Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/q2JOfzQUXDsaYML0xhmy_cGFoFo.roa
File: q2JOfzQUXDsaYML0xhmy_cGFoFo.roa (raw, json)
Hash identifier: gCK4j8piqegwon0im3JtD1xJ3+wnF3l7H3N4tNnqK7o=
Subject key identifier: AB:62:4E:7F:34:14:5C:3B:1A:60:C2:F4:C6:19:B2:FD:C1:85:A0:5A
Certificate issuer: /CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Certificate serial: 019F236831C68F0251C4086CFDB20010B40A
Authority key identifier: 5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/q2JOfzQUXDsaYML0xhmy_cGFoFo.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34139
IP address blocks: 62.140.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:31:c6:8f:02:51:c4:08:6c:fd:b2:00:10:b4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab624e7f34145c3b1a60c2f4c619b2fdc185a05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:b1:f5:da:b5:4e:a5:a9:5c:b7:26:a9:0d:
7f:29:e3:71:f6:88:c6:45:8f:35:1c:fd:50:d5:83:
b5:48:47:47:2f:3c:35:5d:42:df:4b:31:6a:f2:90:
1c:ea:b7:be:5d:52:38:fb:3c:5d:64:57:6c:cc:4a:
ac:ad:36:76:24:f4:ad:34:37:7a:11:5d:42:54:03:
2b:41:02:89:5b:7f:9d:73:bb:6d:e4:89:72:b0:d6:
d6:0e:04:a0:a5:30:ae:b0:9d:e1:0a:05:45:83:42:
9c:12:84:7c:05:c2:f7:ec:a7:ea:99:e7:b7:c4:4d:
b3:ca:9c:94:35:e1:e7:41:2c:a4:cd:52:d4:b5:03:
60:00:01:df:9d:68:9f:9b:9b:5b:75:13:e5:0f:77:
74:67:fd:e3:f5:e4:26:d1:15:da:e2:9a:7a:44:79:
8f:07:6e:75:e4:de:a5:e2:a1:49:91:ec:85:71:54:
13:8c:33:07:36:aa:a4:9a:1e:8f:c8:08:b4:cd:98:
de:ec:e0:f1:a4:02:2d:92:b7:f7:d7:0a:64:8a:02:
c8:09:99:17:f6:43:0e:92:e5:69:35:71:57:1a:23:
df:4c:c7:cd:0d:d5:f1:f0:02:e8:4f:ed:b0:8b:5c:
6e:5e:f7:50:84:05:fd:a7:62:2e:26:4d:68:6b:46:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:62:4E:7F:34:14:5C:3B:1A:60:C2:F4:C6:19:B2:FD:C1:85:A0:5A
X509v3 Authority Key Identifier:
keyid:5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/q2JOfzQUXDsaYML0xhmy_cGFoFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.232.0/24
Signature Algorithm: sha256WithRSAEncryption
df:ea:30:a7:9e:73:c3:18:01:e8:da:ac:02:dd:c6:04:7e:51:
0e:b2:88:d6:9e:75:6a:48:af:d9:98:1d:96:65:c8:16:ab:17:
ac:3f:03:03:5b:16:ae:3a:ca:16:ce:20:b7:f3:c1:8e:92:23:
c0:da:da:c2:3a:2e:71:1a:39:73:56:04:67:32:c6:96:6f:6e:
5f:65:37:ec:0c:64:d3:7b:98:fd:58:9f:e6:70:b4:08:62:12:
e9:31:8d:53:20:12:b4:bb:03:00:19:5b:da:7a:ef:a3:3f:b4:
3d:85:1f:11:8b:41:f5:6c:db:7e:e5:14:28:9a:b0:78:7a:89:
1a:0d:4e:62:f5:a6:39:c8:b3:ed:4e:29:7b:bc:16:bc:a4:cd:
22:16:b7:55:e1:85:40:f7:3e:98:0e:1d:20:6b:af:67:0a:87:
2c:d5:76:73:5f:4a:69:fc:15:38:4c:12:95:36:34:38:8d:96:
3e:96:7b:cf:b9:28:7d:42:42:b5:b8:11:9a:5e:fc:9d:04:ef:
f6:c3:96:42:4a:b2:a4:06:0b:9d:26:25:da:87:4b:e8:6c:d0:
9d:90:26:1d:f7:d6:22:43:17:93:55:7b:c4:9e:b5:c7:a5:6c:
da:9f:9a:78:4f:82:c7:4c:68:c3:6a:d0:5d:eb:ba:36:1a:0f:
3d:6f:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:04:55 2026 by rpki-client