Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/cjKWJKYLxMRewBF7z0FNBjnCuvM.roa
File: cjKWJKYLxMRewBF7z0FNBjnCuvM.roa (raw, json)
Hash identifier: IjqcM04dnIEtir8p7pRUf/m/0B11Jc+Z2/p2+zXrCTQ=
Subject key identifier: 72:32:96:24:A6:0B:C4:C4:5E:C0:11:7B:CF:41:4D:06:39:C2:BA:F3
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01A0CE7A35106680EEF72E765B3457FAD6EF
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/cjKWJKYLxMRewBF7z0FNBjnCuvM.roa
Signing time: Wed 23 Sep 2026 13:35:10 +0000
ROA not before: Wed 23 Sep 2026 13:35:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214996
IP address blocks: 62.83.48.0/24 maxlen: 24
62.83.60.0/22 maxlen: 22
62.83.64.0/22 maxlen: 22
159.195.12.0/22 maxlen: 22
159.195.16.0/22 maxlen: 22
159.195.91.0/24 maxlen: 24
159.195.92.0/22 maxlen: 22
159.195.107.0/24 maxlen: 24
159.195.232.0/22 maxlen: 22
159.195.236.0/22 maxlen: 22
2a0a:4cc0:101::/48 maxlen: 48
2a0a:4cc0:101::/52 maxlen: 52
2a0a:4cc0:120::/43 maxlen: 43
2a0a:4cc0:2000::/43 maxlen: 48
2a0a:4cc0:2000::/48 maxlen: 48
2a0a:4cc0:2000:4300::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:7a:35:10:66:80:ee:f7:2e:76:5b:34:57:fa:d6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Sep 23 13:35:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72329624a60bc4c45ec0117bcf414d0639c2baf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:b6:26:9b:03:a4:81:a9:b0:3e:af:b9:39:
59:6f:c5:3c:7e:bd:69:ea:b8:47:7d:2f:54:98:04:
88:f9:77:91:37:43:68:bc:6b:1f:dd:fa:e1:43:33:
b5:0c:4f:ac:90:70:aa:ac:69:7f:a3:60:c2:5f:5c:
54:5f:d5:e2:ac:f5:17:87:77:bd:2b:18:d6:ca:b7:
d8:b8:be:57:0a:a7:dd:33:61:d5:ed:ad:09:2c:98:
55:32:f2:9c:5b:03:69:7a:2e:2f:0c:75:27:6a:31:
41:d2:0f:ca:1c:85:da:84:4b:49:74:18:a7:d3:3d:
1f:55:88:f7:74:15:28:68:3b:7c:14:82:ac:d6:f1:
7f:76:82:40:fe:f9:94:60:61:e5:b2:31:9d:03:e0:
92:21:4b:e7:0c:70:6b:17:96:a9:a0:91:cc:f0:6c:
dc:bc:ad:43:61:a7:67:47:5b:03:03:47:df:96:38:
5f:32:aa:46:cf:f6:8a:52:4d:61:23:af:80:f1:95:
8b:2e:b5:2e:96:fc:be:0d:f2:0f:40:bb:cc:52:48:
9c:70:bc:f1:9f:7d:a1:10:f4:e7:05:cf:42:4b:c3:
5f:94:e0:44:da:da:09:e3:fb:2d:aa:f9:ae:88:7b:
30:33:b9:db:b1:7e:1c:cd:99:01:6b:f1:09:64:54:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:32:96:24:A6:0B:C4:C4:5E:C0:11:7B:CF:41:4D:06:39:C2:BA:F3
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/cjKWJKYLxMRewBF7z0FNBjnCuvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.83.48.0/24
62.83.60.0-62.83.67.255
159.195.12.0-159.195.19.255
159.195.91.0-159.195.95.255
