Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c7ec4a-c645-4dd1-8771-6828b156b4cd/1/axEycWf5krmxOnb41bjuLZiwLfI.roa
File: axEycWf5krmxOnb41bjuLZiwLfI.roa (raw, json)
Hash identifier: LwLWXJAxbgoGPjjjARg0O01L7/SW1wOTSWcnk+gZU5k=
Subject key identifier: 6B:11:32:71:67:F9:92:B9:B1:3A:76:F8:D5:B8:EE:2D:98:B0:2D:F2
Certificate issuer: /CN=fcafd5207df7a114a7acc3f6097a6a551bd18c4a
Certificate serial: 019CD76842EAB3784B1EA3947F90B90B4BCB
Authority key identifier: FC:AF:D5:20:7D:F7:A1:14:A7:AC:C3:F6:09:7A:6A:55:1B:D1:8C:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_K_VIH33oRSnrMP2CXpqVRvRjEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c7ec4a-c645-4dd1-8771-6828b156b4cd/1/axEycWf5krmxOnb41bjuLZiwLfI.roa
Signing time: Tue 10 Mar 2026 11:01:00 +0000
ROA not before: Tue 10 Mar 2026 11:01:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200691
IP address blocks: 170.62.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c7ec4a-c645-4dd1-8771-6828b156b4cd/1/_K_VIH33oRSnrMP2CXpqVRvRjEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c7ec4a-c645-4dd1-8771-6828b156b4cd/1/_K_VIH33oRSnrMP2CXpqVRvRjEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_K_VIH33oRSnrMP2CXpqVRvRjEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:68:42:ea:b3:78:4b:1e:a3:94:7f:90:b9:0b:4b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcafd5207df7a114a7acc3f6097a6a551bd18c4a
Validity
Not Before: Mar 10 11:01:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b11327167f992b9b13a76f8d5b8ee2d98b02df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:85:69:a1:62:75:fc:a7:e7:f3:14:83:9d:
77:0d:c9:b3:1e:89:ab:b0:87:d8:0b:7a:a0:2a:d3:
a1:a3:a1:f9:a3:3c:ee:45:1c:07:e8:ac:19:07:53:
49:7e:c1:78:b6:45:6f:35:e4:e6:90:3e:57:b3:49:
7f:92:ef:40:1a:ac:4c:99:1f:31:e2:99:61:92:42:
62:13:e6:46:e1:88:3c:70:cb:11:80:4c:ea:3f:05:
0b:ab:8c:82:45:bc:8d:ed:7c:ed:67:5f:14:0c:09:
a5:55:c5:a7:3b:63:b1:f9:cf:84:25:7c:74:6a:62:
3f:bf:d5:af:4b:82:5d:ed:48:e7:4a:fc:e7:ce:3e:
09:c1:69:d7:9c:52:5e:ab:4a:5a:e1:36:18:56:a3:
68:c3:b9:ad:86:7e:c3:7b:59:22:59:cb:d3:50:9a:
82:f0:a7:1a:a2:8f:23:b1:7d:21:85:1a:1d:b1:bd:
89:1e:26:11:7a:18:1e:30:cf:e2:c8:34:5e:a3:af:
d3:9b:6a:9d:02:a3:14:06:77:6b:74:ca:8a:e9:6b:
07:95:ee:5c:aa:92:f7:69:8d:dc:b1:46:89:d0:d7:
c3:5b:5b:a5:37:92:c8:49:4c:03:31:64:48:bd:dc:
08:44:b4:95:21:cf:01:1f:2a:fb:ac:93:ec:e7:44:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:11:32:71:67:F9:92:B9:B1:3A:76:F8:D5:B8:EE:2D:98:B0:2D:F2
X509v3 Authority Key Identifier:
keyid:FC:AF:D5:20:7D:F7:A1:14:A7:AC:C3:F6:09:7A:6A:55:1B:D1:8C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_K_VIH33oRSnrMP2CXpqVRvRjEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c7ec4a-c645-4dd1-8771-6828b156b4cd/1/axEycWf5krmxOnb41bjuLZiwLfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c7ec4a-c645-4dd1-8771-6828b156b4cd/1/_K_VIH33oRSnrMP2CXpqVRvRjEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.62.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d1:aa:a4:54:35:a5:5e:5a:5b:1f:62:46:f0:1e:b5:d1:03:
88:2f:93:73:8a:9e:9c:e9:2c:92:8e:c3:e7:0d:a7:2d:18:3f:
c3:29:f0:5c:75:3a:0a:a4:b4:02:e8:d8:a5:a9:7c:48:37:78:
75:fd:7f:f2:d0:fd:15:d1:75:7a:85:3a:f6:95:6a:da:f2:78:
d0:f3:32:31:8b:cc:15:e0:cf:51:77:96:4f:f6:10:37:de:5b:
41:3f:5d:c7:0b:30:40:8b:88:e5:3b:4c:c2:eb:68:1c:17:6e:
99:c4:aa:52:fd:d7:f1:d3:04:62:70:88:c4:92:d8:15:4e:1e:
ad:86:31:5b:ee:4a:ae:75:3b:e6:f1:52:5c:ba:51:d9:2b:27:
31:50:86:8d:38:05:f3:a9:bd:36:c7:85:5d:f1:45:c6:fa:4d:
be:c9:00:17:79:37:f2:bf:b6:39:9c:e2:fc:e4:76:ec:4d:66:
86:1b:c8:6b:4d:e3:2c:50:76:11:c8:9f:c5:2f:ef:3d:ad:3d:
7b:c0:87:b4:e0:61:55:8a:fe:d5:4d:90:30:41:54:bd:3e:67:
10:b5:2a:85:34:89:8d:42:c4:90:9e:8d:b5:19:63:5d:25:fc:
06:d3:f1:20:b8:ee:57:07:a0:ce:1a:6c:eb:fe:5d:22:0c:6f:
39:73:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:20:58 2026 by rpki-client