Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/1-eF7e7FBTv1kNZvAqKgKcchP_r8.roa
File: 1-eF7e7FBTv1kNZvAqKgKcchP_r8.roa (raw, json)
Hash identifier: NJzA8zp4PiibAViDgdZjRywfinrsmcRR8mpxvA7kUN8=
Subject key identifier: F9:E1:7B:7B:B1:41:4E:FD:64:35:9B:C0:A8:A8:0A:71:C8:4F:FE:BF
Certificate issuer: /CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Certificate serial: 019D8614B830803A50F22566E80D57013692
Authority key identifier: 1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/1-eF7e7FBTv1kNZvAqKgKcchP_r8.roa
Signing time: Mon 13 Apr 2026 09:03:18 +0000
ROA not before: Mon 13 Apr 2026 09:03:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3218
IP address blocks: 62.61.16.0/20 maxlen: 20
62.61.16.0/21 maxlen: 21
62.61.24.0/21 maxlen: 21
62.61.27.0/24 maxlen: 24
62.61.30.0/24 maxlen: 24
2a0c:6d00:61::/48 maxlen: 48
2a0c:6d00:85::/48 maxlen: 48
2a0c:6d00:232::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:14:b8:30:80:3a:50:f2:25:66:e8:0d:57:01:36:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Validity
Not Before: Apr 13 09:03:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9e17b7bb1414efd64359bc0a8a80a71c84ffebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4a:89:70:c0:28:1c:9d:54:ad:5a:17:f5:c3:
dd:90:dc:ac:4c:52:a1:13:24:72:90:9d:46:f9:84:
8e:13:48:25:16:6b:4d:1d:66:c0:91:48:78:86:1f:
ce:15:89:b7:52:05:c5:b3:0e:69:5b:30:ef:a9:a8:
5f:46:07:8d:5b:28:78:9a:ee:77:d3:78:cf:ec:a0:
c6:ae:89:24:f8:4a:93:4b:0b:90:df:63:46:4d:09:
6b:08:43:88:f4:4c:e2:f5:0a:14:29:2b:a7:ee:51:
59:25:6f:13:00:81:60:ab:8e:1c:6f:ba:fc:cc:89:
4d:dc:54:98:08:13:35:1a:f9:d3:37:23:27:9e:db:
1c:bc:18:a8:94:e6:0c:d7:5a:04:93:22:a2:4e:47:
bf:76:f5:9b:72:bd:46:2d:62:74:04:3b:f5:cb:f7:
90:c0:78:f5:9d:c7:34:1a:d0:94:c7:9a:e1:88:d8:
0d:10:b5:f2:70:af:9d:a9:c5:65:fc:1e:d2:ec:58:
0f:cb:63:54:d6:fc:54:f5:57:ac:05:c2:d3:6d:11:
21:3b:86:2e:84:81:bd:30:71:6c:c1:3c:2e:65:33:
fc:50:11:40:51:ab:6a:3a:12:ce:9b:98:0d:f7:60:
35:20:3a:ac:c4:49:78:f1:f6:ba:21:5a:48:09:38:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E1:7B:7B:B1:41:4E:FD:64:35:9B:C0:A8:A8:0A:71:C8:4F:FE:BF
X509v3 Authority Key Identifier:
keyid:1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/1-eF7e7FBTv1kNZvAqKgKcchP_r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.61.16.0/20
IPv6:
2a0c:6d00:61::/48
2a0c:6d00:85::/48
2a0c:6d00:232::/48
Signature Algorithm: sha256WithRSAEncryption
00:22:cf:44:c7:9a:47:27:e0:2e:77:97:ac:54:0b:b2:69:07:
9a:9d:72:bc:c4:66:ad:42:b1:6e:4e:3b:ad:3d:09:40:d6:c8:
