Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7VhcRrbhA9SjvQGyWb-9hOXO8SM.roa
File: 7VhcRrbhA9SjvQGyWb-9hOXO8SM.roa (raw, json)
Hash identifier: 8bWZcX1rsCVUCTyTO2NhjmcbF+njRZq30x4TnbYn9RE=
Subject key identifier: ED:58:5C:46:B6:E1:03:D4:A3:BD:01:B2:59:BF:BD:84:E5:CE:F1:23
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A19BD8925095DD06F289A0BEFD849463CF
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7VhcRrbhA9SjvQGyWb-9hOXO8SM.roa
Signing time: Mon 02 Nov 2026 10:40:24 +0000
ROA not before: Mon 02 Nov 2026 10:40:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 62.72.172.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:d8:92:50:95:dd:06:f2:89:a0:be:fd:84:94:63:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 2 10:40:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed585c46b6e103d4a3bd01b259bfbd84e5cef123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:02:ec:37:31:2d:00:00:d1:0b:32:ab:c5:
81:98:3d:02:09:e0:db:ee:e3:e1:68:72:f9:40:95:
56:75:5f:4d:fa:b7:f5:84:73:8e:05:cc:4a:53:80:
21:33:a7:47:2c:0d:77:f4:dc:6a:df:34:a9:69:d7:
7f:a1:a3:5e:27:d1:8c:67:e9:89:3e:e2:ae:fc:46:
48:9b:62:7a:7e:ad:bb:a9:bf:be:ae:bd:4e:b5:fb:
8f:e0:e7:58:0b:a7:2d:99:0a:a9:85:31:d3:b0:31:
81:62:33:64:5c:4e:df:f9:d0:f1:f2:38:e1:1c:44:
62:6b:cc:25:cd:aa:de:04:5b:40:40:82:5d:39:63:
1b:28:e5:d2:fe:54:99:18:17:5b:0d:41:eb:20:32:
ef:23:00:6d:5a:6d:85:08:ac:df:96:8f:5e:37:19:
ee:48:a3:8d:11:54:81:b1:63:80:e4:1f:80:b0:79:
7b:98:5c:1b:4c:94:2c:bc:ea:32:fa:f4:f4:c4:b2:
a8:91:e8:86:36:19:b7:34:ac:60:64:8c:00:c7:57:
0f:d8:70:cc:bc:a1:17:73:03:7d:ae:ce:a1:53:32:
eb:ad:e2:8e:c2:ea:ea:a2:0c:d3:54:8a:bc:08:7f:
7d:ff:41:55:4d:42:52:cd:48:50:a8:50:f7:6f:07:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:58:5C:46:B6:E1:03:D4:A3:BD:01:B2:59:BF:BD:84:E5:CE:F1:23
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7VhcRrbhA9SjvQGyWb-9hOXO8SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.172.0/23
62.72.190.0/24
Signature Algorithm: sha256WithRSAEncryption
66:53:67:a2:d3:bd:56:d2:f8:06:e4:f9:e9:5b:4d:3d:31:c2:
14:0a:50:fe:98:31:ef:40:be:f6:1c:da:5a:3b:9d:73:94:8c:
94:fa:01:54:b2:12:4f:b0:6f:f7:cc:7d:f0:7f:89:71:8f:c5:
d0:ce:21:db:f2:7f:8d:e8:ae:21:95:82:0b:e2:d3:9e:68:53:
fe:09:f7:88:ed:7f:45:a4:2b:a9:41:fc:11:9b:65:40:d0:18:
4d:31:e8:6c:0b:b9:c3:ee:67:44:e8:d1:2e:79:2e:2c:6a:d9:
18:00:5c:93:05:4b:05:ad:2a:bc:e5:27:a3:37:0a:b7:ec:6c:
36:1a:8f:b7:44:66:1d:75:b2:3f:75:3b:34:fe:32:94:e1:8d:
04:7b:30:04:d4:28:f3:ba:60:28:9e:30:6a:a0:39:4b:13:e4:
ab:76:e4:d5:65:2f:d7:48:17:e3:4c:ed:a0:fa:68:9a:df:74:
2d:0b:ee:c9:bf:a6:0c:9d:36:fc:6c:8e:52:60:ae:47:6a:3c:
15:9c:8d:7b:a9:e7:fa:b1:89:45:b9:64:b2:35:9e:d8:37:a1:
76:73:e6:e8:b5:ab:e8:5d:29:31:da:12:a0:3e:10:9e:d0:a3:
6a:e6:a8:82:e4:3e:b7:a0:b4:8a:f3:49:93:2d:62:ec:83:3c:
2c:1b:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:25:35 2026 by rpki-client