Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OW1voaa5G2770cdqxcoEi0e3cZ8.roa
File: OW1voaa5G2770cdqxcoEi0e3cZ8.roa (raw, json)
Hash identifier: lDIFVahSC83Xa4PpYQ/CNEiycbxgMsikcPLVnl+tK+Y=
Subject key identifier: 39:6D:6F:A1:A6:B9:1B:6E:FB:D1:C7:6A:C5:CA:04:8B:47:B7:71:9F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 019C0EAEECAFF409663086D736BEA2CA258D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OW1voaa5G2770cdqxcoEi0e3cZ8.roa
Signing time: Fri 30 Jan 2026 11:34:30 +0000
ROA not before: Fri 30 Jan 2026 11:34:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200123
IP address blocks: 62.89.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0e:ae:ec:af:f4:09:66:30:86:d7:36:be:a2:ca:25:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 30 11:34:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=396d6fa1a6b91b6efbd1c76ac5ca048b47b7719f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:21:a6:87:9a:60:4d:b7:48:4b:1b:a7:57:
5b:ee:41:0e:a2:ec:e3:44:c8:48:96:cc:e1:04:2d:
c1:66:d7:65:47:ac:8e:35:4d:af:03:67:8f:55:7c:
5e:b0:75:23:43:29:f2:73:b2:d7:cc:b0:a5:d4:45:
06:a3:be:80:e5:11:d3:e1:be:2b:f4:42:ff:70:f7:
9a:0b:b7:fa:66:62:ad:25:90:bd:0c:99:21:3a:d0:
93:2e:4a:9d:d9:e0:2d:4d:13:7d:3b:1e:80:54:c9:
cf:01:9e:94:d8:90:b2:0a:83:32:7d:5a:f8:00:86:
c1:b0:d1:6d:4a:61:0a:5d:9a:c8:5b:62:88:61:ec:
2b:4e:50:f8:94:1a:db:84:2e:2e:ec:53:f9:81:60:
88:da:3c:55:84:3b:4a:65:fb:55:6f:92:23:f7:f9:
b1:23:9b:4f:52:33:5a:b7:db:b7:da:db:92:67:02:
a7:78:26:65:7c:5b:6c:3a:34:a6:7f:e1:4f:2f:77:
cd:71:d3:6a:1c:a4:2e:1a:a3:42:a3:b4:7e:84:59:
2b:28:0f:d7:05:07:27:1a:46:5c:5a:6c:02:ea:8e:
c7:7e:29:9a:50:bf:99:8f:8b:c2:b5:3e:60:62:df:
ca:e9:6e:0c:80:b2:37:0a:5e:f4:f2:3f:d8:20:1b:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6D:6F:A1:A6:B9:1B:6E:FB:D1:C7:6A:C5:CA:04:8B:47:B7:71:9F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OW1voaa5G2770cdqxcoEi0e3cZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.214.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7f:f8:e0:ad:79:8a:c3:40:1d:ac:4a:dc:f4:82:ad:53:76:
74:04:a2:48:29:5e:50:3f:21:13:37:3c:4d:ea:37:6d:73:1a:
69:47:48:18:be:91:fb:e8:46:28:7e:4c:6e:8e:a8:55:37:02:
3b:ca:26:bc:74:14:da:c9:d7:94:fd:88:92:66:2d:9e:bb:11:
08:82:f8:e3:2d:08:30:1d:21:f0:e0:9f:8a:5a:e9:50:76:3b:
d7:fe:35:5c:8a:89:b4:c3:96:cd:31:8d:36:e2:92:58:52:55:
ed:ca:2a:17:77:47:c2:b8:5a:dc:b5:82:51:98:49:a0:48:ab:
f9:d3:41:5d:cc:86:69:9e:c1:e6:48:b4:e6:b9:53:7e:4f:21:
d1:82:16:26:a0:da:16:b3:00:31:57:93:e6:01:42:33:56:9c:
a2:1b:38:9b:de:b6:0c:f3:ff:76:e0:4d:27:76:54:c6:be:84:
a9:e7:cb:7c:2b:01:75:e4:9a:82:ca:bb:72:1d:25:a3:4b:0e:
98:9b:9a:a5:be:f3:30:62:0b:56:5b:7b:5b:9c:c6:96:46:3c:
5d:11:3b:a7:e4:f1:ca:8f:0b:71:7e:e2:93:4e:21:73:7e:58:
44:43:8c:48:01:80:67:64:e7:4a:5a:72:ad:a4:71:7c:01:1c:
ba:2e:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:09:55 2026 by rpki-client