Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1KNNXZL6ouoopWh_53dd61ybf1A.roa
File: 1KNNXZL6ouoopWh_53dd61ybf1A.roa (raw, json)
Hash identifier: cq5OwFDQKl5GHE8H8MFFcqH18XWpoUYy00ArlQZuRPE=
Subject key identifier: D4:A3:4D:5D:92:FA:A2:EA:28:A5:68:7F:E7:77:5D:EB:5C:9B:7F:50
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A139E41C999BC8CFB998ED38A80CD94300
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1KNNXZL6ouoopWh_53dd61ybf1A.roa
Signing time: Wed 14 Oct 2026 10:10:13 +0000
ROA not before: Wed 14 Oct 2026 10:10:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:e4:1c:99:9b:c8:cf:b9:98:ed:38:a8:0c:d9:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 14 10:10:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4a34d5d92faa2ea28a5687fe7775deb5c9b7f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:71:47:ef:fb:61:43:c2:6a:5d:1e:f9:80:
28:3c:e6:e9:53:1b:14:5a:2b:54:9a:20:2c:2b:a0:
a8:41:ea:ea:27:15:d6:64:54:b4:bb:89:f5:dd:59:
98:91:22:6c:13:0f:e5:ed:7f:b7:8a:80:fd:c6:a6:
88:ab:fa:4d:94:26:87:d5:bf:dd:c4:9f:43:7b:56:
51:a0:2c:ec:47:d1:ef:2e:ed:35:a0:42:6f:b4:c1:
ac:cf:c7:95:17:20:49:5e:66:b7:36:f2:be:c6:0b:
e7:4b:5a:bc:7b:34:49:a1:7a:41:ea:41:0b:0a:99:
cf:5f:cf:a3:fd:2a:92:4a:26:a3:0d:cf:19:5c:d1:
2d:b1:19:0b:bb:3c:e3:85:1d:c7:d6:37:fb:cd:e7:
bf:f3:eb:7a:8a:fa:e1:85:8d:2a:20:3e:0b:37:50:
59:de:e9:9a:66:9b:37:95:ea:42:79:6c:5a:9f:59:
56:c8:28:26:3b:9c:27:98:1b:4b:fb:86:8a:46:bc:
a0:08:b2:8f:36:a9:fa:56:a3:c1:89:a9:13:42:63:
02:ab:0b:fd:10:ec:49:b4:8e:1a:09:cf:29:58:c9:
75:e3:48:15:d8:34:b6:0e:a7:8f:e0:c0:16:af:50:
fe:80:51:9b:98:eb:63:82:27:37:c5:a3:a5:ee:70:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A3:4D:5D:92:FA:A2:EA:28:A5:68:7F:E7:77:5D:EB:5C:9B:7F:50
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1KNNXZL6ouoopWh_53dd61ybf1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.174.0/24
62.72.176.0/24
176.57.54.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
71:72:13:30:84:dd:e7:51:7a:48:99:99:9a:67:4a:fd:9f:cb:
16:28:96:08:89:26:79:73:db:75:56:c1:61:fa:2d:25:d4:e5:
f8:14:7e:e9:fa:6d:b3:1e:b9:df:da:36:ad:5a:d0:0b:99:56:
8c:13:d9:f3:40:41:c2:fe:48:b0:7b:3f:78:ee:d6:cd:f7:d3:
96:13:6c:0b:32:8f:8c:98:5e:38:23:c5:a0:48:9f:c1:8d:d8:
0b:10:1c:f1:6d:8f:58:48:99:31:6e:c5:5d:ad:e9:6f:34:f7:
eb:b9:be:17:2c:c7:2d:4d:48:3b:ec:a3:0c:2d:a0:b0:38:cb:
9c:5c:c4:d6:6c:46:09:59:39:a2:d1:94:1e:ea:41:3b:ce:bc:
0d:20:ec:03:ac:8c:ee:eb:a8:91:7a:75:2e:3d:5f:7c:19:04:
fd:93:dd:dc:d5:e0:75:3e:54:ad:1f:7c:08:5b:e5:a3:4f:0c:
f0:55:a3:01:d0:7c:97:3b:e6:74:95:32:25:03:a4:8f:eb:ec:
6d:39:7a:3a:8c:f2:4f:67:cd:f7:4c:2a:22:65:74:94:56:31:
2d:2d:61:52:3a:a0:4d:b4:c6:d6:f4:e0:8a:24:08:c5:5e:72:
bf:d1:53:8f:a4:f9:95:00:01:1a:4b:56:11:d0:29:42:8a:81:
ce:7d:39:d2
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAaE55ByZm8jPuZjtOKgM2UMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYxMDE0MTAxMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGEzNGQ1ZDkyZmFhMmVhMjhhNTY4N2ZlNzc3NWRlYjVjOWI3ZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiJxR+/7YUPCal0e+YAoPObpUxsU
WitUmiAsK6CoQerqJxXWZFS0u4n13VmYkSJsEw/l7X+3ioD9xqaIq/pNlCaH1b/d
xJ9De1ZRoCzsR9HvLu01oEJvtMGsz8eVFyBJXma3NvK+xgvnS1q8ezRJoXpB6kEL
CpnPX8+j/SqSSiajDc8ZXNEtsRkLuzzjhR3H1jf7zee/8+t6ivrhhY0qID4LN1BZ
3umaZps3lepCeWxan1lWyCgmO5wnmBtL+4aKRrygCLKPNqn6VqPBiakTQmMCqwv9
EOxJtI4aCc8pWMl140gV2DS2DqeP4MAWr1D+gFGbmOtjgic3xaOl7nAseQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFNSjTV2S+qLqKKVof+d3Xetcm39QMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvMUtOTlhaTDZvdW9vcFdoXzUzZGQ2MXliZjFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAE+SKID
BAA+SKgDBAA+SK4DBAA+SLADBACwOTYDBACwOT8wDQYJKoZIhvcNAQELBQADggEB
AHFyEzCE3edRekiZmZpnSv2fyxYolgiJJnlz23VWwWH6LSXU5fgUfun6bbMeud/a
Nq1a0AuZVowT2fNAQcL+SLB7P3ju1s3305YTbAsyj4yYXjgjxaBIn8GN2AsQHPFt
j1hImTFuxV2t6W809+u5vhcsxy1NSDvsowwtoLA4y5xcxNZsRglZOaLRlB7qQTvO
vA0g7AOsjO7rqJF6dS49X3wZBP2T3dzV4HU+VK0ffAhb5aNPDPBVowHQfJc75nSV
MiUDpI/r7G05ejqM8k9nzfdMKiJldJRWMS0tYVI6oE20xtb04IokCMVecr/RU4+k
+ZUAARpLVhHQKUKKgc59OdI=
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:20 2026 by rpki-client