Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/SdNlaYPSbaeDqZOnIRtsN_M7XII.roa
File: SdNlaYPSbaeDqZOnIRtsN_M7XII.roa (raw, json)
Hash identifier: SNDTIgfXGgP+vB180bD2J1T2+CYn/lMRBi3AW88QHXg=
Subject key identifier: 49:D3:65:69:83:D2:6D:A7:83:A9:93:A7:21:1B:6C:37:F3:3B:5C:82
Certificate issuer: /CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Certificate serial: 019F23686AF3C7CD7F1C79D2D539F0164A7C
Authority key identifier: 46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/SdNlaYPSbaeDqZOnIRtsN_M7XII.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5588
IP address blocks: 62.201.16.0/20 maxlen: 20
2a06:8080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6a:f3:c7:cd:7f:1c:79:d2:d5:39:f0:16:4a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49d3656983d26da783a993a7211b6c37f33b5c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f2:51:de:d6:ac:f1:f8:a3:1f:54:25:d5:29:
ce:5b:9c:b9:ae:6f:46:8c:bd:6b:8a:66:6c:9c:d9:
b6:ed:72:41:8d:9e:85:06:ef:86:ee:44:d2:c6:55:
a1:74:db:4b:c1:72:72:62:ab:dc:f1:fa:19:56:75:
75:17:62:dd:93:3d:ec:80:05:94:e2:49:13:1a:e4:
e6:a4:41:df:18:cc:b4:6b:52:36:82:4e:ce:3b:a3:
55:85:41:d6:89:ea:25:e4:70:68:bc:70:4d:33:8e:
13:3c:10:f1:fb:4c:7b:84:ab:e4:9c:0c:46:91:b4:
be:51:2e:69:13:b7:65:55:c8:e7:34:13:5b:88:e8:
b2:41:ef:bc:e0:de:c2:36:4a:cb:3e:9a:bc:18:e5:
f5:1a:09:aa:73:72:89:13:f0:92:02:13:46:42:8a:
6c:af:0d:79:46:14:89:bc:76:49:27:78:d0:ae:80:
33:d4:f1:47:9e:2e:18:c1:4b:66:6c:34:df:e5:91:
b5:dc:cb:a7:62:00:97:bf:8a:23:2d:f9:73:be:eb:
53:d7:b3:59:60:e7:03:fe:57:db:15:de:bb:eb:07:
38:c5:6a:84:44:41:83:82:81:4c:a7:9d:09:c4:5c:
9c:0b:b4:f9:85:a8:88:b7:5f:59:c6:4c:2e:fb:6e:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D3:65:69:83:D2:6D:A7:83:A9:93:A7:21:1B:6C:37:F3:3B:5C:82
X509v3 Authority Key Identifier:
keyid:46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/SdNlaYPSbaeDqZOnIRtsN_M7XII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.16.0/20
IPv6:
2a06:8080::/29
Signature Algorithm: sha256WithRSAEncryption
21:ba:21:7d:ea:5b:9b:42:d6:16:81:a8:f5:b6:ba:ff:64:14:
d2:d4:ba:d7:de:a0:4b:5a:cb:a3:72:24:3a:7c:ac:b9:c4:68:
a5:66:5a:e9:12:85:61:ff:fa:64:4c:b0:34:01:f4:a8:24:5c:
8d:e3:0b:25:00:50:79:02:5a:f2:6a:4e:d2:b6:f2:47:23:01:
da:4e:0a:89:ad:9b:cc:55:e1:d3:7e:20:9d:f5:b1:2a:fa:f0:
bc:20:45:d1:ec:b7:58:7d:89:0f:7f:8d:eb:af:5d:b1:6e:a0:
a1:5f:24:c1:9c:3b:cb:ce:53:fc:33:27:05:1b:6e:25:89:1b:
b0:bf:4a:d0:49:ec:bc:6f:53:5d:1e:f9:9e:35:a9:34:8b:95:
cf:a3:1e:4d:f4:5c:8c:cb:a1:5d:27:0f:5c:e7:3c:f2:96:bd:
d8:8e:14:3b:75:5e:25:69:27:3a:7c:49:9b:fb:77:1f:26:fe:
e9:54:dc:51:5e:46:84:b7:c3:ae:66:5c:2a:5b:dc:b6:45:4b:
88:b3:0b:ee:aa:82:de:7a:23:ca:e3:2a:f6:21:d4:21:61:ad:
49:0d:7d:6a:75:b1:29:37:4a:d2:dd:40:80:f7:9e:e4:e7:32:
1a:66:0b:9c:26:d7:65:ce:ba:5f:bf:2f:f6:9c:a5:84:84:c8:
b0:18:a6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:35 2026 by rpki-client