Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/Op3C_DnavVNe5k2EbCgyLm3qT1Q.roa
File: Op3C_DnavVNe5k2EbCgyLm3qT1Q.roa (raw, json)
Hash identifier: I1NgmN+EF7WGvinMVFhL0bUgaYpjS0PDMn8hXRrpPiY=
Subject key identifier: 3A:9D:C2:FC:39:DA:BD:53:5E:E6:4D:84:6C:28:32:2E:6D:EA:4F:54
Certificate issuer: /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial: 01A0C8C518ABCA4443D9F6632E617E742553
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/Op3C_DnavVNe5k2EbCgyLm3qT1Q.roa
Signing time: Tue 22 Sep 2026 10:59:15 +0000
ROA not before: Tue 22 Sep 2026 10:59:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6893
IP address blocks: 62.220.128.0/19 maxlen: 19
62.220.149.0/24 maxlen: 24
62.220.150.0/24 maxlen: 24
62.220.158.0/24 maxlen: 24
2001:788::/29 maxlen: 29
2001:788::/32 maxlen: 32
2001:789::/32 maxlen: 32
2001:78a::/40 maxlen: 40
2001:78c::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c5:18:ab:ca:44:43:d9:f6:63:2e:61:7e:74:25:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Validity
Not Before: Sep 22 10:59:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a9dc2fc39dabd535ee64d846c28322e6dea4f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:56:83:de:a1:8d:ed:66:96:93:d5:3c:d0:
62:0f:01:c7:14:a3:33:26:28:3e:d7:74:dd:1f:61:
10:6b:ee:4c:44:b9:bf:c9:35:3d:d3:6f:42:97:ca:
58:e3:92:c0:2c:51:49:23:4a:44:cd:1a:99:f9:e8:
40:a7:1f:88:e3:a7:79:87:d0:6e:b3:a9:82:20:c6:
cd:43:49:e7:9e:3a:27:05:06:d8:5b:20:e6:73:f4:
1e:93:a4:cf:d2:08:5f:c2:2d:55:9e:a2:1b:6f:5d:
26:43:6e:3b:b4:75:04:e0:b0:cb:0f:87:70:49:41:
fd:0c:63:9e:c3:df:24:e4:ae:9d:21:09:b4:89:5d:
a5:78:ca:4e:04:9e:02:d0:3a:ae:64:8c:70:3c:ad:
d5:80:d0:13:af:3c:8a:7c:e6:76:e7:5d:f4:a9:65:
c9:b6:d1:36:89:1e:49:f5:25:29:ac:52:49:ac:32:
2c:7e:e2:8d:59:00:b7:33:80:2e:68:31:78:a6:2d:
8b:14:16:2e:2e:95:d1:73:52:de:87:46:d3:4b:23:
08:89:e5:24:fe:3e:ca:8d:2d:e3:7d:50:0c:b2:7b:
92:4a:11:26:14:b5:af:70:ed:cc:6f:db:6a:e2:20:
3b:cb:02:48:7a:70:5e:91:06:ea:27:99:9f:aa:40:
78:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:C2:FC:39:DA:BD:53:5E:E6:4D:84:6C:28:32:2E:6D:EA:4F:54
X509v3 Authority Key Identifier:
keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/Op3C_DnavVNe5k2EbCgyLm3qT1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.128.0/19
IPv6:
2001:788::/29
Signature Algorithm: sha256WithRSAEncryption
4e:af:c3:34:f7:d5:f1:24:a1:87:12:f2:2b:82:f6:64:3b:6e:
