Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/_goFycSckx1Lbo5ENUIWZUP0Egs.roa
File: _goFycSckx1Lbo5ENUIWZUP0Egs.roa (raw, json)
Hash identifier: /wDlnHymJ5pu0rVWdrm5goCMIyva4ia4QEM+t0S0ncU=
Subject key identifier: FE:0A:05:C9:C4:9C:93:1D:4B:6E:8E:44:35:42:16:65:43:F4:12:0B
Certificate issuer: /CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Certificate serial: 019EBA29A37AF3921003231D4435422FF1A2
Authority key identifier: 4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/_goFycSckx1Lbo5ENUIWZUP0Egs.roa
Signing time: Fri 12 Jun 2026 04:49:11 +0000
ROA not before: Fri 12 Jun 2026 04:49:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51964
IP address blocks: 62.229.0.0/16 maxlen: 24
200.240.32.0/19 maxlen: 24
200.240.64.0/18 maxlen: 24
200.240.128.0/18 maxlen: 18
200.240.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:29:a3:7a:f3:92:10:03:23:1d:44:35:42:2f:f1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Validity
Not Before: Jun 12 04:49:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe0a05c9c49c931d4b6e8e443542166543f4120b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:bb:4f:70:e4:d8:81:67:31:eb:37:ca:6a:
f6:a6:0c:4f:f4:30:59:6e:74:3d:1d:75:6e:5b:d8:
96:64:b7:0b:67:1d:74:d1:11:ef:ef:16:67:61:f3:
1f:46:26:24:1c:24:71:d2:8a:b2:9b:12:6a:ff:61:
22:f4:08:65:30:83:1c:62:ab:3c:23:f0:b1:d2:d7:
6d:7f:95:76:d7:ac:94:b4:fb:92:38:da:3a:49:10:
34:bb:e4:7e:c2:34:54:66:db:c5:06:22:7c:10:f6:
a7:7b:02:5c:0d:07:6f:cc:16:c6:91:79:05:f5:40:
69:73:71:7c:24:dc:a1:b8:94:a3:3c:27:a4:26:87:
9a:c4:ee:92:28:93:68:f5:1e:b6:11:d7:ec:b6:0a:
d1:72:4a:97:0e:a4:9e:db:bb:53:a2:6c:4d:9f:f9:
79:57:4b:a8:53:77:c9:82:c1:d2:7a:14:58:f4:d7:
85:00:6d:66:8f:3a:47:e8:b1:85:b1:3a:5d:c5:d2:
a2:da:4f:a0:01:60:29:33:0a:e8:2e:c8:5a:50:82:
b5:1b:cf:f7:1c:a1:46:6c:7e:d6:da:5a:e1:a4:55:
c2:d9:69:29:97:16:d8:71:91:c9:5d:e9:57:5f:75:
ca:94:9f:af:1f:13:c3:10:90:5a:01:05:f0:f3:49:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0A:05:C9:C4:9C:93:1D:4B:6E:8E:44:35:42:16:65:43:F4:12:0B
X509v3 Authority Key Identifier:
keyid:4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/_goFycSckx1Lbo5ENUIWZUP0Egs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.229.0.0/16
200.240.32.0-200.240.223.255
Signature Algorithm: sha256WithRSAEncryption
72:62:65:65:cd:6f:22:49:4c:60:3f:27:5b:f4:47:e9:6a:12:
00:a5:39:5b:24:f8:e2:11:41:1b:93:f9:0d:c7:68:96:ba:bb:
c3:d5:ac:a5:6b:6c:a5:86:ad:79:5f:a0:61:bd:8c:80:4f:33:
7c:c4:f4:0b:73:3f:dc:ef:5f:02:2e:b1:1c:d7:46:49:21:ad:
27:09:4f:96:18:b7:f6:07:c3:22:e6:2c:f8:57:8a:df:df:7b:
c3:67:ef:ad:bc:7b:d4:9a:7a:61:64:dd:a2:c9:4a:e4:a0:ad:
66:63:10:42:2b:0e:88:06:2e:c5:f4:12:c0:ff:f9:59:95:aa:
7f:d2:16:91:a4:34:22:56:44:c4:a3:a2:89:15:a2:84:07:dd:
db:ed:89:2c:14:c1:86:49:92:e6:b8:c6:37:90:cd:8e:79:6d:
84:16:2b:1b:59:c4:e3:ef:2a:8e:79:22:f4:ec:2f:9d:e4:f3:
fd:6c:7f:15:d8:03:4f:2b:4f:3e:01:76:4f:e0:c4:8b:1b:b5:
1f:a6:c7:12:e8:12:52:ec:e5:31:a9:b6:ec:c4:b4:09:26:c7:
1b:68:d9:73:a0:83:73:f5:90:b6:5a:52:0d:0e:18:63:56:12:
e7:2f:6e:22:8a:f2:ec:42:9b:a8:4f:33:50:3a:52:7d:b2:14:
f7:5d:e7:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:31:15 2026 by rpki-client