Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/aPJA-1GTVMhID719duRuK4wapF8.roa
File: aPJA-1GTVMhID719duRuK4wapF8.roa (raw, json)
Hash identifier: izVZqW0YYFo/yk/7S7JvY/UgDwbgyLItqdmQZx7fqpU=
Subject key identifier: 68:F2:40:FB:51:93:54:C8:48:0F:BD:7D:76:E4:6E:2B:8C:1A:A4:5F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019F6B279FEC6AE18FAC86BBD4301AFA4FD4
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/aPJA-1GTVMhID719duRuK4wapF8.roa
Signing time: Thu 16 Jul 2026 13:39:46 +0000
ROA not before: Thu 16 Jul 2026 13:39:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.252.0/24 maxlen: 24
45.8.253.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:27:9f:ec:6a:e1:8f:ac:86:bb:d4:30:1a:fa:4f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 16 13:39:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68f240fb519354c8480fbd7d76e46e2b8c1aa45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:f2:eb:62:b4:af:7d:64:29:9d:71:54:e7:
fb:6c:36:40:e5:c3:b9:0e:52:12:03:df:b2:b4:7e:
c0:e3:cf:49:99:15:1b:11:9b:27:0b:fc:3e:50:86:
6e:0e:55:df:fd:f1:70:de:aa:71:ea:df:5c:03:03:
98:b1:94:7a:bf:eb:94:5b:7b:dc:80:fb:e5:f2:a4:
90:63:98:47:6c:b6:67:4d:68:3f:e9:f8:4f:3e:7b:
db:11:26:4c:b9:7e:2c:63:da:21:5b:b5:d4:74:f1:
bc:7c:18:52:bd:84:2d:5b:9f:80:b2:66:ff:c6:7e:
c1:e7:44:7a:37:ae:a1:f9:a9:6d:12:cd:38:2b:5d:
81:45:80:0b:de:14:a1:79:15:94:70:67:bb:c2:77:
d7:f2:8a:15:ca:96:b4:d6:1b:82:b6:d9:15:99:1d:
40:38:80:ff:6b:17:3b:44:90:9b:3f:db:f9:fc:e7:
16:6e:2d:45:31:be:78:af:6e:64:f0:30:ef:02:e1:
e2:47:08:30:0b:a4:54:45:89:1c:2a:d7:4c:c3:7b:
e1:67:c7:36:b9:67:60:54:0f:49:e8:b6:b8:c0:20:
42:c1:fd:d0:52:94:62:04:e6:a7:b0:4a:5a:b7:69:
66:96:09:de:cb:77:22:f0:2a:8f:d7:03:29:a5:44:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F2:40:FB:51:93:54:C8:48:0F:BD:7D:76:E4:6E:2B:8C:1A:A4:5F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/aPJA-1GTVMhID719duRuK4wapF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.252.0/23
85.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6d:91:f2:f6:0e:80:9e:71:ff:ee:f3:b6:ad:5a:57:0d:91:
b1:52:73:9d:67:44:90:75:22:25:f3:f5:e1:54:2c:41:50:e1:
7e:90:e0:40:8a:0d:87:74:d8:52:83:96:81:41:42:f2:f4:f7:
fe:a2:55:c2:69:39:30:94:23:f9:4b:12:b8:98:77:2d:2b:e0:
28:45:ca:ca:d9:44:f8:3f:d8:c8:92:2f:d7:f0:71:2f:bb:8f:
df:e3:a3:3b:c4:23:3c:c4:05:90:38:9a:f7:c7:2b:21:56:b6:
60:5c:dc:86:2b:19:d8:e6:61:ae:78:00:d0:10:d9:c3:6e:01:
09:e1:f6:3a:5b:a3:99:91:fe:cb:0e:a7:3f:dc:ca:3f:25:71:
f7:8a:6e:98:82:0e:41:d1:5f:6c:b7:0c:e9:89:23:4e:73:0c:
2b:c3:88:82:53:c5:72:ca:dc:d1:7a:b5:c5:41:a5:65:ac:1e:
93:ef:dc:d5:00:14:da:88:91:43:43:be:cd:da:3b:82:9e:ed:
59:df:b2:7e:07:fc:b0:57:b5:99:de:1e:fb:18:3f:dd:0c:cb:
6c:aa:69:c3:bc:d1:ed:ce:30:ab:d7:b6:a9:cc:ff:6d:af:f7:
c9:e4:af:8d:c9:ea:ec:24:b4:69:9d:19:02:b3:d5:d0:75:36:
a2:1e:a2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:28 2026 by rpki-client