159.195.107.0/24
159.195.232.0/21
IPv6:
2a0a:4cc0:101::/48
2a0a:4cc0:120::/43
2a0a:4cc0:2000::/43
Signature Algorithm: sha256WithRSAEncryption
73:44:10:87:c7:dd:9c:12:98:63:b9:f1:0f:cd:43:cf:84:0a:
a7:54:2e:11:89:95:5a:c5:b8:aa:a7:c2:98:ce:a5:28:f8:94:
1f:cc:6d:6a:57:ef:5e:4c:c5:f3:9a:75:ae:55:4d:70:e5:2c:
03:23:99:e8:42:33:50:d4:ba:69:71:fa:92:46:88:51:6f:63:
cf:49:d1:b5:7b:74:cf:82:55:54:44:20:18:29:22:24:b6:39:
1b:08:6b:39:4c:38:69:79:65:d7:75:1a:1a:7b:c2:83:76:75:
8f:0f:42:5c:c9:f0:7d:df:4d:98:40:b5:6f:cd:61:1f:b9:c5:
1f:3c:e7:1d:0b:d5:8e:c5:f7:21:d5:ce:31:8f:38:d2:f6:62:
52:c3:42:59:99:30:1c:19:bc:b7:a0:88:9d:4b:ac:1e:ab:55:
ef:f3:02:ca:8e:d2:cb:a2:c4:a0:bc:90:b8:c3:49:48:fd:17:
25:63:b3:47:fc:a3:d0:08:2c:52:e4:5c:a8:36:87:0f:22:64:
ae:90:c2:40:bc:1f:e2:1a:fb:46:6d:59:47:54:51:8d:85:49:
fc:a9:c5:eb:2a:e5:38:c2:5d:5d:8f:9d:07:bd:e2:52:e2:79:
4d:4b:19:91:a0:5f:90:06:37:9e:f7:6d:32:35:ca:5e:df:b6:
8c:c5:ce:53
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAaDOejUQZoDu9y52WzRX+tbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1
MTY1MTUwHhcNMjYwOTIzMTMzNTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjMyOTYyNGE2MGJjNGM0NWVjMDExN2JjZjQxNGQwNjM5YzJiYWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7a2JpsDpIGpsD6vuTlZb8U8fr1p
6rhHfS9UmASI+XeRN0NovGsf3frhQzO1DE+skHCqrGl/o2DCX1xUX9XirPUXh3e9
KxjWyrfYuL5XCqfdM2HV7a0JLJhVMvKcWwNpei4vDHUnajFB0g/KHIXahEtJdBin
0z0fVYj3dBUoaDt8FIKs1vF/doJA/vmUYGHlsjGdA+CSIUvnDHBrF5apoJHM8Gzc
vK1DYadnR1sDA0ffljhfMqpGz/aKUk1hI6+A8ZWLLrUulvy+DfIPQLvMUkiccLzx
n32hEPTnBc9CS8NflOBE2toJ4/stqvmuiHswM7nbsX4czZkBa/EJZFTg5wIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFHIyliSmC8TEXsARe89BTQY5wrrzMB8GA1UdIwQY
MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt
NWZiZjlhMjliNmUxLzEvY2pLV0pLWUx4TVJld0JGN3owRk5Cam5DdXZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx
LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBCBAIAATA8AwQAPlMwMAwD
BAI+UzwDBAI+U0AwDAMEAp/DDAMEAp/DEDAMAwQAn8NbAwQFn8NAAwQAn8NrAwQD
n8PoMCEEAgACMBsDBwAqCkzAAQEDBwUqCkzAASADBwUqCkzAIAAwDQYJKoZIhvcN
AQELBQADggEBAHNEEIfH3ZwSmGO58Q/NQ8+ECqdULhGJlVrFuKqnwpjOpSj4lB/M
bWpX715MxfOada5VTXDlLAMjmehCM1DUumlx+pJGiFFvY89J0bV7dM+CVVREIBgp
IiS2ORsIazlMOGl5Zdd1Ghp7woN2dY8PQlzJ8H3fTZhAtW/NYR+5xR885x0L1Y7F
9yHVzjGPONL2YlLDQlmZMBwZvLegiJ1LrB6rVe/zAsqO0suixKC8kLjDSUj9FyVj
s0f8o9AILFLkXKg2hw8iZK6QwkC8H+Ia+0ZtWUdUUY2FSfypxesq5TjCXV2PnQe9
4lLieU1LGZGgX5AGN573bTI1yl7ftozFzlM=
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:17:42 2026 by rpki-client