Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/2Mg2AzsXoeYsfaLwlaFlwLqoeyg.roa
File: 2Mg2AzsXoeYsfaLwlaFlwLqoeyg.roa (raw, json)
Hash identifier: /+Kdmi4z3S0vYlB4XVCOSf4BcQg3jjVkAmy+Jt18ho0=
Subject key identifier: D8:C8:36:03:3B:17:A1:E6:2C:7D:A2:F0:95:A1:65:C0:BA:A8:7B:28
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A0681D85A60F12803F0B63B6C99E5D3784
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/2Mg2AzsXoeYsfaLwlaFlwLqoeyg.roa
Signing time: Thu 03 Sep 2026 16:32:40 +0000
ROA not before: Thu 03 Sep 2026 16:32:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218955
IP address blocks: 62.72.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:1d:85:a6:0f:12:80:3f:0b:63:b6:c9:9e:5d:37:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 3 16:32:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8c836033b17a1e62c7da2f095a165c0baa87b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:ed:92:e8:e6:f7:03:1a:80:5b:c7:56:74:
79:b4:a2:4d:d5:b0:48:c6:d3:5f:a5:70:cc:0e:aa:
f5:25:d4:b5:9a:18:f0:70:08:28:7f:ac:aa:6a:3a:
35:7c:5d:03:cb:85:0b:04:9c:52:e2:f6:cd:26:8a:
7d:1d:02:e9:f3:1e:47:8e:f6:92:37:41:97:b9:67:
3a:7f:46:f1:d5:1b:be:f2:80:82:50:ff:fb:ea:5f:
cf:2f:fd:22:4b:63:01:72:a8:55:9c:9f:e3:85:e3:
7f:61:86:92:86:12:12:1f:ed:27:09:ef:50:7f:8c:
21:0a:56:4b:15:4b:2f:ce:57:22:74:7e:01:45:9c:
3f:62:da:31:dc:c9:bc:06:b1:8e:35:d3:e6:63:dc:
6d:4c:13:e1:7e:06:d5:aa:cf:80:76:a7:0c:86:81:
82:eb:ce:90:d6:ff:b7:1c:87:17:a2:c1:23:2a:46:
95:71:4f:e9:42:3e:5f:0a:f9:23:9c:7f:5a:d9:7b:
62:5a:51:52:c7:2d:35:39:41:97:b5:24:a6:70:c7:
b4:dd:20:17:53:3b:65:14:a5:dc:16:f3:90:9e:16:
c8:bd:4e:96:c6:7e:08:45:46:c8:e4:4e:3a:fe:4e:
43:16:fe:aa:64:b3:94:f9:88:23:17:04:26:f9:73:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:36:03:3B:17:A1:E6:2C:7D:A2:F0:95:A1:65:C0:BA:A8:7B:28
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/2Mg2AzsXoeYsfaLwlaFlwLqoeyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:10:6c:0a:b8:b6:a2:a2:4f:02:f4:78:fa:b9:75:51:0e:e8:
75:2c:7a:07:92:24:c2:40:92:14:aa:d6:de:95:3b:a2:73:81:
db:1c:f8:ea:80:f3:40:d6:21:c3:57:5d:1b:69:08:28:6e:a0:
48:a9:7e:63:d3:65:5e:0d:c6:65:a9:c4:23:e6:df:fe:48:30:
d3:4f:be:03:c8:9c:1d:a9:f7:bc:c1:3e:75:d2:44:ca:c9:c3:
4c:a8:66:4f:04:45:14:b8:fb:34:cc:b6:33:dc:f2:c4:f3:56:
a5:62:9f:80:7a:e9:42:47:5a:8f:86:d0:7b:61:cd:75:65:67:
53:3e:85:26:67:bb:cb:1a:e1:21:be:5a:6f:86:a0:c3:e6:e5:
b4:ac:49:d8:80:c2:39:eb:26:8b:76:36:47:c2:78:65:ca:58:
f9:df:ba:f0:23:8c:35:4e:6c:7a:3b:25:63:21:86:a0:21:12:
79:16:27:31:5f:04:26:6a:20:e8:a1:24:9b:b8:19:1f:ed:96:
ef:27:aa:a5:12:ba:6f:91:73:00:a9:b0:73:bb:48:0b:52:24:
bc:36:3a:a0:80:fe:f7:5b:f0:68:93:b7:74:b1:1a:7d:37:c6:
8e:ea:54:36:75:f4:b1:a2:f7:f2:5c:2b:9b:dc:f4:e1:80:85:
34:c9:af:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBoHYWmDxKAPwtjtsmeXTeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYwOTAzMTYzMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGM4MzYwMzNiMTdhMWU2MmM3ZGEyZjA5NWExNjVjMGJhYTg3YjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPrtkujm9wMagFvHVnR5tKJN1bBI
xtNfpXDMDqr1JdS1mhjwcAgof6yqajo1fF0Dy4ULBJxS4vbNJop9HQLp8x5HjvaS
N0GXuWc6f0bx1Ru+8oCCUP/76l/PL/0iS2MBcqhVnJ/jheN/YYaShhISH+0nCe9Q
f4whClZLFUsvzlcidH4BRZw/Ytox3Mm8BrGONdPmY9xtTBPhfgbVqs+AdqcMhoGC
686Q1v+3HIcXosEjKkaVcU/pQj5fCvkjnH9a2XtiWlFSxy01OUGXtSSmcMe03SAX
UztlFKXcFvOQnhbIvU6Wxn4IRUbI5E46/k5DFv6qZLOU+YgjFwQm+XMFfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNjINgM7F6HmLH2i8JWhZcC6qHsoMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvMk1nMkF6c1hvZVlzZmFMd2xhRmx3THFvZXlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkiwMA0G
CSqGSIb3DQEBCwUAA4IBAQA6EGwKuLaiok8C9Hj6uXVRDuh1LHoHkiTCQJIUqtbe
lTuic4HbHPjqgPNA1iHDV10baQgobqBIqX5j02VeDcZlqcQj5t/+SDDTT74DyJwd
qfe8wT510kTKycNMqGZPBEUUuPs0zLYz3PLE81alYp+AeulCR1qPhtB7Yc11ZWdT
PoUmZ7vLGuEhvlpvhqDD5uW0rEnYgMI56yaLdjZHwnhlylj537rwI4w1Tmx6OyVj
IYagIRJ5FicxXwQmaiDooSSbuBkf7ZbvJ6qlErpvkXMAqbBzu0gLUiS8NjqggP73
W/Bok7d0sRp9N8aO6lQ2dfSxovfyXCub3PThgIU0ya/w
-----END CERTIFICATE-----
Generated at Fri Sep 4 13:56:59 2026 by rpki-client