58:72:b3:4b:9e:38:0a:da:c7:ed:54:28:c6:
7e:74:73:0d:1e:9d:ca:66:45:cf:02:6e:da:40:5e:
dc:f3:06:b3:0d:3a:ce:82:a3:76:58:06:02:1a:d2:
1a:64:bd:e0:86:c4:35:84:79:f3:01:02:11:fa:83:
1a:a9:ea:3c:a5:58:cc:86:3e:eb:21:7e:1b:1e:79:
d2:3c:1e:40:cc:97:5f:18:73:5d:31:75:af:5c:0f:
86:c1:5d:81:3c:d6:53:89:27:04:b9:b2:b2:cc:28:
8b:9f:9b:61:c6:ba:89:87:c1:e3:dc:17:62:33:d6:
4b:52:43:b0:bc:df:20:9a:79:0b:63:0c:05:f0:e8:
ff:e0:f9:30:d5:7c:a8:38:80:fb:cd:cd:d5:51:87:
76:90:e3:00:0b:3f:ac:75:b4:69:50:97:5e:7b:42:
53:bb:50:0c:ca:e0:9d:f8:24:31:d3:b7:ef:a0:05:
a9:ea:3f:2c:fb:aa:f5:40:0f:fc:db:e7:12:5d:07:
09:b3:c7:c4:df:e2:53:d4:bc:50:b4:15:0f:80:cc:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:90:24:76:F8:27:95:AE:16:D1:77:D7:AB:F2:DC:53:45:E7:60:37
X509v3 Authority Key Identifier:
keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/uZAkdvgnla4W0XfXq_LcU0XnYDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.168.192.0/19
Signature Algorithm: sha256WithRSAEncryption
68:98:b1:0e:70:7b:be:32:d7:59:d6:c3:5f:74:7a:86:61:8f:
40:9d:d3:34:3b:eb:59:34:51:ea:bf:b6:ac:bf:09:5b:45:a7:
80:3d:d4:59:64:88:f1:58:16:98:1f:22:ff:5a:97:31:df:8e:
f2:31:be:e1:fe:7a:89:29:40:54:5d:e7:f7:0c:09:27:ad:ba:
33:db:df:f1:f4:4a:d3:34:8c:29:d3:92:40:f6:da:37:ce:cf:
03:93:be:e1:87:04:71:f1:57:14:33:ba:88:a4:ef:52:d5:fb:
2e:5c:24:01:a9:01:39:93:ee:2c:25:ab:0b:21:5d:40:5c:80:
43:ee:63:89:8a:3a:f5:5c:3f:fe:d3:5a:c8:7b:1f:68:b7:96:
3a:9c:b4:54:63:84:8f:10:0c:4d:a7:d2:95:6f:0a:3e:99:75:
82:ae:ba:2e:da:db:ae:37:c2:07:08:23:d0:58:f5:4d:87:ed:
77:63:aa:a3:ef:e3:1b:27:2f:ef:7a:8e:32:d2:67:9b:8c:27:
6f:3f:cd:86:a2:9d:6b:be:19:9c:e4:30:4b:eb:22:f9:67:66:
f8:3f:34:ea:30:98:31:32:3d:64:11:31:6b:98:9a:1e:8c:a7:
1c:a5:41:27:1e:66:7c:21:1d:0f:f4:83:a2:b7:83:7d:8a:26:
b9:7d:4a:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyefgz7tMdKVc6ZJmcgk2iHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZWJkYjY5YTMzZThmM2FmMzYzYWUxNDRmODUzNTM4ZTgw
MzFiNjMwHhcNMjYwMjI3MDk0NjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTkwMjQ3NmY4Mjc5NWFlMTZkMTc3ZDdhYmYyZGM1MzQ1ZTc2MDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pk0WzN151tWmxr4jRi+rR9GEFDe
Phoa1TAVn26NWkXLN8fr4ktFk0bm3ZB9flhys0ueOArax+1UKMZ+dHMNHp3KZkXP
Am7aQF7c8wazDTrOgqN2WAYCGtIaZL3ghsQ1hHnzAQIR+oMaqeo8pVjMhj7rIX4b
HnnSPB5AzJdfGHNdMXWvXA+GwV2BPNZTiScEubKyzCiLn5thxrqJh8Hj3BdiM9ZL
UkOwvN8gmnkLYwwF8Oj/4Pkw1XyoOID7zc3VUYd2kOMACz+sdbRpUJdee0JTu1AM
yuCd+CQx07fvoAWp6j8s+6r1QA/82+cSXQcJs8fE3+JT1LxQtBUPgMyqHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLmQJHb4J5WuFtF316vy3FNF52A3MB8GA1UdIwQY
MBaAFODr22mjPo8682OuFE+FNTjoAxtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kOGM0YmEtMWM0OC00ODBiLWJiNTkt
ZDIzMTBiYmEwZTExLzEvdVpBa2R2Z25sYTRXMFhmWHFfTGNVMFhuWURjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kOGM0YmEtMWM0OC00ODBiLWJiNTktZDIzMTBiYmEwZTEx
LzEvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPqjAMA0G
CSqGSIb3DQEBCwUAA4IBAQBomLEOcHu+MtdZ1sNfdHqGYY9AndM0O+tZNFHqv7as
vwlbRaeAPdRZZIjxWBaYHyL/Wpcx347yMb7h/nqJKUBUXef3DAknrboz29/x9ErT
NIwp05JA9to3zs8Dk77hhwRx8VcUM7qIpO9S1fsuXCQBqQE5k+4sJasLIV1AXIBD
7mOJijr1XD/+01rIex9ot5Y6nLRUY4SPEAxNp9KVbwo+mXWCrrou2tuuN8IHCCPQ
WPVNh+13Y6qj7+MbJy/veo4y0mebjCdvP82Gop1rvhmc5DBL6yL5Z2b4PzTqMJgx
Mj1kETFrmJoejKccpUEnHmZ8IR0P9IOit4N9iia5fUqv
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:24:42 2026 by rpki-client