Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/Y6zU4dq35A6akp4dhFzMYlhqKXo.roa
File: Y6zU4dq35A6akp4dhFzMYlhqKXo.roa (raw, json)
Hash identifier: rVUXwS6FszQxiwh17zvndXLoO0j35z3Lpl7zGp2dcJM=
Subject key identifier: 63:AC:D4:E1:DA:B7:E4:0E:9A:92:9E:1D:84:5C:CC:62:58:6A:29:7A
Certificate issuer: /CN=d969627ffbef5c53e817d2b22525f5b269c6b3be
Certificate serial: 019E885FE73EBFD4EBE60219B6C8DB0A85E4
Authority key identifier: D9:69:62:7F:FB:EF:5C:53:E8:17:D2:B2:25:25:F5:B2:69:C6:B3:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Wlif_vvXFPoF9KyJSX1smnGs74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/Y6zU4dq35A6akp4dhFzMYlhqKXo.roa
Signing time: Tue 02 Jun 2026 12:47:26 +0000
ROA not before: Tue 02 Jun 2026 12:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206722
IP address blocks: 62.233.40.0/24 maxlen: 24
2a12:5cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/2Wlif_vvXFPoF9KyJSX1smnGs74.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/2Wlif_vvXFPoF9KyJSX1smnGs74.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Wlif_vvXFPoF9KyJSX1smnGs74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:5f:e7:3e:bf:d4:eb:e6:02:19:b6:c8:db:0a:85:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d969627ffbef5c53e817d2b22525f5b269c6b3be
Validity
Not Before: Jun 2 12:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63acd4e1dab7e40e9a929e1d845ccc62586a297a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:02:0d:5c:9f:e3:f8:9e:5e:a6:20:80:c4:32:
b6:8b:ca:5e:ec:a1:e8:59:82:4e:cc:49:88:3c:ab:
e1:7b:9c:5a:e1:0f:ac:2b:15:e2:f3:65:54:cb:4d:
37:ef:ff:5d:85:9f:59:5c:1a:47:da:e1:9e:44:1d:
7a:8d:e8:95:2d:06:d8:5e:2d:cd:d5:3a:cb:54:70:
1f:fc:e0:19:45:df:f9:62:12:51:82:d8:3e:79:05:
03:6f:9b:d9:3d:71:1c:42:24:92:35:53:47:39:16:
fa:19:e0:ed:c0:06:61:17:c4:8c:c5:ec:4a:46:2a:
a9:08:53:eb:8f:3d:02:57:5d:19:ae:6a:d5:45:0e:
c7:9f:c7:f7:19:44:7e:c1:96:ff:46:91:65:d6:88:
c1:bd:ec:d1:35:04:ca:ac:99:6e:f8:c7:a5:81:3f:
d5:f1:14:de:35:36:f2:c0:72:93:dc:e9:35:48:45:
50:f1:11:58:bc:97:ba:5f:e7:23:73:36:07:17:b9:
d8:af:af:d5:7b:64:8e:25:07:db:61:e4:93:49:77:
6a:d7:b9:47:27:82:89:c1:8b:37:6f:ed:a9:02:30:
35:32:c1:ff:f8:44:61:e6:e7:ed:ab:0b:4c:49:9d:
46:00:c4:98:6d:a6:51:83:59:f6:22:2f:1d:ae:64:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AC:D4:E1:DA:B7:E4:0E:9A:92:9E:1D:84:5C:CC:62:58:6A:29:7A
X509v3 Authority Key Identifier:
keyid:D9:69:62:7F:FB:EF:5C:53:E8:17:D2:B2:25:25:F5:B2:69:C6:B3:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Wlif_vvXFPoF9KyJSX1smnGs74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/Y6zU4dq35A6akp4dhFzMYlhqKXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/2Wlif_vvXFPoF9KyJSX1smnGs74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.40.0/24
IPv6:
2a12:5cc0::/32
Signature Algorithm: sha256WithRSAEncryption
09:41:f2:86:7b:f4:d5:91:86:c8:25:2f:2b:71:e7:af:24:f5:
8f:49:8d:97:02:64:72:29:c7:ca:52:d1:88:4b:6a:b6:61:c5:
06:97:80:3e:39:6c:22:61:3e:cc:ff:a9:bb:dd:a0:36:e4:f5:
c4:73:e1:32:8b:3d:53:29:44:91:5c:de:17:21:64:91:6d:fb:
93:59:51:12:71:15:b6:65:c2:71:77:15:49:8b:b7:35:28:3f:
d5:8f:25:4a:02:ee:cc:fd:28:ac:07:96:6a:db:4e:f9:b3:fb:
f8:5d:ab:12:24:1c:2e:7c:e2:48:10:3a:41:b4:fb:b0:8c:db:
0c:72:77:18:bc:25:09:31:a9:c9:b5:f0:25:26:b5:39:36:08:
32:a9:d4:a1:66:96:ff:8c:ee:fe:31:b7:19:22:b1:1c:c9:5a:
31:d7:d4:ea:d8:3e:24:df:cc:10:f3:90:23:20:ab:67:b5:f7:
10:4a:a0:81:7c:57:c7:56:32:20:d5:4a:5d:ab:80:79:bd:8a:
3f:fc:c5:75:6e:0e:cb:54:5f:da:af:51:ec:83:c7:c3:e4:09:
33:db:44:68:b6:3c:98:8d:3b:c3:2f:5b:55:6e:79:c1:25:74:
37:b8:01:75:22:81:ac:a4:bc:49:0f:93:8e:19:6a:97:ec:23:
1d:35:af:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:36:34 2026 by rpki-client