Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/v7RvCMDdWErq2gHhPzdgbrJTsQc.roa
File: v7RvCMDdWErq2gHhPzdgbrJTsQc.roa (raw, json)
Hash identifier: E7ugE/1PAPmkxbHvkS+3vDDe3Al8BCMsYCFX6+imnqg=
Subject key identifier: BF:B4:6F:08:C0:DD:58:4A:EA:DA:01:E1:3F:37:60:6E:B2:53:B1:07
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01A09FA94C3C2FCBDDEBB7D13F8C09336803
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/v7RvCMDdWErq2gHhPzdgbrJTsQc.roa
Signing time: Mon 14 Sep 2026 11:24:27 +0000
ROA not before: Mon 14 Sep 2026 11:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 62.244.19.0/24 maxlen: 24
62.244.40.0/24 maxlen: 24
62.244.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:a9:4c:3c:2f:cb:dd:eb:b7:d1:3f:8c:09:33:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Sep 14 11:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfb46f08c0dd584aeada01e13f37606eb253b107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:fd:fa:e9:2e:e7:69:fb:ac:62:e7:82:03:
bf:8f:1c:c1:e1:a3:32:85:23:42:9a:0d:d8:76:67:
33:7c:d0:65:45:76:45:43:e6:17:fc:96:76:de:2a:
8b:75:83:c4:e9:c4:39:fc:d0:6d:ab:93:c6:36:ca:
8a:46:3b:b1:17:53:f1:34:32:db:57:ed:1e:5b:16:
55:83:81:24:d2:93:0e:9b:c8:82:de:be:e7:91:54:
53:95:fe:2f:47:dc:74:a3:12:6c:fd:d3:e4:75:6b:
48:03:b9:e3:4e:fd:81:45:2c:4d:ae:4a:dc:6f:fe:
a6:46:08:0e:24:52:13:cb:17:f2:35:4f:e9:38:8c:
90:1a:d7:90:57:13:83:ee:b8:84:d0:1b:08:29:86:
7f:91:f2:dc:e3:b8:5d:eb:7e:83:f1:7b:c3:8b:ff:
36:fe:17:f8:b1:40:02:df:17:b0:c1:09:04:2a:d0:
65:86:02:42:7a:fb:8c:d8:08:37:10:72:06:df:49:
e5:58:57:7c:50:04:22:ca:30:9f:a3:91:07:23:2b:
4d:61:12:d1:3d:9d:9f:29:17:0f:f1:ec:1b:a3:f4:
a0:23:c0:66:4c:1e:be:a9:71:b2:28:ea:dc:75:c2:
f0:a9:64:ef:09:57:36:50:51:12:ad:c2:66:df:45:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B4:6F:08:C0:DD:58:4A:EA:DA:01:E1:3F:37:60:6E:B2:53:B1:07
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/v7RvCMDdWErq2gHhPzdgbrJTsQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.19.0/24
62.244.40.0/24
62.244.63.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ba:f1:4a:b4:15:57:f9:dd:31:cb:11:be:0b:7c:32:36:48:
08:bb:c6:61:99:1c:6f:2d:3c:d0:1b:83:4c:61:db:32:bf:40:
99:02:39:cf:bb:80:92:92:41:fb:e8:65:35:20:e1:7c:c4:96:
06:1f:2b:e1:07:be:b0:6f:6d:f1:f7:66:24:4a:74:eb:7f:ba:
7e:24:54:c7:62:e8:a0:87:88:bf:6f:7a:6f:6c:68:33:c0:b4:
4d:89:fc:68:00:7d:a1:11:56:13:78:a8:8d:4c:9b:ca:81:5f:
ef:1f:c0:1b:8d:77:93:e5:2e:31:ad:1f:48:47:59:89:e8:55:
fb:9d:cf:75:43:e2:c9:92:e1:bb:5e:cf:60:d1:3e:04:35:09:
48:65:f6:18:e7:54:2f:ba:41:05:d2:01:87:4e:47:36:01:1a:
c8:e2:68:2c:b8:da:c5:42:0f:e4:ed:60:dc:1e:55:af:5d:62:
d3:26:b8:ef:fc:41:99:c5:90:2f:2f:2f:e5:0a:42:c0:da:78:
71:5a:2f:c7:13:18:64:40:88:d7:bd:c5:e9:6e:cb:b6:83:c2:
cc:71:a2:f0:89:f4:3a:0d:91:6a:7c:23:ee:25:08:fd:53:26:
12:9f:bb:3c:eb:14:39:1d:e6:23:c3:e1:9d:8e:fb:95:7d:c5:
de:ae:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:09:22 2026 by rpki-client