Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/73060f-7f01-43e9-837a-284a7781ed1d/1/cLE7A5ERUJ4lAaSk1pMn6XXf4B0.roa
File: cLE7A5ERUJ4lAaSk1pMn6XXf4B0.roa (raw, json)
Hash identifier: qVCp3QCWBQiOuI+XY+asaXOeDfzdXjqFdqeYsE7cNPE=
Subject key identifier: 70:B1:3B:03:91:11:50:9E:25:01:A4:A4:D6:93:27:E9:75:DF:E0:1D
Certificate issuer: /CN=c24d1d10a5745df868d6c967b007a156c723f0c6
Certificate serial: 019C51162982E2CCA70D7C16DB3BB5BDE0F2
Authority key identifier: C2:4D:1D:10:A5:74:5D:F8:68:D6:C9:67:B0:07:A1:56:C7:23:F0:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk0dEKV0Xfho1slnsAehVscj8MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/73060f-7f01-43e9-837a-284a7781ed1d/1/cLE7A5ERUJ4lAaSk1pMn6XXf4B0.roa
Signing time: Thu 12 Feb 2026 09:02:12 +0000
ROA not before: Thu 12 Feb 2026 09:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49472
IP address blocks: 62.122.136.0/21 maxlen: 21
62.122.136.0/24 maxlen: 24
62.122.137.0/24 maxlen: 24
62.122.138.0/24 maxlen: 24
62.122.139.0/24 maxlen: 24
62.122.140.0/24 maxlen: 24
62.122.141.0/24 maxlen: 24
62.122.142.0/24 maxlen: 24
62.122.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/73060f-7f01-43e9-837a-284a7781ed1d/1/wk0dEKV0Xfho1slnsAehVscj8MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/73060f-7f01-43e9-837a-284a7781ed1d/1/wk0dEKV0Xfho1slnsAehVscj8MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wk0dEKV0Xfho1slnsAehVscj8MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:16:29:82:e2:cc:a7:0d:7c:16:db:3b:b5:bd:e0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d1d10a5745df868d6c967b007a156c723f0c6
Validity
Not Before: Feb 12 09:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70b13b039111509e2501a4a4d69327e975dfe01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:68:f6:5e:51:f8:0d:3a:9a:5b:d6:66:7f:
02:48:da:93:a9:49:e5:5f:10:77:aa:db:a5:87:fb:
ab:64:96:30:9f:81:f8:25:85:a7:2d:c8:4b:9b:91:
fe:4d:06:b9:d9:65:fc:15:c0:74:18:a5:2d:49:68:
87:fa:de:e8:81:bb:32:b7:64:79:4e:2a:3a:8d:33:
32:88:3c:6a:be:b7:dc:22:ea:bc:5f:ac:2c:32:57:
c1:94:34:23:85:4d:85:37:9c:9c:96:41:56:a1:03:
5c:ab:13:a4:02:f1:14:55:84:07:e7:04:92:94:de:
a3:94:82:71:9b:eb:60:7b:c1:3a:83:18:46:db:03:
99:32:b5:68:af:24:d3:84:98:eb:f3:1e:9a:4a:de:
cd:fc:46:7c:46:91:64:75:e5:f2:12:d3:d5:72:e0:
6b:81:0a:74:75:7f:61:66:c8:4c:04:17:d8:0b:07:
25:8c:50:64:e1:80:39:07:6e:85:99:3b:66:be:03:
28:cb:68:26:df:c9:f4:7f:f3:89:bb:69:b9:41:c9:
20:af:5c:a9:e1:60:21:bd:42:49:6c:0e:4e:e7:d4:
c6:93:5e:97:78:2e:4e:17:84:c2:11:14:40:98:2b:
45:a9:45:bb:95:ed:b1:b7:99:eb:02:38:09:4d:27:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B1:3B:03:91:11:50:9E:25:01:A4:A4:D6:93:27:E9:75:DF:E0:1D
X509v3 Authority Key Identifier:
