Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/v0uvRzJRH0DybgzTlr--Rro-ZDs.roa
File: v0uvRzJRH0DybgzTlr--Rro-ZDs.roa (raw, json)
Hash identifier: bD9aDZxZQr/1JBS2o2wPvRCRBtPfg/uFRO7Z+g6VqCo=
Subject key identifier: BF:4B:AF:47:32:51:1F:40:F2:6E:0C:D3:96:BF:BE:46:BA:3E:64:3B
Certificate issuer: /CN=5754d19527fd85d0d444acadd44a01655fdc7400
Certificate serial: 019F6AA59E8F01F254F83996201D4A3B105C
Authority key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/v0uvRzJRH0DybgzTlr--Rro-ZDs.roa
Signing time: Thu 16 Jul 2026 11:17:46 +0000
ROA not before: Thu 16 Jul 2026 11:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 62.69.136.0/24 maxlen: 24
62.69.137.0/24 maxlen: 24
62.69.138.0/24 maxlen: 24
62.69.139.0/24 maxlen: 24
62.69.140.0/24 maxlen: 24
62.69.141.0/24 maxlen: 24
62.69.142.0/24 maxlen: 24
62.69.143.0/24 maxlen: 24
193.219.115.0/24 maxlen: 24
2a00:a640:10a0::/44 maxlen: 48
2a00:a640:20a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:a5:9e:8f:01:f2:54:f8:39:96:20:1d:4a:3b:10:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5754d19527fd85d0d444acadd44a01655fdc7400
Validity
Not Before: Jul 16 11:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf4baf4732511f40f26e0cd396bfbe46ba3e643b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:a7:2c:83:6a:22:0a:82:ab:de:07:06:48:
06:18:62:55:19:b5:0c:ab:36:8a:57:d3:c3:6c:56:
1a:d8:67:8c:fb:c9:6c:5c:1a:fa:91:c0:50:da:19:
3e:4a:9f:b2:1e:8e:da:d1:e8:89:0c:02:fe:cc:5a:
7a:63:63:81:52:0d:be:e7:be:99:48:35:30:c0:c1:
66:ea:67:90:40:87:31:b4:c3:42:35:1d:5d:65:da:
a6:27:f1:b5:79:e8:07:ae:4d:d3:c2:d4:6d:5e:20:
07:fd:2e:3d:b7:cf:b3:99:59:d1:4c:1d:77:c0:d5:
95:a9:8e:35:8d:c4:21:0e:fe:1f:4a:44:a3:ee:38:
53:ac:0f:0b:61:92:95:d4:b5:e4:1e:dc:6a:58:a9:
84:a7:df:dd:b0:e2:40:bc:69:80:c0:c9:9f:95:5a:
6e:a7:ad:38:17:69:94:51:75:bc:40:30:04:c8:8e:
03:c3:5a:e2:96:41:74:07:af:14:75:1f:51:8c:09:
fe:5e:6f:c3:df:36:2b:66:70:a2:87:ae:7a:1a:47:
cb:b0:ff:ea:6c:6d:cc:c2:53:92:83:ea:be:ca:00:
20:3a:b3:46:65:aa:b4:f1:7d:95:d1:43:fc:d1:ba:
6d:3e:39:95:2e:a2:4c:e1:55:53:7e:5f:df:65:0f:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4B:AF:47:32:51:1F:40:F2:6E:0C:D3:96:BF:BE:46:BA:3E:64:3B
X509v3 Authority Key Identifier:
keyid:57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/v0uvRzJRH0DybgzTlr--Rro-ZDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.136.0/21
193.219.115.0/24
IPv6:
2a00:a640:10a0::/44
2a00:a640:20a0::/44
Signature Algorithm: sha256WithRSAEncryption
16:eb:32:37:32:61:46:30:9f:95:90:65:9e:2c:b2:1e:5f:b1:
08:57:6b:dc:ec:44:19:de:df:91:9f:5c:72:67:70:9f:6b:02:
6c:79:64:f0:81:ff:eb:42:e4:5f:f4:2e:21:40:1e:b5:3c:84:
1b:00:e7:9b:d2:95:13:e1:de:cb:2d:30:39:3c:93:9b:95:cf:
86:0b:e7:7d:ee:2b:25:95:99:9b:f7:11:27:73:42:f2:f8:93:
04:12:e0:33:38:34:d2:61:0e:92:df:90:09:4d:13:24:c9:50:
08:20:f4:38:84:9c:18:72:48:db:f6:39:15:df:a9:d2:81:30:
5f:6e:70:66:9f:f1:a9:9d:c6:4a:95:13:7f:2f:c3:aa:dc:3e:
14:7c:e3:6b:76:69:21:02:4d:2c:0d:f7:77:19:70:d3:94:83:
75:a8:a3:cd:2b:5f:e7:3f:07:9b:54:7f:fa:d8:da:3e:38:f5:
b7:a6:f3:06:c1:5d:4a:82:c0:8e:9b:59:f4:10:17:e2:2f:bf:
c5:61:bb:ca:7b:29:4b:5a:11:bd:e2:7e:19:55:27:0c:6e:8e:
f9:ac:6e:4d:3d:f8:41:58:30:eb:f0:78:f7:8d:eb:c6:d8:e2:
31:09:48:dd:a2:13:fe:25:04:85:de:33:fa:99:53:46:bd:5e:
47:53:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:09 2026 by rpki-client