Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/bVgFXhmiCtpbDc9ylmo9zoqKzek.roa
File: bVgFXhmiCtpbDc9ylmo9zoqKzek.roa (raw, json)
Hash identifier: GOe4tb2POgSuUcx9oLt0ppXtCPu00Xxudx2ysHpaSxc=
Subject key identifier: 6D:58:05:5E:19:A2:0A:DA:5B:0D:CF:72:96:6A:3D:CE:8A:8A:CD:E9
Certificate issuer: /CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Certificate serial: 019F23683421E7E684D3D41BB134DD4A34E9
Authority key identifier: 5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/bVgFXhmiCtpbDc9ylmo9zoqKzek.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208142
IP address blocks: 62.140.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:34:21:e7:e6:84:d3:d4:1b:b1:34:dd:4a:34:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d58055e19a20ada5b0dcf72966a3dce8a8acde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:f9:90:0a:91:1a:d1:71:79:74:9f:85:ed:
47:0d:f1:98:e8:ad:1d:b7:16:ab:2b:8d:55:7c:a9:
e7:a1:ab:c6:4e:0c:b8:9f:9d:9d:88:36:35:45:15:
fd:8e:97:47:59:ab:75:4e:69:e1:91:73:11:0c:74:
a1:c1:6f:3f:49:07:d9:c3:ed:1b:6d:b4:5f:cf:1d:
b0:3c:a7:ed:a1:bd:ca:7e:3d:c5:e2:ae:64:5f:f0:
ce:7a:5e:e8:ac:65:1f:5b:51:bf:4e:61:a1:15:45:
a7:f0:c5:ea:4f:94:94:f0:dc:d3:de:01:08:bf:ea:
e7:da:a4:48:2c:f1:45:4a:9f:31:34:fc:c1:cd:09:
81:ef:16:d9:a3:18:30:90:37:a0:77:d6:1e:22:88:
bc:c3:48:d6:73:7c:b1:56:74:ba:69:4f:63:92:bc:
ae:e2:e5:51:39:bc:9a:90:41:2b:91:0f:b2:6c:e3:
86:9b:07:9b:b0:78:60:0b:8c:e2:2b:d2:57:36:45:
f1:4a:87:37:62:eb:91:d8:ad:1a:93:51:8e:51:48:
63:35:57:ba:23:94:a1:e0:bf:e9:6e:d2:c5:9a:1b:
e1:a2:e6:98:a2:aa:06:4e:84:e8:61:cf:73:b5:83:
6d:aa:a3:f7:87:99:e5:78:c7:10:ab:bf:d4:9e:01:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:58:05:5E:19:A2:0A:DA:5B:0D:CF:72:96:6A:3D:CE:8A:8A:CD:E9
X509v3 Authority Key Identifier:
keyid:5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/bVgFXhmiCtpbDc9ylmo9zoqKzek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:fc:f7:cb:89:72:4b:ed:5e:dd:b8:3f:ad:da:d6:96:d4:31:
dd:f6:4a:b4:43:9c:07:54:2c:ca:05:20:1f:95:87:a4:12:f7:
70:11:87:80:b4:f1:3a:25:6f:e6:14:e3:cd:42:8b:17:6c:45:
e7:19:52:87:78:d9:06:e8:f6:9e:11:49:57:23:33:d1:28:18:
d4:5a:3a:ee:fd:26:1b:e3:85:3a:69:da:93:b1:ad:d7:d1:82:
65:e3:f2:21:8c:42:cf:e7:5f:d6:17:9a:40:c6:5c:c3:04:01:
7e:55:da:89:71:95:d6:53:99:f6:a0:8f:55:ba:04:85:44:a4:
66:06:25:26:16:17:58:6b:aa:18:cb:9f:9d:8b:f7:84:a9:6c:
0c:44:af:fa:11:f2:d6:17:8b:f8:fd:42:b2:df:56:b8:7f:9c:
66:66:fc:7d:ac:31:0c:d2:88:06:2d:17:8a:e8:82:1d:3f:e3:
c2:56:82:93:60:9b:16:50:8c:a0:65:24:93:28:71:e2:11:40:
68:c0:75:fa:cd:9e:d2:16:31:9e:95:bc:69:81:12:98:d9:45:
73:44:eb:84:23:4f:dc:42:29:24:9b:cd:8f:00:98:a1:5d:24:
10:f1:69:9d:71:ff:cc:0f:cc:eb:6f:ff:d5:bb:87:e5:06:d1:
d3:33:84:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:04:33 2026 by rpki-client