Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5QbMfhydJVLPSeBf5Ukh6S98i0Y.roa
File: 5QbMfhydJVLPSeBf5Ukh6S98i0Y.roa (raw, json)
Hash identifier: GBBR+bDf+z5V4go+PrCEmxAQhZa3riT6wkZjr67xnTI=
Subject key identifier: E5:06:CC:7E:1C:9D:25:52:CF:49:E0:5F:E5:49:21:E9:2F:7C:8B:46
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019F3C0B5686BC232529406026C2618AB968
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5QbMfhydJVLPSeBf5Ukh6S98i0Y.roa
Signing time: Tue 07 Jul 2026 10:06:43 +0000
ROA not before: Tue 07 Jul 2026 10:06:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:0b:56:86:bc:23:25:29:40:60:26:c2:61:8a:b9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 7 10:06:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e506cc7e1c9d2552cf49e05fe54921e92f7c8b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:bc:ba:1c:9b:a6:7f:e2:83:01:b2:08:a1:
ba:51:c9:dc:04:ec:9d:f6:67:a2:c9:0a:5c:7d:f0:
0e:09:99:cf:aa:01:6c:e2:17:4f:2e:2c:66:5a:0d:
dd:ea:d4:77:06:12:62:1c:31:ee:12:11:49:0b:48:
f5:39:14:40:aa:e3:b4:87:d6:3a:b6:07:59:11:0f:
1c:d1:7c:b1:5e:36:83:ff:41:dd:ae:bd:8b:03:c7:
c6:cd:7e:79:df:e2:77:d1:96:2c:7d:69:76:ab:ee:
8c:d7:5e:c8:0f:f3:6a:31:c2:26:46:d3:96:cc:59:
f6:c8:57:29:a5:c7:5a:c2:ab:cf:c0:07:5b:f1:6e:
2e:49:a8:68:15:4f:1c:be:14:a8:24:6c:cf:6c:e5:
22:8c:2f:c7:ff:3f:de:82:99:7f:9e:e2:f1:c1:16:
5e:82:2b:77:99:46:d0:e1:f9:9e:41:06:f3:86:e7:
44:71:0a:67:12:1d:77:c9:b6:11:c6:b0:77:35:a1:
34:f0:b8:ce:f7:8a:f2:8f:95:66:bf:48:6d:c9:64:
05:3e:ce:2c:61:84:fc:c1:7e:64:16:83:a1:13:6a:
6c:5f:7d:fc:b3:e9:12:8b:8e:ac:ff:c8:a4:5a:a7:
3a:46:0c:e8:3c:83:1b:fd:54:36:84:0b:54:74:e7:
4e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:06:CC:7E:1C:9D:25:52:CF:49:E0:5F:E5:49:21:E9:2F:7C:8B:46
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5QbMfhydJVLPSeBf5Ukh6S98i0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.174.0/24
62.72.176.0/24
62.72.180.0/24
176.57.62.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:8d:84:06:76:aa:12:56:22:f4:e2:8a:c8:57:0f:ae:4a:4f:
26:27:35:cb:be:3b:3d:46:62:ca:23:d8:b7:a6:91:1c:7d:a3:
ba:3f:2f:67:20:f0:f6:0e:c3:e6:09:23:ee:a6:87:83:64:29:
b3:5d:18:64:77:7e:a3:ed:f6:e7:f9:e4:bd:59:d5:88:59:b4:
cd:97:68:0b:c7:5c:39:9e:4a:3a:ed:7a:4f:51:0c:18:7d:75:
e1:63:52:0a:bc:af:97:ff:76:69:36:00:a2:e0:20:3b:a1:af:
86:10:27:c4:05:7a:ce:c1:67:24:d1:c9:3b:91:6a:e1:54:ea:
25:26:d9:bf:35:10:24:70:79:05:3c:b4:ca:2a:63:63:5d:af:
27:93:75:e8:5a:41:f2:77:68:2b:e8:d7:85:26:2e:01:a1:31:
d2:bd:54:2b:e2:bf:91:bf:63:e2:f2:de:c1:a4:4e:32:b5:38:
1e:e1:d5:d1:94:3b:54:7b:73:c3:d5:24:e3:7c:ac:b4:c4:2e:
df:a4:07:ee:91:62:7e:07:22:12:00:68:c9:d2:a3:a4:2e:b2:
a9:1d:76:2f:30:19:1a:04:56:50:04:f5:d2:c0:ad:17:af:a4:
49:a2:84:a2:87:ce:21:ae:bf:d1:92:53:5d:f7:fd:86:68:a1:
72:de:d5:db
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ88C1aGvCMlKUBgJsJhirloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYwNzA3MTAwNjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTA2Y2M3ZTFjOWQyNTUyY2Y0OWUwNWZlNTQ5MjFlOTJmN2M4YjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT68uhybpn/igwGyCKG6UcncBOyd
9meiyQpcffAOCZnPqgFs4hdPLixmWg3d6tR3BhJiHDHuEhFJC0j1ORRAquO0h9Y6
tgdZEQ8c0XyxXjaD/0Hdrr2LA8fGzX553+J30ZYsfWl2q+6M117ID/NqMcImRtOW
zFn2yFcppcdawqvPwAdb8W4uSahoFU8cvhSoJGzPbOUijC/H/z/egpl/nuLxwRZe
git3mUbQ4fmeQQbzhudEcQpnEh13ybYRxrB3NaE08LjO94ryj5Vmv0htyWQFPs4s
YYT8wX5kFoOhE2psX338s+kSi46s/8ikWqc6RgzoPIMb/VQ2hAtUdOdO0wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFOUGzH4cnSVSz0ngX+VJIekvfItGMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvNVFiTWZoeWRKVkxQU2VCZjVVa2g2Uzk4aTBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAE+SKID
BAA+SKgDBAA+SK4DBAA+SLADBAA+SLQDBAGwOT4wDQYJKoZIhvcNAQELBQADggEB
AI+NhAZ2qhJWIvTiishXD65KTyYnNcu+Oz1GYsoj2LemkRx9o7o/L2cg8PYOw+YJ
I+6mh4NkKbNdGGR3fqPt9uf55L1Z1YhZtM2XaAvHXDmeSjrtek9RDBh9deFjUgq8
r5f/dmk2AKLgIDuhr4YQJ8QFes7BZyTRyTuRauFU6iUm2b81ECRweQU8tMoqY2Nd
ryeTdehaQfJ3aCvo14UmLgGhMdK9VCviv5G/Y+Ly3sGkTjK1OB7h1dGUO1R7c8PV
JON8rLTELt+kB+6RYn4HIhIAaMnSo6Qusqkddi8wGRoEVlAE9dLArRevpEmihKKH
ziGuv9GSU133/YZooXLe1ds=
-----END CERTIFICATE-----
Generated at Wed Jul 8 04:40:47 2026 by rpki-client