Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/RpGkYDx_nYH3yMdAQ8pBPpPX3-o.roa
File: RpGkYDx_nYH3yMdAQ8pBPpPX3-o.roa (raw, json)
Hash identifier: iOiQQIXB308RmUIDQRIn1rlftsVJp7BrJi1njcVLXlU=
Subject key identifier: 46:91:A4:60:3C:7F:9D:81:F7:C8:C7:40:43:CA:41:3E:93:D7:DF:EA
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 019CF7F6C1742731DBB2F1DEF6613AC891C5
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/RpGkYDx_nYH3yMdAQ8pBPpPX3-o.roa
Signing time: Mon 16 Mar 2026 18:44:29 +0000
ROA not before: Mon 16 Mar 2026 18:44:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47589
IP address blocks: 62.150.52.0/24 maxlen: 24
62.150.56.0/24 maxlen: 24
62.150.92.0/24 maxlen: 24
62.150.119.0/24 maxlen: 24
62.150.164.0/22 maxlen: 22
62.150.204.0/22 maxlen: 22
62.150.224.0/22 maxlen: 22
62.150.228.0/22 maxlen: 22
62.150.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:f6:c1:74:27:31:db:b2:f1:de:f6:61:3a:c8:91:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Mar 16 18:44:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4691a4603c7f9d81f7c8c74043ca413e93d7dfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:91:44:ba:36:ec:29:18:9d:5d:79:db:68:
80:e9:10:2d:f4:da:b7:63:28:f5:bb:9b:27:75:6b:
c6:1f:0c:f5:85:af:15:2a:40:6e:9d:58:f2:1a:73:
18:1c:2c:1a:0c:d8:80:1d:39:29:03:0e:40:c1:c3:
af:d2:45:80:10:55:54:92:54:88:6c:0a:2e:82:9e:
f5:31:a7:89:46:cd:ae:b2:7a:0a:18:15:43:05:96:
25:38:c1:64:a3:38:0a:1e:2b:9b:33:ee:a8:8b:81:
85:78:c0:c3:9d:3f:49:db:66:f3:35:39:f9:bd:28:
6d:8a:b7:ca:bb:ac:80:7b:9b:5f:0a:61:c2:57:63:
8a:ce:13:33:0c:27:39:d5:0b:a0:90:f6:11:7f:58:
7a:60:50:c7:83:4e:22:44:f7:00:f8:24:44:d3:e6:
50:0d:00:94:43:ba:f5:f5:e4:b9:95:d4:7a:ac:9e:
de:46:b6:3b:2b:73:06:32:2a:da:86:91:7c:1c:43:
96:ae:17:2e:2f:fd:07:c9:3e:c9:fe:d2:f3:f3:46:
e6:2b:0b:e2:8a:db:8e:74:1e:a7:8f:95:fa:cc:6d:
e5:3a:32:2f:27:a3:82:e0:4a:cf:69:00:8c:2e:92:
58:97:c2:a4:81:5d:e4:cf:37:dc:4c:b9:b2:95:31:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:91:A4:60:3C:7F:9D:81:F7:C8:C7:40:43:CA:41:3E:93:D7:DF:EA
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/RpGkYDx_nYH3yMdAQ8pBPpPX3-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.150.52.0/24
62.150.56.0/24
62.150.92.0/24
62.150.119.0/24
62.150.164.0/22
62.150.204.0/22
62.150.224.0/21
62.150.244.0/22
Signature Algorithm: sha256WithRSAEncryption
96:8b:cb:d9:49:58:db:0f:48:2c:52:cb:f1:61:7f:7e:11:90:
8b:c3:16:95:b5:14:ca:3b:a2:d4:9b:17:4c:a9:38:2f:f7:b3:
70:bc:12:ab:ab:3d:a1:bc:ec:6c:2b:f1:2a:c2:d5:02:44:ad:
07:2d:5c:72:41:4f:30:f6:60:63:01:38:db:73:8d:48:fd:7c:
4d:1d:41:e3:d2:da:f8:26:11:74:7e:e2:30:54:4f:aa:97:e5:
c4:68:2c:79:24:c5:57:97:76:8c:29:58:4e:91:43:4a:2a:c3:
33:23:f1:1c:ec:5a:11:36:92:ae:90:7a:25:88:3e:1f:d9:90:
19:6b:84:00:97:03:a4:b1:20:e2:21:76:91:3c:12:c6:63:03:
b7:cc:e6:4c:0d:2b:8a:55:0b:4c:8a:a4:4c:08:82:ff:8c:b5:
dd:ad:34:3b:90:03:7a:46:37:94:3b:de:56:69:2c:f0:e5:4d:
17:d0:ac:36:ca:ed:ce:88:28:49:a8:48:75:ec:1c:85:b9:02:
78:5c:d4:76:00:eb:b9:1c:0e:23:d4:fe:e9:cd:8a:a5:9b:93:
10:46:c8:71:ac:48:c8:a9:f1:35:41:ff:24:e6:4e:92:a4:f9:
63:53:1d:d6:d3:3e:ab:7c:0f:be:22:b6:27:7f:1f:92:d7:f2:
18:26:ac:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:08 2026 by rpki-client