Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/DOQ8AlxWLE2vY7KBlqArp_D5uNk.roa
File: DOQ8AlxWLE2vY7KBlqArp_D5uNk.roa (raw, json)
Hash identifier: v0cgDIGN25wK3dPZkNRB0dnbjCCauMeW+83WdAY4Puo=
Subject key identifier: 0C:E4:3C:02:5C:56:2C:4D:AF:63:B2:81:96:A0:2B:A7:F0:F9:B8:D9
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 019D52413406B4A2256F9B4F581281782B1F
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/DOQ8AlxWLE2vY7KBlqArp_D5uNk.roa
Signing time: Fri 03 Apr 2026 07:31:38 +0000
ROA not before: Fri 03 Apr 2026 07:31:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215863
IP address blocks: 62.162.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:41:34:06:b4:a2:25:6f:9b:4f:58:12:81:78:2b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Apr 3 07:31:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ce43c025c562c4daf63b28196a02ba7f0f9b8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:64:6f:b0:17:54:13:37:87:8a:a5:cc:39:84:
a4:48:e8:c3:dd:f8:e6:8b:07:8e:51:bf:7f:5e:5f:
a1:17:6b:b0:0d:7a:04:85:17:d9:f6:69:fd:83:04:
23:74:e1:94:cd:80:b0:2a:80:e6:46:92:f5:fb:bc:
55:22:65:f3:c6:63:96:e7:ae:1e:88:8a:9e:2e:ed:
89:6b:ee:06:cf:d2:97:3b:8e:91:9d:dd:9d:e0:c0:
b2:37:7c:33:5e:1a:6a:d2:31:ff:e0:bd:21:6b:ef:
53:3d:ce:ed:7b:3e:51:86:72:f6:36:c0:5d:fa:3f:
0a:ca:cf:94:bd:1e:35:3a:3b:48:90:1f:f6:ff:9a:
36:f2:43:a7:d0:a4:76:88:fe:a6:e7:55:33:85:82:
87:0a:71:2e:0d:9c:4d:bf:6f:84:be:fc:db:6d:db:
3e:b7:8b:c2:ec:3a:4a:15:30:33:5f:ed:d7:87:a7:
3a:e5:02:e0:03:5d:01:d7:64:27:39:0f:94:f3:c6:
22:b7:d1:50:2c:09:c3:5e:39:e5:f7:a6:de:ab:81:
7c:37:f2:b4:15:68:84:fd:a3:d2:34:47:0b:93:40:
68:53:4e:5b:c8:ad:3a:50:ed:4e:d2:d2:86:54:76:
a3:93:05:a5:3c:37:8e:e4:8c:00:b3:54:10:76:2a:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E4:3C:02:5C:56:2C:4D:AF:63:B2:81:96:A0:2B:A7:F0:F9:B8:D9
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/DOQ8AlxWLE2vY7KBlqArp_D5uNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.162.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:25:7d:11:5d:86:9f:b2:86:e0:fd:e7:d6:ed:5e:2f:6a:51:
8c:ee:b1:ee:d3:ae:1f:f8:d3:6c:c3:47:44:b6:ba:e6:6f:b3:
9e:55:a3:c9:5d:b4:8d:50:e3:75:35:59:2e:54:51:e9:62:53:
d3:f3:0d:64:97:71:c9:35:69:d1:89:d6:7b:b4:60:a7:d4:bc:
2e:6d:57:db:af:31:82:e0:c9:12:74:8a:9c:f8:ea:a9:27:6b:
9e:af:5f:d1:bd:ce:67:4d:cb:7d:47:a1:17:ee:71:b8:78:5c:
3b:e3:72:e7:b8:2c:81:2f:76:bf:ef:46:77:a3:a4:df:b6:09:
5e:5b:e3:42:ff:4f:11:96:31:79:f7:fb:ee:d1:ee:ff:5d:1a:
c6:9f:65:23:48:f7:5f:f5:85:3c:e1:9c:16:44:e5:f9:b2:66:
b1:00:e0:60:96:d8:8b:3b:7b:50:c8:34:c4:cf:b0:a4:24:1b:
4a:e4:be:1c:99:47:94:27:46:41:0c:c9:e9:35:32:91:7f:13:
42:0b:a2:2b:78:5f:aa:14:03:f5:86:98:a6:8e:52:64:a1:dd:
49:4e:44:9e:cb:01:f9:4b:dd:a4:80:96:66:cb:9f:a2:37:f5:
2a:c0:02:88:97:a3:8a:f3:5e:0f:8f:a8:e4:22:10:fa:23:f0:
56:ab:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:17 2026 by rpki-client