Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/1-9E8Fl8I5fGeneTIxqtuvR0iWE4.roa
File: 1-9E8Fl8I5fGeneTIxqtuvR0iWE4.roa (raw, json)
Hash identifier: CakQ6glxH9yNTMkZREcZAbanwdl5imHVMt0dXIwhm9k=
Subject key identifier: FB:D1:3C:16:5F:08:E5:F1:9E:9D:E4:C8:C6:AB:6E:BD:1D:22:58:4E
Certificate issuer: /CN=5754d19527fd85d0d444acadd44a01655fdc7400
Certificate serial: 019F654B08AADC790FD58679BA0DDD879BDE
Authority key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/1-9E8Fl8I5fGeneTIxqtuvR0iWE4.roa
Signing time: Wed 15 Jul 2026 10:20:44 +0000
ROA not before: Wed 15 Jul 2026 10:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199196
IP address blocks: 62.69.136.0/24 maxlen: 24
62.69.137.0/24 maxlen: 24
62.69.138.0/24 maxlen: 24
62.69.139.0/24 maxlen: 24
62.69.140.0/24 maxlen: 24
62.69.141.0/24 maxlen: 24
62.69.142.0/24 maxlen: 24
62.69.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:4b:08:aa:dc:79:0f:d5:86:79:ba:0d:dd:87:9b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5754d19527fd85d0d444acadd44a01655fdc7400
Validity
Not Before: Jul 15 10:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbd13c165f08e5f19e9de4c8c6ab6ebd1d22584e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:45:52:ad:8e:fa:c2:5f:76:4b:91:cf:05:5b:
86:bc:48:d3:3d:be:60:cd:0b:6d:16:42:ec:3e:fa:
a5:20:13:af:bc:d3:38:63:ce:d0:b1:65:d9:bd:3e:
b4:a1:dd:79:95:60:d9:68:c3:5c:62:04:01:e9:31:
9e:d6:af:d3:f1:e7:7b:7c:e2:dd:ee:43:48:48:aa:
c8:85:2f:a6:ef:cc:3c:e3:bf:66:fa:96:8e:71:56:
2d:d4:89:3d:eb:7d:df:d0:91:d5:0e:55:ef:69:b8:
f7:6a:21:44:93:21:93:4c:3f:22:c0:5a:c9:61:09:
ca:ab:c5:99:3e:b6:e2:1b:ef:08:6a:fa:84:e6:8d:
d2:66:26:21:ef:3a:63:9d:81:62:81:a2:62:f2:2d:
98:2d:20:67:a3:6a:1c:08:37:da:1f:93:f2:8a:ed:
ea:00:69:0f:85:2a:94:b5:30:e4:08:2d:11:6c:b6:
49:7c:ee:a7:94:f7:14:19:d4:1c:92:fc:67:50:cc:
e3:72:b3:c7:09:79:ab:9d:8d:19:c5:4e:31:47:8f:
dc:60:c6:19:c9:fb:4a:ac:02:07:89:92:49:15:02:
9c:cf:2d:0e:33:53:ac:8e:0a:e0:c1:e4:18:01:7e:
4a:a4:ae:4f:39:2e:5c:2b:94:b3:51:82:df:89:6b:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D1:3C:16:5F:08:E5:F1:9E:9D:E4:C8:C6:AB:6E:BD:1D:22:58:4E
X509v3 Authority Key Identifier:
keyid:57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/1-9E8Fl8I5fGeneTIxqtuvR0iWE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.136.0/21
Signature Algorithm: sha256WithRSAEncryption
85:19:08:f4:09:7e:a6:86:f8:6d:9a:08:b1:a2:3e:1e:af:15:
