Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/71lugQ5_7r4eLZmrofDqkyWcGo0.roa
File: 71lugQ5_7r4eLZmrofDqkyWcGo0.roa (raw, json)
Hash identifier: a/9q4zkTgyKqZhu+m/njxW9QDDH2cA3oCU55wTApOLI=
Subject key identifier: EF:59:6E:81:0E:7F:EE:BE:1E:2D:99:AB:A1:F0:EA:93:25:9C:1A:8D
Certificate issuer: /CN=088dd683d648956740eeedf4edbbd6e31a9f79e6
Certificate serial: 01A0C44194050C1CBF506D69D350991BB5B4
Authority key identifier: 08:8D:D6:83:D6:48:95:67:40:EE:ED:F4:ED:BB:D6:E3:1A:9F:79:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI3Wg9ZIlWdA7u307bvW4xqfeeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/71lugQ5_7r4eLZmrofDqkyWcGo0.roa
Signing time: Mon 21 Sep 2026 13:57:07 +0000
ROA not before: Mon 21 Sep 2026 13:57:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24958
IP address blocks: 62.192.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI3Wg9ZIlWdA7u307bvW4xqfeeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:41:94:05:0c:1c:bf:50:6d:69:d3:50:99:1b:b5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088dd683d648956740eeedf4edbbd6e31a9f79e6
Validity
Not Before: Sep 21 13:57:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef596e810e7feebe1e2d99aba1f0ea93259c1a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:9b:f3:56:a8:75:16:28:ea:2a:49:89:91:
a0:71:93:25:f6:41:fb:b3:06:de:09:33:99:a7:37:
e7:e0:af:eb:b5:6c:d7:b1:27:72:13:ec:97:f0:9e:
e6:76:53:17:f1:6d:88:cb:32:8a:f1:20:ee:47:be:
69:b2:8f:00:fe:9d:27:1f:f6:d2:e0:93:9e:82:0e:
15:d7:ef:34:88:d1:27:00:44:a4:98:a5:25:7b:16:
6f:f7:45:1f:6d:20:4b:c4:a7:fc:df:28:4a:a7:74:
35:b7:89:27:64:2b:0c:09:6b:ab:d9:3f:ae:f5:49:
4c:46:4f:43:32:30:5b:e9:52:59:cb:89:bd:12:59:
3f:56:bd:8e:9e:50:9c:67:1c:2b:41:60:7c:69:66:
ba:c0:71:a5:36:65:b3:f8:2e:64:82:36:5e:53:a6:
f9:30:46:06:7f:25:54:c6:8f:e1:78:bd:00:1d:a3:
a5:94:40:ab:8b:a3:56:88:59:22:d2:71:4c:59:df:
8a:34:65:80:ad:d9:86:63:d8:00:fd:cb:b2:18:b5:
d7:44:cc:44:48:d2:d9:93:e3:4e:c5:59:f5:8a:dd:
8e:fc:35:08:22:c6:56:96:1b:d0:77:8c:da:48:84:
4c:72:31:e8:16:19:dc:c9:70:d2:91:97:71:6a:05:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:59:6E:81:0E:7F:EE:BE:1E:2D:99:AB:A1:F0:EA:93:25:9C:1A:8D
X509v3 Authority Key Identifier:
keyid:08:8D:D6:83:D6:48:95:67:40:EE:ED:F4:ED:BB:D6:E3:1A:9F:79:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI3Wg9ZIlWdA7u307bvW4xqfeeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/71lugQ5_7r4eLZmrofDqkyWcGo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.184.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:21:52:31:95:b0:52:a9:56:9e:40:e5:ba:e6:e2:25:43:e2:
79:64:26:09:d8:31:24:fa:da:ff:28:f1:62:8b:fd:f4:83:4d:
f7:6a:0c:c4:ef:68:72:c1:67:8f:6b:d9:2b:69:05:ad:7e:73:
5f:e9:74:57:ad:e2:6b:6c:0c:46:b1:27:d4:8a:79:c1:d9:f8:
93:04:f7:4b:c4:2d:9f:ae:9f:bc:62:c4:c0:ba:9e:3a:96:e4:
fb:65:d5:af:1f:07:60:d7:46:21:70:db:0a:70:c3:43:15:b3:
a1:bf:7b:a3:a6:f2:02:c5:6e:08:58:8d:ce:27:74:c9:3d:8b:
16:aa:e9:c1:c3:d6:5c:f4:9e:79:9e:ac:2b:51:81:37:84:a9:
db:6b:46:00:ff:75:5e:57:ca:ab:f0:e1:da:2b:7d:ff:23:d4:
c4:68:13:38:75:a7:37:4a:e4:94:07:b6:9c:f5:04:f3:52:79:
1d:c6:0d:b3:8e:47:2a:eb:d7:06:60:a8:09:f1:10:51:42:64:
eb:a5:df:18:07:c6:b5:17:a5:21:4b:19:d5:82:c5:b9:43:5d:
36:0d:8a:46:f9:0c:d0:db:41:53:9d:1c:4f:96:be:ba:4d:97:
41:9f:6c:44:17:e9:b9:46:60:f3:53:9e:bc:d5:75:31:31:0f:
a4:ce:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:56:41 2026 by rpki-client