73:d6:d5:48:0f:4a:63:da:4d:e0:9f:e6:3f:74:f8:64:86:c3:
eb:c5:ad:b9:5d:95:5a:36:17:63:9f:74:76:89:f7:b1:c7:ae:
72:98:7e:6b:ac:c6:05:96:bc:a1:bd:ef:2b:6c:6a:0e:45:f0:
12:87:e8:81:6e:68:5a:c5:d8:72:f8:1e:c7:4f:90:23:bb:c9:
6f:e9:16:5b:ca:be:f3:f7:fc:ef:11:94:2e:d0:91:80:4f:e9:
bd:91:c3:64:35:a7:24:cb:ca:a4:6c:2e:06:0f:5a:8c:22:65:
0b:05:ce:9f:65:8b:0f:7e:77:05:10:96:24:59:3b:14:df:9f:
e5:a1:81:41:9b:d1:7e:0a:58:69:77:58:ea:eb:6e:12:c6:09:
17:b1:11:4c:8b:88:05:ce:c8:d8:0c:ab:1b:bc:2d:a4:84:e2:
82:f5:26:0b:e6:1f:dd:f6:db:b6:54:c1:af:92:5e:ee:13:14:
f4:e6:a3:01:04:4a:7a:0f:4a:40:a7:29:29:75:af:17:3e:33:
7c:4f:92:60:9c:83:b1:5b:bf:7e:e6:50:0a:ad:7d:c7:d1:85:
f2:95:39:86
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ2GFLgwgDpQ8iVm6A1XATaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOGU4ZGY1YzAzMTEwNzExOGRhNjFmMjlhYjRmNDE5ZDI5
ZDVhOGEwHhcNMjYwNDEzMDkwMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWUxN2I3YmIxNDE0ZWZkNjQzNTliYzBhOGE4MGE3MWM4NGZmZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0qJcMAoHJ1UrVoX9cPdkNysTFKh
EyRykJ1G+YSOE0glFmtNHWbAkUh4hh/OFYm3UgXFsw5pWzDvqahfRgeNWyh4mu53
03jP7KDGrokk+EqTSwuQ32NGTQlrCEOI9Ezi9QoUKSun7lFZJW8TAIFgq44cb7r8
zIlN3FSYCBM1GvnTNyMnntscvBiolOYM11oEkyKiTke/dvWbcr1GLWJ0BDv1y/eQ
wHj1ncc0GtCUx5rhiNgNELXycK+dqcVl/B7S7FgPy2NU1vxU9VesBcLTbREhO4Yu
hIG9MHFswTwuZTP8UBFAUatqOhLOm5gN92A1IDqsxEl48fa6IVpICTh6AQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFPnhe3uxQU79ZDWbwKioCnHIT/6/MB8GA1UdIwQY
MBaAFB2OjfXAMRBxGNph8pq09BnSnVqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFk2TjljQXhFSEVZMm1IeW1yVDBHZEtkV29vLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81NWFjNjctOWM3Ni00ODkzLTg5YTUt
YjFkMzhiMTNmZGE5LzEvMS1lRjdlN0ZCVHYxa05adkFxS2dLY2NoUF9yOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYWEvNTVhYzY3LTljNzYtNDg5My04OWE1LWIxZDM4YjEzZmRh
OS8xL0hZNk45Y0F4RUhFWTJtSHltclQwR2RLZFdvby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBCBggrBgEFBQcBBwEB/wQzMDEwDAQCAAEwBgMEBD49EDAh
BAIAAjAbAwcAKgxtAABhAwcAKgxtAACFAwcAKgxtAAIyMA0GCSqGSIb3DQEBCwUA
A4IBAQAAIs9Ex5pHJ+Aud5esVAuyaQeanXK8xGatQrFuTjutPQlA1shz1tVID0pj
2k3gn+Y/dPhkhsPrxa25XZVaNhdjn3R2ifexx65ymH5rrMYFlryhve8rbGoORfAS
h+iBbmhaxdhy+B7HT5Aju8lv6RZbyr7z9/zvEZQu0JGAT+m9kcNkNacky8qkbC4G
D1qMImULBc6fZYsPfncFEJYkWTsU35/loYFBm9F+Clhpd1jq624SxgkXsRFMi4gF
zsjYDKsbvC2khOKC9SYL5h/d9tu2VMGvkl7uExT05qMBBEp6D0pApykpda8XPjN8
T5JgnIOxW79+5lAKrX3H0YXylTmG
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:06:04 2026 by rpki-client