Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/khJQh_gOJAhdH_kny7OeYEA7vpE.roa
File: khJQh_gOJAhdH_kny7OeYEA7vpE.roa (raw, json)
Hash identifier: APga9Ti26SSiaeHSYmmvz0zsM85wvjZCduJHpw3sCos=
Subject key identifier: 92:12:50:87:F8:0E:24:08:5D:1F:F9:27:CB:B3:9E:60:40:3B:BE:91
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 019D5243C2D8AF7F9E01860778B9293B671D
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/khJQh_gOJAhdH_kny7OeYEA7vpE.roa
Signing time: Fri 03 Apr 2026 07:34:25 +0000
ROA not before: Fri 03 Apr 2026 07:34:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198159
IP address blocks: 62.162.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:43:c2:d8:af:7f:9e:01:86:07:78:b9:29:3b:67:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Apr 3 07:34:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92125087f80e24085d1ff927cbb39e60403bbe91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:3a:97:c1:85:49:b2:bd:36:ba:48:f2:b7:
e0:47:e1:c7:34:91:15:84:4f:e7:07:d1:64:14:9a:
4e:2b:a3:e7:09:bf:e0:8c:bf:bb:95:62:1c:49:d5:
7a:24:8e:9b:c4:a0:2e:f2:e0:22:d3:2f:2a:17:7a:
d2:19:f8:30:1f:37:64:47:08:df:36:0c:d8:9e:a2:
5c:66:3f:1a:ae:9b:70:8f:b9:3d:09:6f:70:68:f3:
52:9f:db:f7:16:f8:f5:c2:96:11:66:b3:ba:64:7e:
5e:8c:be:ca:44:3f:34:1e:0b:b7:72:73:09:7f:40:
dd:3a:75:fe:bc:5c:79:82:e0:23:ed:dd:7e:a8:28:
62:46:bd:19:cf:2e:6a:48:c1:f5:e2:19:47:21:8b:
d8:64:fc:6e:81:32:52:1c:f0:cb:8b:a8:66:20:4a:
7d:98:88:e5:af:9f:c6:c2:c6:53:a1:65:d3:a7:b5:
58:b4:ad:f9:cb:78:cc:a7:8d:e9:5e:b9:10:85:55:
7f:48:08:8b:c2:5d:ef:48:b8:69:01:7f:d3:1b:88:
36:79:56:3b:22:e7:cf:39:5b:87:4a:ae:ae:1c:03:
81:c8:fd:1b:7d:63:90:6b:0d:1c:76:b9:10:8e:59:
4d:7c:62:91:42:ec:af:0b:80:c5:57:11:44:0b:c5:
dc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:12:50:87:F8:0E:24:08:5D:1F:F9:27:CB:B3:9E:60:40:3B:BE:91
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/khJQh_gOJAhdH_kny7OeYEA7vpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.162.122.0/24
Signature Algorithm: sha256WithRSAEncryption
98:80:06:5d:59:82:73:e4:08:d2:53:59:7b:d9:f8:e2:8c:c0:
b8:09:42:a7:97:2c:a3:a4:30:5f:63:30:fd:a1:ca:85:61:e0:
89:00:c7:91:67:26:40:87:f6:0b:41:46:c0:f0:a8:13:9a:18:
2e:05:a2:4f:2d:ac:71:6d:b2:c5:f5:c6:0c:7a:ea:2c:fd:d9:
62:81:2f:8e:09:28:2c:ae:fb:f3:8e:f9:22:6a:71:98:56:bd:
5d:bf:15:a6:ca:8f:df:bc:5d:e4:13:de:2a:7a:b5:99:3e:ae:
77:f5:7b:3a:29:8a:6e:e5:07:7b:5a:62:8c:d1:cb:08:1e:39:
c0:61:d2:00:46:2d:f8:20:16:d6:34:c5:f6:38:9e:54:dc:a9:
25:f4:58:61:43:cc:6c:eb:cd:13:a1:10:36:fd:b6:b6:fb:c1:
a6:57:54:cc:97:c5:db:6e:75:81:27:46:5b:84:7b:74:09:44:
0e:a8:bb:ad:3f:24:8f:53:0a:aa:ee:a3:69:86:57:79:98:2c:
52:1b:18:c5:00:82:9f:e1:a2:7c:e7:16:93:68:ea:d5:72:a3:
5b:d9:be:cd:55:30:66:f0:de:1b:39:df:1f:f2:c7:78:f1:e7:
ee:9c:dc:18:c8:d6:78:b3:24:c0:d6:a0:dc:75:33:ad:4a:51:
6c:3b:87:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1SQ8LYr3+eAYYHeLkpO2cdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMjYxYThkZjUzMjkyYzczMGUyYWUxZGZjZmM0ZmUzZmY3
NmIxZDAwHhcNMjYwNDAzMDczNDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjEyNTA4N2Y4MGUyNDA4NWQxZmY5MjdjYmIzOWU2MDQwM2JiZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIk6l8GFSbK9NrpI8rfgR+HHNJEV
hE/nB9FkFJpOK6PnCb/gjL+7lWIcSdV6JI6bxKAu8uAi0y8qF3rSGfgwHzdkRwjf
NgzYnqJcZj8arptwj7k9CW9waPNSn9v3Fvj1wpYRZrO6ZH5ejL7KRD80Hgu3cnMJ
f0DdOnX+vFx5guAj7d1+qChiRr0Zzy5qSMH14hlHIYvYZPxugTJSHPDLi6hmIEp9
mIjlr5/GwsZToWXTp7VYtK35y3jMp43pXrkQhVV/SAiLwl3vSLhpAX/TG4g2eVY7
IufPOVuHSq6uHAOByP0bfWOQaw0cdrkQjllNfGKRQuyvC4DFVxFEC8XcFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJISUIf4DiQIXR/5J8uznmBAO76RMB8GA1UdIwQY
MBaAFK4mGo31MpLHMOKuHfz8T+P/drHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xYTg0OWUtODYxYy00YzRkLWJjZjQt
NTY5NWQ4OWQ3YjM2LzEva2hKUWhfZ09KQWhkSF9rbnk3T2VZRUE3dnBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xYTg0OWUtODYxYy00YzRkLWJjZjQtNTY5NWQ4OWQ3YjM2
LzEvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPqJ6MA0G
CSqGSIb3DQEBCwUAA4IBAQCYgAZdWYJz5AjSU1l72fjijMC4CUKnlyyjpDBfYzD9
ocqFYeCJAMeRZyZAh/YLQUbA8KgTmhguBaJPLaxxbbLF9cYMeuos/dligS+OCSgs
rvvzjvkianGYVr1dvxWmyo/fvF3kE94qerWZPq539Xs6KYpu5Qd7WmKM0csIHjnA
YdIARi34IBbWNMX2OJ5U3Kkl9FhhQ8xs680ToRA2/ba2+8GmV1TMl8XbbnWBJ0Zb
hHt0CUQOqLutPySPUwqq7qNphld5mCxSGxjFAIKf4aJ85xaTaOrVcqNb2b7NVTBm
8N4bOd8f8sd48efunNwYyNZ4syTA1qDcdTOtSlFsO4eR
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:03:43 2026 by rpki-client