Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/1-I5FqFOjKLrYYIJZZ-XuN8omXds.roa
File: 1-I5FqFOjKLrYYIJZZ-XuN8omXds.roa (raw, json)
Hash identifier: PAIPjGd1pVMf6ElqeD0qtwPAX/uK0ZcotcD7BQI5DL8=
Subject key identifier: F8:8E:45:A8:53:A3:28:BA:D8:60:82:59:67:E5:EE:37:CA:26:5D:DB
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 019F242C30E2F8ECF391C37C06C570775980
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/1-I5FqFOjKLrYYIJZZ-XuN8omXds.roa
Signing time: Thu 02 Jul 2026 18:51:43 +0000
ROA not before: Thu 02 Jul 2026 18:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16074
IP address blocks: 62.112.160.0/19 maxlen: 24
62.145.32.0/19 maxlen: 24
62.145.32.0/21 maxlen: 24
192.113.0.0/16 maxlen: 24
192.113.128.0/17 maxlen: 24
192.113.204.0/24 maxlen: 24
2a01:67c0::/32 maxlen: 48
2a01:67c0::/40 maxlen: 48
2a01:67c0::/41 maxlen: 48
2a01:67c0:80::/41 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:2c:30:e2:f8:ec:f3:91:c3:7c:06:c5:70:77:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Jul 2 18:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f88e45a853a328bad860825967e5ee37ca265ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8a:72:ae:e4:c2:d4:dd:cd:87:75:f5:e3:6f:
10:7d:ad:6d:b6:82:26:27:5b:bf:c9:3e:ab:42:72:
bc:96:23:92:e2:7d:7a:90:05:af:eb:e9:a3:c8:a6:
0c:43:b0:14:6a:48:89:38:7d:57:e3:09:dd:3d:fe:
24:16:52:ed:bd:13:6f:a3:e6:2b:64:bc:2e:b2:9c:
b6:d8:64:7f:99:91:d4:4f:b1:17:47:68:e4:8c:e0:
ac:a7:0d:60:83:bf:9c:d1:7c:1c:26:e6:9f:a1:a4:
64:1e:71:f0:90:1b:78:63:d7:1c:f7:dc:ae:08:01:
64:5c:24:26:e3:d9:b4:c4:f9:9a:c8:b9:00:48:3b:
d4:b5:c4:ae:7e:f5:93:72:38:05:9d:ce:f0:fb:f5:
84:9e:2b:3c:0c:dc:f9:c0:09:df:e9:46:50:c9:bd:
51:cc:16:7a:2a:1f:25:e4:f8:5f:3a:9d:e7:34:b0:
74:27:08:2b:ea:ff:87:33:82:3b:8a:56:ca:90:9c:
b1:42:5f:bb:c6:5d:b2:e5:c8:a6:ad:71:99:30:e0:
c7:28:5c:17:21:01:0f:e1:88:de:12:d4:3c:f4:84:
9f:a6:81:ef:93:96:ea:10:ff:02:b5:1d:72:57:3d:
67:e4:4f:7c:d6:04:9d:0d:4c:c6:6c:9a:d8:ad:58:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8E:45:A8:53:A3:28:BA:D8:60:82:59:67:E5:EE:37:CA:26:5D:DB
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/1-I5FqFOjKLrYYIJZZ-XuN8omXds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.160.0/19
62.145.32.0/19
192.113.0.0/16
IPv6:
2a01:67c0::/32
Signature Algorithm: sha256WithRSAEncryption
6d:aa:80:ff:f1:8f:72:b0:a3:db:11:75:13:76:bd:d2:9c:87:
19:64:a9:37:32:16:93:e7:ed:9c:20:84:f2:00:72:7e:13:c7:
86:c3:d3:39:f5:26:72:9b:bb:91:c3:99:e3:4d:6a:fa:b9:b6:
0b:0f:f7:a5:ad:a1:57:60:87:d7:cb:8b:59:ad:59:63:1c:e4:
7b:14:ff:d3:ce:0b:9e:e2:82:76:aa:82:26:d5:bb:20:2f:5d:
48:59:f7:fa:89:3f:5e:19:53:7b:54:96:3e:4a:76:40:2a:0e:
5f:d0:04:e9:d8:72:cb:72:f2:bb:f3:bc:f7:71:6c:d3:ea:a9:
6d:65:77:7c:21:32:40:b3:b2:18:25:4d:d9:bd:5c:8f:91:e8:
31:c9:5b:73:38:dc:27:43:11:19:fd:e5:de:ab:46:79:53:55:
1b:c1:a4:16:7b:b9:a4:a5:63:65:97:53:ba:a9:44:86:5f:fa:
3c:de:ac:14:8b:5b:08:9d:ba:eb:ac:c3:89:a7:6b:61:ba:42:
b5:6f:73:b8:76:40:f4:c5:3b:28:20:3a:92:9c:c0:0e:3e:f5:
84:ca:9b:b7:a9:23:1d:9d:b4:12:a1:e7:6d:e5:f4:7b:12:4b:
b6:0c:49:05:4a:56:e0:c4:5c:d0:6b:ef:1b:a7:12:09:a2:87:
71:19:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:37:41 2026 by rpki-client