Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/Yt1jXLDim5MJUTFWKwBP5lPZ6fQ.roa
File: Yt1jXLDim5MJUTFWKwBP5lPZ6fQ.roa (raw, json)
Hash identifier: L5kmXZua7JAESfIWgrpeRGrmPNvJQA4dFMJ/ZEQLa3s=
Subject key identifier: 62:DD:63:5C:B0:E2:9B:93:09:51:31:56:2B:00:4F:E6:53:D9:E9:F4
Certificate issuer: /CN=f7a6db5bbb76f634240638284f8e5bb68fc31762
Certificate serial: 019F23682B3EBA7E83C62CBB6AB78962C8ED
Authority key identifier: F7:A6:DB:5B:BB:76:F6:34:24:06:38:28:4F:8E:5B:B6:8F:C3:17:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96bbW7t29jQkBjgoT45bto_DF2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/Yt1jXLDim5MJUTFWKwBP5lPZ6fQ.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44604
IP address blocks: 5.187.64.0/19 maxlen: 24
31.210.192.0/19 maxlen: 24
77.241.240.0/20 maxlen: 24
91.195.126.0/23 maxlen: 24
91.202.24.0/22 maxlen: 24
93.157.144.0/21 maxlen: 24
109.106.128.0/19 maxlen: 24
178.210.32.0/19 maxlen: 24
185.33.160.0/22 maxlen: 24
185.177.96.0/22 maxlen: 24
2a00:1440::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/96bbW7t29jQkBjgoT45bto_DF2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/96bbW7t29jQkBjgoT45bto_DF2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/96bbW7t29jQkBjgoT45bto_DF2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2b:3e:ba:7e:83:c6:2c:bb:6a:b7:89:62:c8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a6db5bbb76f634240638284f8e5bb68fc31762
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62dd635cb0e29b93095131562b004fe653d9e9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:f5:8b:25:95:21:00:35:30:17:15:0e:44:
93:b3:2f:43:f1:ef:a0:45:5d:ea:ee:80:19:c1:68:
f7:48:fd:1f:68:c8:1d:b6:98:c0:07:aa:af:94:c6:
53:ed:66:19:a3:d1:3d:3d:e6:62:c6:a6:36:7a:d7:
55:bb:5e:ef:22:37:bf:dd:e6:40:9f:9c:7b:ec:ec:
8f:d2:f4:ea:16:a3:41:fe:6c:c1:98:c9:64:7d:5c:
80:da:b1:2c:d8:90:74:cb:41:4f:b6:0b:96:d6:58:
8a:be:9a:5e:78:a4:38:4d:30:12:dd:b3:90:14:f8:
85:b2:2f:fc:b0:e2:b8:47:2a:cb:9a:b9:95:0d:73:
0a:2a:3e:e2:be:81:7e:6a:06:0b:88:77:85:67:ff:
54:c2:0a:6d:13:45:c8:d0:a7:14:0d:22:8e:ef:8d:
71:17:e6:1f:f5:e7:0b:c9:73:f2:68:8f:57:55:21:
fc:a9:4a:56:ef:bb:a0:38:28:af:44:85:98:1c:d3:
b6:d8:26:23:7e:42:15:f6:c7:3c:bf:be:a9:56:c0:
b1:76:a9:fa:db:41:d6:35:c4:31:b8:95:13:21:a0:
f7:66:79:90:fe:a6:bd:b9:18:92:43:bb:c1:aa:83:
bf:2e:fa:b7:16:0c:01:72:ee:16:33:f5:24:8b:96:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DD:63:5C:B0:E2:9B:93:09:51:31:56:2B:00:4F:E6:53:D9:E9:F4
X509v3 Authority Key Identifier:
keyid:F7:A6:DB:5B:BB:76:F6:34:24:06:38:28:4F:8E:5B:B6:8F:C3:17:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96bbW7t29jQkBjgoT45bto_DF2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/Yt1jXLDim5MJUTFWKwBP5lPZ6fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/96bbW7t29jQkBjgoT45bto_DF2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.64.0/19
31.210.192.0/19
77.241.240.0/20
91.195.126.0/23
91.202.24.0/22
93.157.144.0/21
109.106.128.0/19
178.210.32.0/19
185.33.160.0/22
185.177.96.0/22
IPv6:
2a00:1440::/32
Signature Algorithm: sha256WithRSAEncryption
8d:bb:ea:04:98:38:38:6e:f9:cf:89:ea:30:2e:b7:d2:a2:2f:
66:1d:bc:c4:27:8c:64:2c:70:17:8d:00:3f:e9:3a:a0:99:c0:
61:96:8f:c2:73:ad:95:5d:cf:a9:72:44:a7:9a:2a:8d:8f:a6:
f7:7d:79:5a:e9:2d:76:61:35:3e:8e:74:ac:a4:c5:37:a8:61:
df:8b:d4:7d:10:e4:ea:d7:2a:79:7d:8a:7d:34:49:56:7f:58:
57:4c:44:0a:3d:99:2d:35:e9:8d:f4:13:be:26:5b:73:93:4d:
79:8e:0d:62:f4:2f:10:ce:5d:26:a2:81:bc:97:96:96:f0:48:
1a:24:d7:7e:82:d9:8b:5d:93:80:94:0d:8c:02:f7:3e:b6:04:
98:25:79:82:b2:86:23:91:56:92:1a:7c:13:5a:76:3d:17:10:
e7:50:9f:a4:04:af:30:cc:e3:42:63:93:3e:c6:d5:96:4d:c3:
2c:12:ac:20:37:38:86:79:19:72:27:5d:fb:a5:20:ff:f5:df:
fa:7c:f6:91:e5:7c:27:94:bc:fc:9e:8f:62:a9:ab:7a:da:75:
37:bb:66:ae:f7:c9:dc:78:3f:6a:a2:bd:ea:6b:6a:ae:10:5e:
89:dc:8f:29:92:a9:4a:51:79:43:de:52:48:3f:99:0d:41:6a:
ce:24:87:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:35 2026 by rpki-client