Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/2poHYsOwcX0HSl5_dLuIAYRHqHI.roa
File: 2poHYsOwcX0HSl5_dLuIAYRHqHI.roa (raw, json)
Hash identifier: OnUon0gaI4Cl2dlwtoj/zSJMueD3/8hyVdrmBrmiqbs=
Subject key identifier: DA:9A:07:62:C3:B0:71:7D:07:4A:5E:7F:74:BB:88:01:84:47:A8:72
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019D29399EBADF61D65D0F8FA787CA7EFB50
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/2poHYsOwcX0HSl5_dLuIAYRHqHI.roa
Signing time: Thu 26 Mar 2026 08:18:55 +0000
ROA not before: Thu 26 Mar 2026 08:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 62.217.1.0/24 maxlen: 24
62.217.7.0/24 maxlen: 24
62.217.16.0/24 maxlen: 24
62.217.17.0/24 maxlen: 24
62.217.18.0/24 maxlen: 24
62.217.19.0/24 maxlen: 24
62.217.20.0/24 maxlen: 24
62.217.21.0/24 maxlen: 24
62.217.22.0/24 maxlen: 24
62.217.23.0/24 maxlen: 24
212.180.111.0/24 maxlen: 24
212.180.112.0/24 maxlen: 24
212.180.113.0/24 maxlen: 24
212.180.114.0/24 maxlen: 24
212.180.117.0/24 maxlen: 24
212.180.118.0/24 maxlen: 24
212.180.119.0/24 maxlen: 24
212.180.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:39:9e:ba:df:61:d6:5d:0f:8f:a7:87:ca:7e:fb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Mar 26 08:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da9a0762c3b0717d074a5e7f74bb88018447a872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:94:e7:1c:34:be:49:a8:0d:34:25:4f:2e:
de:2b:47:15:18:32:cb:9e:4d:b9:6b:31:5d:60:d0:
88:bf:c5:5e:c3:e5:7f:c5:13:f3:36:02:1b:59:04:
c4:be:4c:f3:c4:fc:c6:25:8a:3f:9b:22:9f:c4:1b:
f2:58:43:1a:c2:8b:4a:b9:78:b2:19:1f:40:06:37:
5d:96:48:ab:9d:f3:7e:f9:75:3e:2a:31:45:11:6c:
e9:37:5c:f4:53:bd:18:5d:35:e0:d8:f4:65:5d:0b:
b4:f4:1a:6c:ee:a6:1d:64:6d:fb:bd:f6:fe:82:27:
ee:2b:04:6b:99:19:29:45:98:2f:ac:6c:29:76:8e:
18:e9:2c:0f:4a:5c:b2:3c:b2:7a:af:83:d9:ab:66:
a3:59:46:ee:d8:38:3a:3f:ee:8b:8f:8f:2a:92:f6:
59:29:8d:5c:18:33:ef:4d:49:48:71:5c:ac:6d:47:
25:04:b2:ed:2b:1b:d5:df:95:e0:67:68:d5:8c:71:
79:1b:d9:be:18:4c:a6:2e:6e:98:63:94:fe:2d:3d:
fa:f6:81:5d:a2:16:e7:46:48:af:6b:44:1d:a4:f8:
59:c5:dc:e2:68:a1:23:ae:47:e4:0b:a4:b1:6d:43:
e6:c7:e9:ad:6e:97:56:61:37:0c:26:06:60:b2:5e:
ad:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9A:07:62:C3:B0:71:7D:07:4A:5E:7F:74:BB:88:01:84:47:A8:72
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/2poHYsOwcX0HSl5_dLuIAYRHqHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.217.1.0/24
62.217.7.0/24
