Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/7M7W3YU9VkGH1n9VKUQ6lN-uPXE.roa
File: 7M7W3YU9VkGH1n9VKUQ6lN-uPXE.roa (raw, json)
Hash identifier: 7Kjf7QXiHqRMdhYCby7XVrJVdqbbCVJGhej/irKWyFQ=
Subject key identifier: EC:CE:D6:DD:85:3D:56:41:87:D6:7F:55:29:44:3A:94:DF:AE:3D:71
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01A0AF512A1478A61B18A8D59F3FA679EE21
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/7M7W3YU9VkGH1n9VKUQ6lN-uPXE.roa
Signing time: Thu 17 Sep 2026 12:22:07 +0000
ROA not before: Thu 17 Sep 2026 12:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 62.244.39.0/24 maxlen: 24
62.244.47.0/24 maxlen: 24
62.244.54.0/24 maxlen: 24
193.193.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:51:2a:14:78:a6:1b:18:a8:d5:9f:3f:a6:79:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Sep 17 12:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecced6dd853d564187d67f5529443a94dfae3d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:a0:d8:75:a5:83:55:83:e3:0a:a5:3a:68:
0d:8f:14:5d:37:19:a2:ab:c2:e8:62:cd:56:82:5a:
d4:2a:8a:a9:8d:e9:9a:db:b1:30:98:88:65:e3:65:
cd:95:c6:13:96:1c:68:57:ac:88:df:2d:7d:0a:9e:
2e:a0:05:21:38:a3:c8:80:97:25:1d:ab:3e:6c:1a:
25:5d:6b:ab:da:97:7f:c6:6d:61:3e:0c:ef:11:8c:
af:fe:ed:c5:53:2e:64:62:97:a6:f8:3d:97:b5:2f:
e2:62:2a:be:58:83:4a:a2:cf:bf:88:72:33:55:fa:
2a:ed:f4:bf:cd:e3:8b:f7:e2:68:ce:1a:d0:e9:d7:
8a:4c:f6:c2:f2:c2:db:b7:01:35:0b:cf:9e:6a:70:
0b:60:f8:25:ad:9d:6c:a8:ae:1c:35:14:a1:7f:42:
b8:88:67:40:a2:33:58:16:16:a6:1b:d6:cc:04:5b:
eb:f7:ec:f8:22:1e:76:d2:a9:fa:e6:a6:99:3b:53:
30:65:be:f4:17:47:43:e4:7c:7f:f2:2e:d6:6a:76:
b7:85:e5:d4:f2:9f:04:87:d9:ec:6f:fc:e2:40:cf:
a8:71:bb:e4:fc:a7:ca:09:c5:80:1f:6f:13:5b:ac:
b9:ee:38:ea:16:6b:23:90:b9:60:3d:1a:59:56:77:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CE:D6:DD:85:3D:56:41:87:D6:7F:55:29:44:3A:94:DF:AE:3D:71
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/7M7W3YU9VkGH1n9VKUQ6lN-uPXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.39.0/24
62.244.47.0/24
62.244.54.0/24
193.193.209.0/24
Signature Algorithm: sha256WithRSAEncryption
76:83:13:24:00:cd:a2:1c:98:c5:db:39:ee:87:5d:58:3b:04:
b0:ec:d6:1b:2e:99:2c:00:61:0e:cc:08:3a:1d:d9:e2:29:65:
ed:f0:a2:17:01:93:77:40:b3:65:f3:1a:fb:61:ef:ff:57:cc:
7e:65:37:7d:d7:3e:b8:8d:8e:9c:b2:1f:b0:07:4a:20:82:37:
8f:70:f8:13:5d:da:2e:fd:c9:fd:cd:95:d4:74:98:44:bf:0a:
66:e4:e4:29:f2:8b:58:aa:86:fa:d4:ef:6f:3c:90:e1:27:29:
94:f7:1b:96:27:2f:15:39:94:92:b7:55:40:8f:99:37:bc:4f:
fc:51:03:3a:25:43:c1:3d:20:1f:3e:14:2f:c9:d6:1c:60:10:
54:f7:8d:e7:ba:bf:43:d2:d3:9b:fb:6c:df:e4:ff:1e:51:37:
5b:df:a9:40:4a:9c:ac:12:cd:52:12:26:ea:c5:04:05:a6:e7:
28:e8:d5:8e:93:c7:fa:57:9e:8f:44:c8:42:63:e0:bf:e4:0b:
32:85:62:f8:1f:61:aa:e9:81:d4:af:27:d0:fa:ce:41:9d:95:
2c:b7:c6:3a:b5:23:d6:f6:f0:2e:1f:9d:6d:16:a3:4b:4a:02:
8e:fe:83:f0:e8:e8:37:5b:41:35:fa:8d:1b:86:34:d4:bf:6d:
1a:e4:41:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:07:44 2026 by rpki-client