Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/blJMIojOTEpSH4IP2X41GCu9gAw.roa
File: blJMIojOTEpSH4IP2X41GCu9gAw.roa (raw, json)
Hash identifier: rwqvVZFLXtoDZy8R3jzeQXpNVcQxdxywXuReQr1WtXI=
Subject key identifier: 6E:52:4C:22:88:CE:4C:4A:52:1F:82:0F:D9:7E:35:18:2B:BD:80:0C
Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial: 019D257D8FA4A3ACE0A1211D32FA99D79564
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/blJMIojOTEpSH4IP2X41GCu9gAw.roa
Signing time: Wed 25 Mar 2026 14:54:38 +0000
ROA not before: Wed 25 Mar 2026 14:54:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200010
IP address blocks: 194.62.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:7d:8f:a4:a3:ac:e0:a1:21:1d:32:fa:99:d7:95:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Validity
Not Before: Mar 25 14:54:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e524c2288ce4c4a521f820fd97e35182bbd800c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f2:ea:3a:13:b3:6c:81:04:bd:3b:6c:1f:c7:
e3:b2:4b:50:7c:4f:01:71:54:02:5d:5a:b6:fc:ea:
98:60:05:fa:b6:64:a2:d7:9e:34:9f:8b:26:f7:fc:
67:f7:34:2e:fb:0f:8d:7a:e0:80:af:09:94:e9:ec:
5d:90:fc:ee:b6:f8:16:40:b8:e3:6c:38:7d:05:a2:
a7:dc:6e:a7:c8:74:b7:cf:62:3e:bd:38:c5:c8:61:
cd:ff:af:04:c0:9f:ab:17:74:20:d6:fd:e1:ff:dc:
ef:83:6a:ef:a6:fc:35:fe:40:f0:57:eb:93:8f:4b:
9f:bd:6c:80:0b:4c:6a:cd:51:05:38:d2:86:e8:de:
bc:6d:ce:35:79:04:56:68:7c:82:1e:02:7a:f3:9f:
79:19:55:e4:26:5f:e2:2a:71:25:fc:31:8a:85:c1:
a9:73:19:38:99:d3:28:61:bc:74:89:a8:77:25:41:
d0:45:3f:57:6b:b3:09:4d:c0:1b:fa:f6:e6:67:f4:
4e:35:80:83:f3:ed:03:f2:9b:2d:e2:4a:39:7a:a5:
11:9c:82:26:bd:d5:28:8e:66:bb:d0:82:bd:a5:57:
d8:e3:8e:9f:6b:f4:22:9b:bf:a3:3c:1a:5b:fe:83:
c7:fa:0b:40:0a:42:54:7a:c5:ac:53:60:ae:7d:32:
54:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:52:4C:22:88:CE:4C:4A:52:1F:82:0F:D9:7E:35:18:2B:BD:80:0C
X509v3 Authority Key Identifier:
keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/blJMIojOTEpSH4IP2X41GCu9gAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.118.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a1:55:93:e6:75:62:4a:21:20:76:9d:01:b9:1a:e1:83:04:
a6:27:3d:b0:15:a8:a5:ea:82:a9:3d:d9:cf:1b:1d:0c:10:d4:
04:97:3f:c1:67:62:5b:18:4a:98:ed:d3:c7:7a:47:29:34:41:
6f:c5:4f:94:de:34:da:cd:38:12:e9:e2:4f:8c:f2:20:60:69:
8a:90:d2:a4:59:57:dc:bc:d1:cf:5b:03:2a:ae:5a:a5:e9:0a:
3f:52:90:60:92:10:dd:46:25:9f:9f:05:d3:3e:0a:88:ab:db:
f2:23:78:00:72:33:2f:a6:46:22:3b:52:1f:8f:3a:a4:d8:b4:
59:7e:06:2b:42:75:e4:51:c0:09:9e:7b:d4:3b:05:e7:9d:a2:
18:55:e3:92:bf:08:a9:52:53:49:fa:87:c3:85:69:dd:00:74:
df:d6:d5:0d:d6:da:7b:eb:24:3e:5d:09:b9:6a:24:0f:9e:63:
1a:18:cf:ff:e6:3f:13:4e:56:74:04:fc:1c:ab:f6:38:c3:eb:
4f:ce:c9:00:60:15:27:c5:0e:ae:51:5e:1b:65:0f:1e:9c:6e:
8a:d6:e9:9e:bb:c0:c3:49:b7:e6:ce:d5:e0:13:15:52:59:4b:
73:e2:e0:02:f1:7b:aa:40:72:a1:84:77:34:e8:ad:37:e9:ca:
15:4e:e1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:40:27 2026 by rpki-client