Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/PK5BYjUiO_K5kQscdaEroME4y1s.roa
File: PK5BYjUiO_K5kQscdaEroME4y1s.roa (raw, json)
Hash identifier: oqMS2rUtV2C0xAhugfWIE2wNtG1PEZC9aXZ4w0VeXaE=
Subject key identifier: 3C:AE:41:62:35:22:3B:F2:B9:91:0B:1C:75:A1:2B:A0:C1:38:CB:5B
Certificate issuer: /CN=5754d19527fd85d0d444acadd44a01655fdc7400
Certificate serial: 019F6AA59E16128D007F4F5C1F2BE41964C3
Authority key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/PK5BYjUiO_K5kQscdaEroME4y1s.roa
Signing time: Thu 16 Jul 2026 11:17:46 +0000
ROA not before: Thu 16 Jul 2026 11:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 62.69.136.0/24 maxlen: 24
62.69.137.0/24 maxlen: 24
62.69.138.0/24 maxlen: 24
62.69.139.0/24 maxlen: 24
62.69.140.0/24 maxlen: 24
62.69.141.0/24 maxlen: 24
62.69.142.0/24 maxlen: 24
62.69.143.0/24 maxlen: 24
193.219.115.0/24 maxlen: 24
2a00:a640:10a0::/44 maxlen: 48
2a00:a640:20a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:a5:9e:16:12:8d:00:7f:4f:5c:1f:2b:e4:19:64:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5754d19527fd85d0d444acadd44a01655fdc7400
Validity
Not Before: Jul 16 11:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cae416235223bf2b9910b1c75a12ba0c138cb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:dd:83:1c:1a:63:15:15:37:14:2d:3b:f3:
42:f6:db:01:50:95:2b:57:52:b1:45:a9:f5:e6:af:
77:10:89:2f:3d:7a:7f:7e:d0:4c:7d:a8:55:fe:13:
5e:84:84:cb:94:47:15:b1:0a:9d:42:46:88:b0:e7:
a5:10:04:4c:d4:54:4b:53:3b:00:9f:57:2e:fe:75:
f8:64:3a:6a:f1:f1:b0:13:7f:ec:34:2f:5b:91:86:
97:07:91:2c:e4:04:54:e9:ec:5a:af:07:bd:39:81:
f3:e9:e7:0f:66:01:ea:a4:5b:a7:18:64:a4:78:1a:
51:c9:3c:a4:06:3e:a3:eb:d8:71:06:2f:3c:5b:1b:
39:da:ce:7c:58:24:da:62:a4:a5:bd:d0:6b:3f:fc:
cb:ea:17:f7:ae:52:1e:2d:ca:b1:93:5a:93:2f:ca:
47:8e:e2:31:c2:c1:a9:65:be:7f:42:8e:f9:38:54:
f5:9f:dd:14:38:54:4b:58:05:37:1f:12:8f:c2:67:
ce:bf:3c:a1:f4:75:bb:9a:da:ad:de:af:22:fe:03:
99:69:15:47:a0:3b:ee:8d:80:cb:0f:d9:2f:b1:83:
05:8b:58:27:f3:cb:dc:fc:01:a2:2c:fb:30:55:af:
d8:b5:23:f3:c2:ba:c1:87:90:5a:8f:da:3f:70:d0:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AE:41:62:35:22:3B:F2:B9:91:0B:1C:75:A1:2B:A0:C1:38:CB:5B
X509v3 Authority Key Identifier:
keyid:57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/PK5BYjUiO_K5kQscdaEroME4y1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.136.0/21
193.219.115.0/24
IPv6:
2a00:a640:10a0::/44
2a00:a640:20a0::/44
Signature Algorithm: sha256WithRSAEncryption
74:d1:d1:41:54:69:20:27:6c:bd:88:f0:f0:68:6e:f9:06:4e:
ce:26:2a:c7:0c:73:1e:26:be:f9:12:b0:46:15:be:c2:3e:22:
24:5b:5a:f3:15:a3:93:a9:17:0a:96:43:c7:5b:6a:b0:9f:21:
9b:d6:98:04:ed:39:4b:9f:18:d2:0b:15:46:cb:4e:a4:11:c8:
32:59:f6:a3:bd:4f:29:da:2f:3c:27:69:f0:58:13:ff:b4:03:
08:46:79:5a:2e:1d:8d:6f:37:b5:bb:88:f1:36:0f:53:15:ea:
29:7f:0f:45:7c:45:70:2a:75:1d:52:24:6b:f8:70:42:ac:13:
e0:7e:3f:51:0d:9f:fb:1f:29:25:4e:9d:3b:de:ff:72:00:e8:
5d:40:b7:73:46:8b:13:6d:c0:1f:27:36:5f:0c:c8:50:89:c5:
22:1a:2a:d0:c0:dc:a9:cb:7e:74:a6:7c:d2:39:38:0a:cb:38:
0b:c7:e2:1d:78:0c:ed:a0:69:e4:34:1d:a8:fc:cd:be:1c:85:
a6:66:b4:49:20:fe:be:bb:35:dc:0e:04:c1:9d:20:5f:a7:c5:
42:d6:e8:07:73:48:6c:00:fe:6f:5d:12:00:3c:3d:fe:c9:42:
e7:0f:55:b8:fb:74:67:df:3e:9e:cd:35:2e:d7:3f:2d:2a:ac:
c0:9f:bf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:09 2026 by rpki-client