keyid:C2:4D:1D:10:A5:74:5D:F8:68:D6:C9:67:B0:07:A1:56:C7:23:F0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk0dEKV0Xfho1slnsAehVscj8MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/73060f-7f01-43e9-837a-284a7781ed1d/1/cLE7A5ERUJ4lAaSk1pMn6XXf4B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/73060f-7f01-43e9-837a-284a7781ed1d/1/wk0dEKV0Xfho1slnsAehVscj8MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.136.0/21
Signature Algorithm: sha256WithRSAEncryption
61:c7:a5:6c:36:0b:95:a4:9f:5a:c9:63:d4:9c:4e:57:17:35:
f7:e7:d4:18:bb:3f:8d:07:3f:36:1c:9e:dd:90:a4:44:1e:ad:
d6:38:23:33:23:15:5d:1e:b0:65:9e:84:b6:6d:d8:e5:ba:67:
c4:85:20:13:a6:56:f8:9f:ab:33:1d:31:a4:4f:7d:e4:0f:b7:
14:3e:e6:08:1e:b8:87:97:30:eb:95:fc:d7:87:39:36:a6:81:
47:ba:28:4c:95:b5:db:a7:1c:b3:e0:0f:97:cb:40:68:e6:e1:
3b:23:0d:f9:7a:f2:28:03:ec:26:68:82:2d:f7:92:3a:73:2b:
db:d7:46:e7:4f:7a:d2:4c:97:cf:e3:0a:50:77:3c:d9:dd:cd:
91:3a:48:7e:4f:b1:88:a2:18:49:61:f4:82:f4:4b:e5:ac:d7:
ae:67:94:84:70:ce:15:6b:a6:2d:5a:ba:a1:ef:1c:70:60:c7:
1a:cf:cc:df:1e:41:67:88:77:a8:11:6a:0b:3d:aa:8b:74:c0:
94:a3:06:1c:e7:2a:2b:78:bb:3c:b9:42:6d:f2:d5:41:bf:63:
03:f5:10:2f:c6:63:c7:00:33:04:71:4d:39:ec:7c:09:e9:77:
cf:5a:fd:3e:f5:77:06:c3:e4:93:09:aa:4a:fd:66:27:a5:bc:
3b:e4:59:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxRFimC4synDXwW2zu1veDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNGQxZDEwYTU3NDVkZjg2OGQ2Yzk2N2IwMDdhMTU2Yzcy
M2YwYzYwHhcNMjYwMjEyMDkwMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGIxM2IwMzkxMTE1MDllMjUwMWE0YTRkNjkzMjdlOTc1ZGZlMDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbRo9l5R+A06mlvWZn8CSNqTqUnl
XxB3qtulh/urZJYwn4H4JYWnLchLm5H+TQa52WX8FcB0GKUtSWiH+t7ogbsyt2R5
Tio6jTMyiDxqvrfcIuq8X6wsMlfBlDQjhU2FN5yclkFWoQNcqxOkAvEUVYQH5wSS
lN6jlIJxm+tge8E6gxhG2wOZMrVoryTThJjr8x6aSt7N/EZ8RpFkdeXyEtPVcuBr
gQp0dX9hZshMBBfYCwcljFBk4YA5B26FmTtmvgMoy2gm38n0f/OJu2m5Qckgr1yp
4WAhvUJJbA5O59TGk16XeC5OF4TCERRAmCtFqUW7le2xt5nrAjgJTSeDewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHCxOwOREVCeJQGkpNaTJ+l13+AdMB8GA1UdIwQY
MBaAFMJNHRCldF34aNbJZ7AHoVbHI/DGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2swZEVLVjBYZmhvMXNsbnNBZWhWc2NqOE1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83MzA2MGYtN2YwMS00M2U5LTgzN2Et
Mjg0YTc3ODFlZDFkLzEvY0xFN0E1RVJVSjRsQWFTazFwTW42WFhmNEIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83MzA2MGYtN2YwMS00M2U5LTgzN2EtMjg0YTc3ODFlZDFk
LzEvd2swZEVLVjBYZmhvMXNsbnNBZWhWc2NqOE1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPnqIMA0G
CSqGSIb3DQEBCwUAA4IBAQBhx6VsNguVpJ9ayWPUnE5XFzX359QYuz+NBz82HJ7d
kKREHq3WOCMzIxVdHrBlnoS2bdjlumfEhSATplb4n6szHTGkT33kD7cUPuYIHriH
lzDrlfzXhzk2poFHuihMlbXbpxyz4A+Xy0Bo5uE7Iw35evIoA+wmaIIt95I6cyvb
10bnT3rSTJfP4wpQdzzZ3c2ROkh+T7GIohhJYfSC9EvlrNeuZ5SEcM4Va6YtWrqh
7xxwYMcaz8zfHkFniHeoEWoLPaqLdMCUowYc5yoreLs8uUJt8tVBv2MD9RAvxmPH
ADMEcU057HwJ6XfPWv0+9XcGw+STCapK/WYnpbw75FkA
-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:51 2026 by rpki-client