Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/1-B0fJoidLyO7YUkRJ5SMCW8q3YI.roa
File: 1-B0fJoidLyO7YUkRJ5SMCW8q3YI.roa (raw, json)
Hash identifier: he75YWP6CSnWhVc2/UtLhyj8J3gpC2sQruvnzJGb/hw=
Subject key identifier: F8:1D:1F:26:88:9D:2F:23:BB:61:49:11:27:94:8C:09:6F:2A:DD:82
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01A09FA94BD615730DCEEE2804B83DAF5D15
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/1-B0fJoidLyO7YUkRJ5SMCW8q3YI.roa
Signing time: Mon 14 Sep 2026 11:24:27 +0000
ROA not before: Mon 14 Sep 2026 11:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 62.244.11.0/24 maxlen: 24
62.244.12.0/24 maxlen: 24
62.244.29.0/24 maxlen: 24
62.244.36.0/24 maxlen: 24
62.244.37.0/24 maxlen: 24
62.244.41.0/24 maxlen: 24
62.244.43.0/24 maxlen: 24
62.244.45.0/24 maxlen: 24
62.244.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:a9:4b:d6:15:73:0d:ce:ee:28:04:b8:3d:af:5d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Sep 14 11:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f81d1f26889d2f23bb61491127948c096f2add82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:c2:92:72:d3:3e:6d:c5:b0:4f:5a:ef:e2:
e6:2a:95:41:de:f0:aa:fa:68:f1:f6:cf:43:61:38:
ce:6d:6f:95:3d:12:f6:e8:d7:7c:68:cc:11:05:b5:
b0:1c:f7:cf:db:49:17:08:c2:3f:69:d7:9c:66:be:
cb:54:df:3f:2e:37:5b:fc:2e:e7:ac:d7:e3:1b:67:
50:36:40:bb:ce:cf:72:15:39:1e:d8:9b:ab:a3:81:
6d:28:3f:13:ce:c2:93:b2:f4:fa:eb:16:a3:71:e1:
3c:a7:a2:f8:e6:31:b2:6e:6c:f1:d9:61:c5:6f:6d:
51:21:1c:09:a8:d1:b9:1d:bf:a2:4c:ab:3d:35:02:
ef:37:f1:e5:1e:4d:1e:74:7b:41:eb:2d:af:44:2d:
31:54:d1:46:41:d9:6b:49:44:00:2a:21:ee:3c:c1:
72:fb:7c:ec:b3:2b:0b:e7:bb:ce:59:7c:4c:95:fd:
44:a0:71:cc:cc:64:d0:31:a5:42:6a:bb:46:03:ae:
79:c4:2d:9b:55:79:5b:e1:94:11:d1:10:95:28:8d:
12:09:d3:dc:6b:98:7e:98:29:77:3c:de:1b:e7:f0:
ff:23:d0:72:35:14:16:fa:9b:71:ef:4e:12:28:b2:
d9:09:30:e0:80:7d:90:90:d1:37:43:96:83:32:a1:
6b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1D:1F:26:88:9D:2F:23:BB:61:49:11:27:94:8C:09:6F:2A:DD:82
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/1-B0fJoidLyO7YUkRJ5SMCW8q3YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.11.0-62.244.12.255
62.244.29.0/24
62.244.36.0/23
62.244.41.0/24
62.244.43.0/24
62.244.45.0/24
62.244.56.0/24
Signature Algorithm: sha256WithRSAEncryption
95:2b:cf:7e:c3:f4:57:1f:a0:fa:d0:0c:2f:cb:af:7d:cf:56:
72:21:f4:90:f1:c4:4b:f7:19:8e:0f:1a:b3:70:47:35:66:3c:
54:3e:91:e6:af:8e:85:dd:9f:40:0b:8e:15:92:2a:53:b9:45:
21:b8:cc:45:91:44:3f:5c:fd:9a:14:91:a5:b0:86:89:d1:dc:
44:6c:36:e2:d3:90:c1:fa:cb:78:2f:16:43:f5:04:6b:fe:14:
5b:7f:81:9a:69:20:dc:a0:cf:87:0a:fb:2f:6d:db:1a:9f:47:
cc:20:06:cb:95:43:16:cf:ca:dc:03:99:6e:2e:79:ff:94:55:
bb:bc:0f:64:2d:12:66:82:51:30:3f:81:ac:12:f5:fe:c5:5b:
f2:41:92:e5:e8:a2:38:9c:40:56:29:76:ad:39:95:dd:14:cf:
1e:40:c0:fa:eb:7a:95:c7:70:39:c3:40:33:88:5e:7a:25:45:
a1:7e:8d:b1:0d:2e:0f:1b:5d:e6:bf:b3:bc:1a:48:a0:4d:0e:
cb:85:1f:af:5d:3c:2e:0d:fe:21:98:0d:44:5a:47:0c:74:c1:
9a:63:51:48:c2:21:0a:19:0e:97:db:11:9f:1d:88:57:a8:6e:
27:94:75:51:9f:88:1f:48:df:b1:41:ea:e4:4d:8d:e4:08:9e:
0b:31:5e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:11 2026 by rpki-client