Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/DeAgFNfIORWnBfFq7D10Rej2HAU.roa
File: DeAgFNfIORWnBfFq7D10Rej2HAU.roa (raw, json)
Hash identifier: uoLF8CbxN4s+EXeDSpUnzOmVweCKadVLU7SCOTJVvmI=
Subject key identifier: 0D:E0:20:14:D7:C8:39:15:A7:05:F1:6A:EC:3D:74:45:E8:F6:1C:05
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 019B7E383C90F1792728821D4E858AE359DA
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/DeAgFNfIORWnBfFq7D10Rej2HAU.roa
Signing time: Fri 02 Jan 2026 10:19:33 +0000
ROA not before: Fri 02 Jan 2026 10:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47366
IP address blocks: 185.62.9.0/24 maxlen: 24
185.62.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:3c:90:f1:79:27:28:82:1d:4e:85:8a:e3:59:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Jan 2 10:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0de02014d7c83915a705f16aec3d7445e8f61c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:f3:45:bc:5a:c4:e9:a3:61:ed:3f:36:a6:
75:d9:c2:67:0a:d3:e7:5e:17:27:83:c1:7c:45:34:
3b:ef:f7:cc:43:a2:d3:43:65:a5:98:d4:19:4b:cd:
7f:46:e1:30:4b:24:51:8b:3e:35:29:00:4a:23:65:
0f:6b:c3:c3:9c:cf:84:d8:8d:ed:47:4a:5d:35:f8:
e2:bb:4d:54:74:18:1b:eb:a3:05:f9:7c:d1:b1:46:
51:6a:3f:68:8b:08:b5:7d:c7:e4:a8:0c:e1:0a:44:
2e:7e:80:ad:be:52:e4:25:68:37:dc:7c:c6:c1:0d:
34:e2:41:19:e1:a6:e1:ee:c1:68:71:9b:5f:ce:39:
36:8b:5c:25:79:59:52:6a:75:b9:da:5a:88:91:e2:
e0:1d:3c:bd:bf:51:23:05:1e:84:d3:fc:84:7a:bb:
9b:14:61:ed:7e:00:d3:1f:f3:b2:73:18:c7:3b:6c:
78:e1:c8:cc:c1:24:a9:69:55:7e:77:92:64:78:45:
e0:05:6b:07:d8:b5:09:4f:6f:00:83:15:82:fe:05:
01:55:43:aa:1b:7e:1a:4e:39:ab:45:ff:c8:3c:78:
bd:f0:42:70:9d:aa:a6:25:bd:19:2c:f6:e9:e0:38:
e3:8b:6b:4d:c7:23:f2:f5:bd:a4:8a:12:b0:1c:e0:
0b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:20:14:D7:C8:39:15:A7:05:F1:6A:EC:3D:74:45:E8:F6:1C:05
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/DeAgFNfIORWnBfFq7D10Rej2HAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.9.0-185.62.10.255
Signature Algorithm: sha256WithRSAEncryption
20:8b:5e:5e:28:78:ca:91:16:d5:21:d0:96:7b:77:db:14:9a:
3c:2c:d1:47:22:ca:2e:a7:64:38:24:a0:9e:c9:a6:4d:02:b7:
f0:b4:95:1a:f0:22:14:ce:28:fb:34:a8:e6:6f:5b:a6:54:24:
02:ff:da:70:85:5e:9b:5b:63:b9:ca:1c:5c:84:a1:e7:e4:56:
8b:5c:19:2c:dd:7c:f5:d7:af:97:01:99:6a:94:6b:d8:dd:d2:
8e:37:c9:54:31:b5:61:58:80:b8:ce:5c:1e:82:c8:fd:8e:bf:
46:d5:a1:6f:16:22:9f:81:17:3e:41:7e:f6:c4:c4:dd:1d:92:
d4:55:64:10:a8:ee:9b:ea:0c:43:b7:ad:41:4e:3a:4f:e9:b2:
89:5c:7f:53:00:78:aa:55:d8:33:f5:7c:fa:89:33:28:1f:75:
e6:60:ee:f3:21:28:e4:29:03:59:bf:34:8d:19:4f:56:66:fb:
85:52:ac:bb:33:1e:cc:2a:87:c4:6e:40:77:4f:90:e7:a3:07:
75:7f:a0:25:47:a1:26:7e:64:26:df:e2:28:cc:29:0b:17:c8:
63:bc:c7:f5:bb:68:c1:fa:ef:a5:f2:d0:c3:af:0b:66:3c:f0:
21:dd:ab:04:6d:84:ff:46:95:55:23:76:63:1d:b7:3e:fe:67:
c3:48:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:20:52 2026 by rpki-client