Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/LqfvwTExXbpA-mmoS4CVyct-jW8.roa
File: LqfvwTExXbpA-mmoS4CVyct-jW8.roa (raw, json)
Hash identifier: yWr58a6Ri7wqId2r3E63+QJQqslxGZbIUW1il3Wa0Fo=
Subject key identifier: 2E:A7:EF:C1:31:31:5D:BA:40:FA:69:A8:4B:80:95:C9:CB:7E:8D:6F
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019F18680C4F5A84D83EB472E62C97CA38A1
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/LqfvwTExXbpA-mmoS4CVyct-jW8.roa
Signing time: Tue 30 Jun 2026 12:01:39 +0000
ROA not before: Tue 30 Jun 2026 12:01:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199009
IP address blocks: 62.76.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:0c:4f:5a:84:d8:3e:b4:72:e6:2c:97:ca:38:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jun 30 12:01:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ea7efc131315dba40fa69a84b8095c9cb7e8d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:01:ad:e3:c9:b8:fc:d0:bd:a0:9a:44:fe:
fe:82:4e:30:47:6d:73:99:58:aa:4f:37:41:d5:ef:
b6:41:42:dd:c6:62:a3:74:d1:74:b8:d2:f5:c3:78:
77:fd:ab:78:a0:f7:ef:94:21:ef:5c:60:2f:e7:d4:
c6:ef:d8:03:f2:40:c6:a9:a7:87:da:e3:cb:2c:32:
09:cd:15:be:84:f1:9b:e6:2a:47:7b:7a:1f:f4:3b:
a4:07:e7:d5:48:b0:ef:67:65:6f:9e:55:6e:8b:c7:
29:9b:18:2f:18:b4:50:72:f3:f1:37:b7:4e:4e:e8:
bb:49:98:fa:e9:0d:60:9b:a0:8c:e1:40:32:42:ab:
99:d2:9d:97:a5:f0:bb:e5:45:00:66:d0:3d:00:88:
0e:e6:e7:90:4a:23:b0:d8:d6:cf:56:0e:98:9e:7d:
f6:c4:74:58:5a:49:9d:ac:ca:b5:d6:0f:83:06:d3:
57:58:9b:0a:5f:f9:b6:b0:2b:30:8e:d7:e5:d3:f5:
a8:d2:9e:93:ff:cc:19:a6:15:4b:45:93:77:d3:bf:
f9:3c:c9:1e:02:e4:63:6d:58:fe:aa:67:6f:e6:32:
73:38:2f:9a:6e:4d:67:38:82:cc:c1:7f:ce:97:2f:
fd:a9:d5:65:56:ef:b4:b9:27:c1:c5:18:99:12:30:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A7:EF:C1:31:31:5D:BA:40:FA:69:A8:4B:80:95:C9:CB:7E:8D:6F
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/LqfvwTExXbpA-mmoS4CVyct-jW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:08:28:8d:ef:e4:a3:0f:02:28:67:bb:7d:ca:06:31:f8:aa:
6a:e7:7e:a1:f9:5b:fe:a6:7a:93:b9:48:6e:08:84:66:30:d5:
cf:b8:b6:b2:c3:8e:60:68:5a:05:66:17:73:f6:44:f6:ed:7b:
17:cf:77:e5:f0:73:f0:4b:b7:cc:92:f4:84:de:e4:47:d4:f3:
16:af:0c:24:87:00:ee:14:00:15:be:fc:b7:80:ca:f7:ff:9f:
d4:e4:93:ae:17:c2:80:0f:1d:90:17:c3:a2:b7:47:ec:a0:90:
26:1a:b2:a2:5a:d1:0b:d0:0a:7e:52:36:65:97:cb:d1:07:d4:
90:bc:61:a6:1f:7b:1f:25:57:e8:a2:4f:c5:8c:b9:47:82:b9:
e8:26:68:63:aa:8d:2c:4d:d8:5f:67:1c:1b:57:65:ec:35:bd:
e8:bd:ef:b9:2f:cf:07:75:01:7e:76:bb:84:79:f6:82:f5:63:
ea:69:6a:72:7d:a4:d3:9d:e4:70:c8:a6:9f:d6:c4:82:b0:1c:
e4:29:3f:fa:21:56:1f:a3:59:53:7e:d2:be:e4:30:cb:c2:80:
c4:d4:c9:c7:81:67:18:12:84:10:50:ef:c1:59:18:3a:70:54:
e1:cf:fe:01:1c:3f:61:97:66:f9:e8:8a:12:2c:82:41:09:ae:
53:33:f2:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8YaAxPWoTYPrRy5iyXyjihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjYwNjMwMTIwMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWE3ZWZjMTMxMzE1ZGJhNDBmYTY5YTg0YjgwOTVjOWNiN2U4ZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNsBrePJuPzQvaCaRP7+gk4wR21z
mViqTzdB1e+2QULdxmKjdNF0uNL1w3h3/at4oPfvlCHvXGAv59TG79gD8kDGqaeH
2uPLLDIJzRW+hPGb5ipHe3of9DukB+fVSLDvZ2VvnlVui8cpmxgvGLRQcvPxN7dO
Tui7SZj66Q1gm6CM4UAyQquZ0p2XpfC75UUAZtA9AIgO5ueQSiOw2NbPVg6Ynn32
xHRYWkmdrMq11g+DBtNXWJsKX/m2sCswjtfl0/Wo0p6T/8wZphVLRZN307/5PMke
AuRjbVj+qmdv5jJzOC+abk1nOILMwX/Oly/9qdVlVu+0uSfBxRiZEjAmTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC6n78ExMV26QPppqEuAlcnLfo1vMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvTHFmdndURXhYYnBBLW1tb1M0Q1Z5Y3Qtalc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkyCMA0G
CSqGSIb3DQEBCwUAA4IBAQBLCCiN7+SjDwIoZ7t9ygYx+Kpq536h+Vv+pnqTuUhu
CIRmMNXPuLayw45gaFoFZhdz9kT27XsXz3fl8HPwS7fMkvSE3uRH1PMWrwwkhwDu
FAAVvvy3gMr3/5/U5JOuF8KADx2QF8Oit0fsoJAmGrKiWtEL0Ap+UjZll8vRB9SQ
vGGmH3sfJVfook/FjLlHgrnoJmhjqo0sTdhfZxwbV2XsNb3ove+5L88HdQF+druE
efaC9WPqaWpyfaTTneRwyKaf1sSCsBzkKT/6IVYfo1lTftK+5DDLwoDE1MnHgWcY
EoQQUO/BWRg6cFThz/4BHD9hl2b56IoSLIJBCa5TM/LD
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:46 2026 by rpki-client