62.217.16.0/21
212.180.111.0-212.180.114.255
212.180.117.0-212.180.119.255
212.180.125.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a3:92:b2:20:7b:25:5b:b1:95:88:aa:92:e0:a1:c6:ed:28:
aa:45:00:5d:f7:3a:3c:55:29:37:29:25:f1:21:32:bb:48:59:
f3:62:4e:fd:96:cb:d3:86:5b:fe:2b:76:1b:57:3f:01:ca:02:
4b:d8:e2:5b:26:43:5a:c3:89:f5:0b:fc:59:2b:bb:c9:92:82:
df:31:e5:9e:34:86:87:68:b6:25:bd:23:ec:a2:a7:3d:b6:29:
42:fd:a4:1e:c5:f6:5e:f6:b9:fa:25:7c:32:a1:dc:bc:d4:d5:
03:21:85:8c:14:95:d6:01:e5:23:cc:0e:c2:6c:e0:3c:a5:15:
32:db:86:c1:83:51:9a:ad:ed:ae:f8:da:32:74:6c:bf:e4:7d:
2d:c5:1b:c8:2e:f5:06:07:ef:c4:de:b9:eb:97:e3:fd:6a:02:
4d:85:5d:5c:66:cd:84:13:99:b1:3a:c1:f1:ba:c7:41:d8:14:
0e:2a:27:06:bb:9c:2a:5d:f7:c3:26:bf:54:64:55:27:79:01:
82:73:b5:f8:d3:41:9d:40:92:c7:1e:5d:80:a3:27:b4:96:da:
a0:fa:77:03:b4:72:4e:25:b6:ed:ed:28:cd:d2:bb:75:60:cc:
ac:0a:61:71:a1:08:1c:56:b3:85:54:81:a9:a8:96:c4:7f:9d:
4d:44:aa:45
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZ0pOZ6632HWXQ+Pp4fKfvtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky
YWUzYjcwHhcNMjYwMzI2MDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTlhMDc2MmMzYjA3MTdkMDc0YTVlN2Y3NGJiODgwMTg0NDdhODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4eU5xw0vkmoDTQlTy7eK0cVGDLL
nk25azFdYNCIv8Vew+V/xRPzNgIbWQTEvkzzxPzGJYo/myKfxBvyWEMawotKuXiy
GR9ABjddlkirnfN++XU+KjFFEWzpN1z0U70YXTXg2PRlXQu09Bps7qYdZG37vfb+
gifuKwRrmRkpRZgvrGwpdo4Y6SwPSlyyPLJ6r4PZq2ajWUbu2Dg6P+6Lj48qkvZZ
KY1cGDPvTUlIcVysbUclBLLtKxvV35XgZ2jVjHF5G9m+GEymLm6YY5T+LT369oFd
ohbnRkiva0QdpPhZxdziaKEjrkfkC6SxbUPmx+mtbpdWYTcMJgZgsl6tjQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFNqaB2LDsHF9B0pef3S7iAGER6hyMB8GA1UdIwQY
MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt
ZDJhZGVlZDc1NWQ4LzEvMnBvSFlzT3djWDBIU2w1X2RMdUlBWVJIcUhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4
LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQAPtkBAwQA
PtkHAwQDPtkQMAwDBADUtG8DBADUtHIwDAMEANS0dQMEA9S0cAMEANS0fTANBgkq
hkiG9w0BAQsFAAOCAQEAdaOSsiB7JVuxlYiqkuChxu0oqkUAXfc6PFUpNykl8SEy
u0hZ82JO/ZbL04Zb/it2G1c/AcoCS9jiWyZDWsOJ9Qv8WSu7yZKC3zHlnjSGh2i2
Jb0j7KKnPbYpQv2kHsX2Xva5+iV8MqHcvNTVAyGFjBSV1gHlI8wOwmzgPKUVMtuG
wYNRmq3trvjaMnRsv+R9LcUbyC71BgfvxN6565fj/WoCTYVdXGbNhBOZsTrB8brH
QdgUDionBrucKl33wya/VGRVJ3kBgnO1+NNBnUCSxx5dgKMntJbaoPp3A7RyTiW2
7e0ozdK7dWDMrAphcaEIHFazhVSBqaiWxH+dTUSqRQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:26:08 2026 by rpki-client