Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ewZxt0sodrsUl9Sdl_q1n0kH6Y4.roa
File: ewZxt0sodrsUl9Sdl_q1n0kH6Y4.roa (raw, json)
Hash identifier: w3m4Zbf/SMXuCAD+NsICucoE5BD2LNv3NWgrAZRXOqQ=
Subject key identifier: 7B:06:71:B7:4B:28:76:BB:14:97:D4:9D:97:FA:B5:9F:49:07:E9:8E
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019F231C478480C7F12DE5D3E6FCD741C470
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ewZxt0sodrsUl9Sdl_q1n0kH6Y4.roa
Signing time: Thu 02 Jul 2026 13:54:43 +0000
ROA not before: Thu 02 Jul 2026 13:54:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197789
IP address blocks: 204.62.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:1c:47:84:80:c7:f1:2d:e5:d3:e6:fc:d7:41:c4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Jul 2 13:54:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b0671b74b2876bb1497d49d97fab59f4907e98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:b0:11:82:4b:9b:89:d5:59:9c:7e:eb:83:
a6:1b:f8:d3:fc:ec:86:1e:6e:d6:a9:a1:93:be:45:
1f:cc:02:97:a1:76:fc:eb:be:2d:2d:a8:e2:74:4f:
35:22:37:ae:e7:85:3b:28:fc:e7:61:fa:54:fe:2f:
c5:7e:78:c3:63:74:ae:0a:d0:1d:2a:86:ca:18:62:
0f:9c:f2:c0:58:b2:ab:c9:83:cb:ce:3d:a1:fd:33:
d5:4b:f8:ef:50:a9:f5:f1:08:7f:b4:ac:bb:b9:69:
21:94:23:00:95:38:73:61:22:d9:ea:b6:6c:25:a5:
ba:dd:1d:2f:00:f9:35:bf:58:d6:50:5a:68:3e:7f:
e0:5a:aa:17:46:a7:a1:05:36:f3:18:fb:e6:5e:62:
8d:d3:ff:41:c7:86:bc:1d:c0:1d:15:60:2a:ef:25:
e8:03:00:5a:59:22:34:fd:2c:bb:73:f9:38:cd:b3:
ec:45:23:c7:76:2a:4f:5f:35:44:d8:55:d5:ec:37:
69:01:38:ac:43:c2:f5:4f:e8:b4:6e:34:a6:02:92:
3a:c6:08:60:23:6b:6b:3e:f6:57:a9:9c:ca:ec:d4:
ed:96:43:b5:e4:cc:81:4a:3e:03:df:8d:ca:3f:06:
5a:a1:be:e1:55:53:4d:6e:7e:55:31:78:31:7a:83:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:06:71:B7:4B:28:76:BB:14:97:D4:9D:97:FA:B5:9F:49:07:E9:8E
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ewZxt0sodrsUl9Sdl_q1n0kH6Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.62.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:0c:eb:32:31:73:a9:28:9a:e0:39:30:13:84:83:d6:7e:cc:
c1:fc:af:bd:4b:53:0d:44:81:d6:0f:60:d1:63:33:a8:46:53:
03:72:24:71:51:24:11:7a:b8:a4:46:6f:5d:6d:57:b0:a2:08:
7e:8f:6e:3d:58:71:0b:d2:97:c3:2c:04:98:51:17:d1:bb:6d:
4a:d5:22:77:a3:10:fc:93:0c:b1:81:88:4f:45:aa:be:84:bd:
f5:d1:81:e7:8e:aa:29:19:93:cc:23:6c:e6:37:af:58:75:06:
3f:d7:49:90:15:93:37:ae:39:04:fc:90:dd:7a:17:e6:7d:eb:
d5:f0:4e:cc:61:17:12:af:9e:ac:3a:0f:a6:b1:1e:f4:4a:69:
fd:31:07:d0:68:d3:f6:e1:15:ff:ee:16:51:b3:1c:0d:d1:e9:
44:4d:73:6a:d5:51:e7:ca:b9:fb:f8:b0:8f:7c:f7:b4:8c:25:
e1:9c:e7:6b:87:c9:5d:07:5d:9f:a4:e0:9a:73:75:37:75:84:
31:1c:53:97:c3:b7:51:be:63:c9:f5:8f:3d:78:b0:a7:62:a3:
73:24:bf:f1:f7:c1:07:1f:7d:67:e6:bf:bd:35:9c:35:19:62:
aa:39:5c:54:ad:19:cd:76:9e:02:7d:f3:44:8b:7f:27:ed:f2:
db:c8:f1:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jHEeEgMfxLeXT5vzXQcRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0
YTdjZGMwHhcNMjYwNzAyMTM1NDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjA2NzFiNzRiMjg3NmJiMTQ5N2Q0OWQ5N2ZhYjU5ZjQ5MDdlOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfOwEYJLm4nVWZx+64OmG/jT/OyG
Hm7WqaGTvkUfzAKXoXb8674tLajidE81Ijeu54U7KPznYfpU/i/FfnjDY3SuCtAd
KobKGGIPnPLAWLKryYPLzj2h/TPVS/jvUKn18Qh/tKy7uWkhlCMAlThzYSLZ6rZs
JaW63R0vAPk1v1jWUFpoPn/gWqoXRqehBTbzGPvmXmKN0/9Bx4a8HcAdFWAq7yXo
AwBaWSI0/Sy7c/k4zbPsRSPHdipPXzVE2FXV7DdpATisQ8L1T+i0bjSmApI6xghg
I2trPvZXqZzK7NTtlkO15MyBSj4D343KPwZaob7hVVNNbn5VMXgxeoNJnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHsGcbdLKHa7FJfUnZf6tZ9JB+mOMB8GA1UdIwQY
MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt
MmUyOGI5NjQ5OGE5LzEvZXdaeHQwc29kcnNVbDlTZGxfcTFuMGtINlk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5
LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzD57MA0G
CSqGSIb3DQEBCwUAA4IBAQCiDOsyMXOpKJrgOTAThIPWfszB/K+9S1MNRIHWD2DR
YzOoRlMDciRxUSQRerikRm9dbVewogh+j249WHEL0pfDLASYURfRu21K1SJ3oxD8
kwyxgYhPRaq+hL310YHnjqopGZPMI2zmN69YdQY/10mQFZM3rjkE/JDdehfmfevV
8E7MYRcSr56sOg+msR70Smn9MQfQaNP24RX/7hZRsxwN0elETXNq1VHnyrn7+LCP
fPe0jCXhnOdrh8ldB12fpOCac3U3dYQxHFOXw7dRvmPJ9Y89eLCnYqNzJL/x98EH
H31n5r+9NZw1GWKqOVxUrRnNdp4CffNEi38n7fLbyPHp
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:23 2026 by rpki-client