Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/YstluQtHpzLnfC3TPFU1_RVo3Kc.roa
File: YstluQtHpzLnfC3TPFU1_RVo3Kc.roa (raw, json)
Hash identifier: VlPhCkrTX50LxfOpD/LlEhXnetd1Xvpjb8V/y67yZIU=
Subject key identifier: 62:CB:65:B9:0B:47:A7:32:E7:7C:2D:D3:3C:55:35:FD:15:68:DC:A7
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0199F16533BFB9639E96E0DF10B7B296170D
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/YstluQtHpzLnfC3TPFU1_RVo3Kc.roa
Signing time: Fri 17 Oct 2025 08:59:25 +0000
ROA not before: Fri 17 Oct 2025 08:59:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215413
IP address blocks: 62.171.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:65:33:bf:b9:63:9e:96:e0:df:10:b7:b2:96:17:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Oct 17 08:59:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62cb65b90b47a732e77c2dd33c5535fd1568dca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:d9:88:d8:11:26:f5:37:9a:46:9a:63:71:
5e:df:fa:78:79:af:30:ae:ad:e3:27:34:c5:cb:83:
25:fd:fb:c6:d1:c9:46:93:1f:93:9d:be:37:93:16:
8c:7c:53:8e:1c:31:b5:0d:3a:cf:b6:64:e4:f2:98:
94:15:c7:8a:de:d0:14:27:df:b7:31:fd:2a:61:d0:
68:61:e9:cd:69:f3:be:f9:55:1a:5d:fa:f9:74:87:
29:f7:38:13:ea:f5:c4:42:41:a2:95:63:35:ee:fe:
50:9f:41:2a:ee:08:c2:55:68:ce:11:b1:4d:cf:4d:
5d:3c:6d:0a:d1:a7:a5:b0:98:71:1c:81:1c:64:0c:
4d:e9:b6:5d:0e:3b:c8:78:cd:ad:45:87:28:eb:97:
b6:1e:a1:bb:7d:e6:84:03:2f:99:17:87:ca:7a:81:
eb:71:17:cb:5f:a8:41:ec:65:96:48:80:c0:b2:bf:
27:71:61:a7:8e:23:34:c2:88:0d:c9:73:7b:4d:59:
be:68:c1:6c:b4:0e:4b:b6:64:f7:17:43:d8:77:e1:
4b:fe:6d:e3:d6:2d:d1:ac:2d:25:c7:fd:2b:66:f8:
bb:7c:07:ed:de:9d:58:0e:d1:e0:09:42:26:67:d5:
1d:ea:44:cc:11:75:b0:78:98:20:27:03:bb:be:08:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CB:65:B9:0B:47:A7:32:E7:7C:2D:D3:3C:55:35:FD:15:68:DC:A7
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/YstluQtHpzLnfC3TPFU1_RVo3Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.251.0/24
Signature Algorithm: sha256WithRSAEncryption
56:fc:e4:03:f8:4e:00:68:51:62:d9:b3:2d:a7:18:70:7c:ea:
f0:64:50:72:df:32:51:55:85:b7:41:cb:32:12:34:87:dd:21:
70:1a:13:9f:80:4c:ae:77:9f:8d:da:71:0e:56:d9:8e:53:60:
23:48:dd:fb:95:62:c0:61:0f:99:ab:1a:c8:ca:f8:ef:c4:89:
f2:a6:6e:95:61:3b:73:5c:eb:92:e2:65:7e:82:a6:58:a5:ee:
9e:07:19:f9:e3:98:5a:da:6f:18:08:f7:76:f5:b9:de:88:ae:
62:0c:92:c8:42:54:dd:3a:2d:df:b6:da:6e:59:c1:e6:8b:3e:
f3:f0:79:9f:ae:f6:2c:da:dc:ba:51:56:f1:77:6c:b2:bc:ff:
07:e7:c8:e8:23:69:55:60:1f:cb:29:05:5e:ea:96:96:3d:76:
dd:90:71:aa:29:d7:bd:47:39:ef:71:d8:ed:a4:47:a6:90:18:
37:e1:11:df:24:b7:2b:cc:6c:ee:8e:64:e4:d7:a4:05:f4:9e:
02:ec:db:65:e6:86:0c:17:50:52:f3:f6:f3:f8:d2:4a:6d:c1:
2f:f2:01:4a:9f:8f:28:3e:de:e4:c2:b7:9f:c8:cd:28:95:4c:
0b:ab:8b:cf:59:62:37:c5:c1:81:95:d7:48:ae:79:94:91:91:
d8:ec:b0:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnxZTO/uWOeluDfELeylhcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjUxMDE3MDg1OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmNiNjViOTBiNDdhNzMyZTc3YzJkZDMzYzU1MzVmZDE1NjhkY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx7ZiNgRJvU3mkaaY3Fe3/p4ea8w
rq3jJzTFy4Ml/fvG0clGkx+Tnb43kxaMfFOOHDG1DTrPtmTk8piUFceK3tAUJ9+3
Mf0qYdBoYenNafO++VUaXfr5dIcp9zgT6vXEQkGilWM17v5Qn0Eq7gjCVWjOEbFN
z01dPG0K0aelsJhxHIEcZAxN6bZdDjvIeM2tRYco65e2HqG7feaEAy+ZF4fKeoHr
cRfLX6hB7GWWSIDAsr8ncWGnjiM0wogNyXN7TVm+aMFstA5LtmT3F0PYd+FL/m3j
1i3RrC0lx/0rZvi7fAft3p1YDtHgCUImZ9Ud6kTMEXWweJggJwO7vgh8QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLLZbkLR6cy53wt0zxVNf0VaNynMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvWXN0bHVRdEhwekxuZkMzVFBGVTFfUlZvM0tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPqv7MA0G
CSqGSIb3DQEBCwUAA4IBAQBW/OQD+E4AaFFi2bMtpxhwfOrwZFBy3zJRVYW3Qcsy
EjSH3SFwGhOfgEyud5+N2nEOVtmOU2AjSN37lWLAYQ+ZqxrIyvjvxInypm6VYTtz
XOuS4mV+gqZYpe6eBxn545ha2m8YCPd29bneiK5iDJLIQlTdOi3fttpuWcHmiz7z
8HmfrvYs2ty6UVbxd2yyvP8H58joI2lVYB/LKQVe6paWPXbdkHGqKde9Rznvcdjt
pEemkBg34RHfJLcrzGzujmTk16QF9J4C7Ntl5oYMF1BS8/bz+NJKbcEv8gFKn48o
Pt7kwrefyM0olUwLq4vPWWI3xcGBlddIrnmUkZHY7LDR
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:13 2025 by rpki-client