99:cf:b9:eb:a6:22:ff:cf:22:5a:e9:9e:7b:0d:26:4f:bb:20:
25:38:1b:c8:18:19:a8:df:a3:b2:4a:99:a7:dd:86:9a:1c:dc:
1e:43:62:36:d4:75:c7:3c:91:97:f5:56:90:44:34:9c:ef:b5:
5c:bd:d4:fa:de:c8:be:76:c1:1d:42:62:ce:f0:bf:4d:2d:6b:
66:7c:17:71:6a:54:32:a2:5a:df:27:e5:b9:bc:4d:08:e2:7c:
07:c5:f9:ef:2d:60:3b:bb:07:5b:da:b5:d5:a9:fd:24:0e:2c:
e4:9e:9f:ea:93:ec:e6:51:cb:8b:ec:e9:d0:8c:05:cd:96:08:
b8:6e:1c:3c:f5:4b:1f:7f:2d:b8:ee:09:1f:e2:a8:a6:83:08:
0c:08:5b:b9:e2:e3:da:b6:e6:c8:0c:1a:b3:b4:4a:83:41:b6:
9c:9a:ff:4f:6b:67:d6:a2:35:01:57:cb:9e:f2:46:45:bc:3b:
ba:30:63:09:a6:02:c1:26:97:27:f5:e7:80:34:30:88:44:7c:
c0:4f:2d:ac:b6:31:60:d0:5a:7d:c9:f8:58:d9:10:90:88:0d:
37:53:69:18:72:4d:b7:8c:83:a8:04:f0:1c:ff:aa:7b:d6:96:
62:2f:91:2d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ9lSwiq3HkP1YZ5ug3dh5veMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTRkMTk1MjdmZDg1ZDBkNDQ0YWNhZGQ0NGEwMTY1NWZk
Yzc0MDAwHhcNMjYwNzE1MTAyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmQxM2MxNjVmMDhlNWYxOWU5ZGU0YzhjNmFiNmViZDFkMjI1ODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70VSrY76wl92S5HPBVuGvEjTPb5g
zQttFkLsPvqlIBOvvNM4Y87QsWXZvT60od15lWDZaMNcYgQB6TGe1q/T8ed7fOLd
7kNISKrIhS+m78w8479m+paOcVYt1Ik9633f0JHVDlXvabj3aiFEkyGTTD8iwFrJ
YQnKq8WZPrbiG+8IavqE5o3SZiYh7zpjnYFigaJi8i2YLSBno2ocCDfaH5Pyiu3q
AGkPhSqUtTDkCC0RbLZJfO6nlPcUGdQckvxnUMzjcrPHCXmrnY0ZxU4xR4/cYMYZ
yftKrAIHiZJJFQKczy0OM1OsjgrgweQYAX5KpK5POS5cK5SzUYLfiWvoxwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPvRPBZfCOXxnp3kyMarbr0dIlhOMB8GA1UdIwQY
MBaAFFdU0ZUn/YXQ1ESsrdRKAWVf3HQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFUUmxTZjloZERVUkt5dDFFb0JaVl9jZEFBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS83YzlmY2MtOGZjZS00NGI3LWI2YmYt
MTE3NzYwMzE0MTVmLzEvMS05RThGbDhJNWZHZW5lVEl4cXR1dlIwaVdFNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODEvN2M5ZmNjLThmY2UtNDRiNy1iNmJmLTExNzc2MDMxNDE1
Zi8xL1YxVFJsU2Y5aGREVVJLeXQxRW9CWlZfY2RBQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAz5FiDAN
BgkqhkiG9w0BAQsFAAOCAQEAhRkI9Al+pob4bZoIsaI+Hq8Vmc+566Yi/88iWume
ew0mT7sgJTgbyBgZqN+jskqZp92GmhzcHkNiNtR1xzyRl/VWkEQ0nO+1XL3U+t7I
vnbBHUJizvC/TS1rZnwXcWpUMqJa3yflubxNCOJ8B8X57y1gO7sHW9q11an9JA4s
5J6f6pPs5lHLi+zp0IwFzZYIuG4cPPVLH38tuO4JH+KopoMIDAhbueLj2rbmyAwa
s7RKg0G2nJr/T2tn1qI1AVfLnvJGRbw7ujBjCaYCwSaXJ/XngDQwiER8wE8trLYx
YNBafcn4WNkQkIgNN1NpGHJNt4yDqATwHP+qe9aWYi+RLQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:56 2026 by rpki-client