d9:52:cd:22:4c:30:95:4c:ad:41:8e:8e:8c:09:8f:e5:3d:24:
06:27:fa:59:cc:60:c9:30:e3:43:dd:c1:87:75:c0:28:48:d7:
be:25:bc:80:9d:75:f5:13:1e:93:e9:34:c9:cf:2c:b3:d5:03:
cb:1d:d0:14:a2:42:6c:07:1d:3e:23:81:f0:30:cc:bb:0f:fd:
5e:6d:4f:dc:5c:ed:e7:d6:f3:fd:a6:63:de:e9:d8:f6:21:9f:
99:9b:f5:05:f9:a0:15:0d:c3:83:dd:7c:c7:f6:db:7d:fe:14:
a7:ed:2a:02:f4:8e:41:cf:e5:ea:07:3e:af:eb:cf:2e:a7:f6:
3e:09:5a:ac:9c:61:50:47:5a:34:57:57:09:61:1c:f4:af:f7:
ad:0c:8c:5c:85:33:df:49:06:02:3b:ca:f3:bd:22:49:76:66:
8d:9f:02:ea:c8:15:fa:96:bd:3e:3f:0d:25:6a:2e:22:37:34:
9d:af:3b:94:36:67:46:e3:9f:7f:5e:ab:9e:08:a0:b4:52:65:
78:4f:0f:82:82:89:8f:ca:f9:ab:dc:af:ac:35:9d:55:62:e3:
ee:77:8e:27:cb:57:03:78:a0:c0:ed:56:ce:db:aa:4e:72:d7:
3a:f4:82:b1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaDIxRirykRD2fZjLmF+dCVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZThjNzhmMTYxMzk3YWUxZGJkMGFjMzIyNTg0ZjYyZmI3
NDAwOTcwHhcNMjYwOTIyMTA1OTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTlkYzJmYzM5ZGFiZDUzNWVlNjRkODQ2YzI4MzIyZTZkZWE0ZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwFWg96hje1mlpPVPNBiDwHHFKMz
Jig+13TdH2EQa+5MRLm/yTU9029Cl8pY45LALFFJI0pEzRqZ+ehApx+I46d5h9Bu
s6mCIMbNQ0nnnjonBQbYWyDmc/Qek6TP0ghfwi1VnqIbb10mQ247tHUE4LDLD4dw
SUH9DGOew98k5K6dIQm0iV2leMpOBJ4C0DquZIxwPK3VgNATrzyKfOZ25130qWXJ
ttE2iR5J9SUprFJJrDIsfuKNWQC3M4AuaDF4pi2LFBYuLpXRc1Leh0bTSyMIieUk
/j7KjS3jfVAMsnuSShEmFLWvcO3Mb9tq4iA7ywJIenBekQbqJ5mfqkB4pwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDqdwvw52r1TXuZNhGwoMi5t6k9UMB8GA1UdIwQY
MBaAFFrox48WE5euHb0KwyJYT2L7dACXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZDI3YmItZjg1Yy00YmZkLWIxYzMt
NDdiY2QzOWMzZDg2LzEvT3AzQ19EbmF2Vk5lNWsyRWJDZ3lMbTNxVDFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80ZDI3YmItZjg1Yy00YmZkLWIxYzMtNDdiY2QzOWMzZDg2
LzEvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFPtyAMA0E
AgACMAcDBQMgAQeIMA0GCSqGSIb3DQEBCwUAA4IBAQBOr8M099XxJKGHEvIrgvZk
O27ZUs0iTDCVTK1Bjo6MCY/lPSQGJ/pZzGDJMOND3cGHdcAoSNe+JbyAnXX1Ex6T
6TTJzyyz1QPLHdAUokJsBx0+I4HwMMy7D/1ebU/cXO3n1vP9pmPe6dj2IZ+Zm/UF
+aAVDcOD3XzH9tt9/hSn7SoC9I5Bz+XqBz6v688up/Y+CVqsnGFQR1o0V1cJYRz0
r/etDIxchTPfSQYCO8rzvSJJdmaNnwLqyBX6lr0+Pw0lai4iNzSdrzuUNmdG459/
XqueCKC0UmV4Tw+CgomPyvmr3K+sNZ1VYuPud44ny1cDeKDA7VbO26pOctc69IKx
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:02:01 2026 by rpki-client