Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KoPizvLSVywBbg08rAKjhCvM5Zw.roa
File: KoPizvLSVywBbg08rAKjhCvM5Zw.roa (raw, json)
Hash identifier: 1hOsRQA8YFFlPTzQhPltypgLE+HREIhXOU8drBfH1EQ=
Subject key identifier: 2A:83:E2:CE:F2:D2:57:2C:01:6E:0D:3C:AC:02:A3:84:2B:CC:E5:9C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019CE7E38434C9A4506EE4C9E93CC7667108
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KoPizvLSVywBbg08rAKjhCvM5Zw.roa
Signing time: Fri 13 Mar 2026 15:49:33 +0000
ROA not before: Fri 13 Mar 2026 15:49:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47585
IP address blocks: 62.76.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:e3:84:34:c9:a4:50:6e:e4:c9:e9:3c:c7:66:71:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 13 15:49:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a83e2cef2d2572c016e0d3cac02a3842bcce59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:17:1f:d7:24:3b:32:a6:c7:39:84:72:ec:
03:62:aa:33:1c:03:f5:61:41:6d:c0:13:5d:ee:90:
77:59:a5:ff:17:67:ed:59:67:65:24:f5:7b:12:cb:
e6:51:43:58:33:84:56:b6:75:5e:5c:32:e8:3c:f2:
d7:63:f2:56:da:ad:ae:b6:4f:e1:37:c6:0e:7a:f6:
b1:8c:ad:92:39:04:f1:32:4e:71:39:a2:f6:0b:47:
01:63:20:65:df:36:de:64:c2:e4:70:67:ad:83:ca:
76:2a:7a:32:5d:ca:8b:89:f5:1e:d6:5b:f3:a5:75:
5b:7b:f2:b6:24:1a:48:9d:7c:ab:f0:cf:43:fc:27:
f7:4f:06:ba:7f:7d:af:61:9d:66:35:84:6d:18:be:
62:df:83:93:b0:3b:fc:88:6e:91:4d:1e:ed:d4:8f:
0c:60:c4:b1:c6:ea:54:ec:ae:0a:9d:0f:d9:9a:9d:
3a:65:82:c7:39:79:0a:a8:bc:9a:d7:12:4f:e9:8b:
77:26:df:98:f8:6b:41:4a:ac:64:01:ca:93:48:9b:
91:d9:66:07:15:ef:bd:e6:61:d2:52:50:bd:81:f2:
3e:71:aa:8d:d0:b6:0f:a7:88:21:cb:07:29:59:b2:
21:e6:74:ef:db:eb:34:9e:24:b8:67:92:02:0a:75:
fd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:83:E2:CE:F2:D2:57:2C:01:6E:0D:3C:AC:02:A3:84:2B:CC:E5:9C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KoPizvLSVywBbg08rAKjhCvM5Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
Signature Algorithm: sha256WithRSAEncryption
93:89:0a:2b:ee:cb:4d:04:ab:9b:2e:7e:64:df:9e:2a:b8:10:
4b:39:74:99:4c:77:2a:94:51:4e:ed:cb:85:55:1c:04:a3:08:
a7:22:16:bb:ee:b8:e5:3e:b4:0d:4e:38:d8:22:66:a7:e1:b0:
31:f1:e1:ed:0c:67:b9:cf:65:eb:68:b5:58:c9:33:14:43:d5:
9e:5b:e4:f4:a0:b9:01:56:9b:75:23:29:d5:34:51:21:29:1b:
82:cf:04:28:6d:ab:03:d9:5a:43:94:2b:6d:33:d6:1a:8c:11:
7a:4d:c6:18:68:68:a2:ce:7f:ec:c2:97:f7:55:0c:a2:4b:72:
e8:52:21:b2:d4:e3:02:a1:8b:40:19:c6:11:36:45:e5:a1:ca:
c1:c3:98:9a:f7:8e:1e:14:f8:3b:68:15:82:27:ad:97:e8:60:
1e:47:4c:47:a4:1c:91:7e:5d:57:cb:e4:82:2e:54:98:e0:06:
84:e8:6b:35:e4:50:4e:91:ac:05:93:73:3b:88:54:c5:75:51:
9a:7f:47:fb:cd:0a:13:02:73:36:47:fe:fc:63:aa:17:f1:82:
48:26:02:a6:22:c0:d0:f0:37:8b:ff:1a:d3:93:e9:cb:b1:75:
05:70:9b:8f:33:65:76:54:d6:c2:38:29:a1:7b:2b:5f:1c:e9:
cb:9a:23:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:23 2026 by rpki-client