Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7q6V5tGfbvLhXSOBDKKjY0aQpUg.roa
File: 7q6V5tGfbvLhXSOBDKKjY0aQpUg.roa (raw, json)
Hash identifier: 9SCgr/w/haaJWaMw4d+zYBHUG+kEvKYplogM+l2gyv4=
Subject key identifier: EE:AE:95:E6:D1:9F:6E:F2:E1:5D:23:81:0C:A2:A3:63:46:90:A5:48
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019D6C2385299B82111BC738CB9EF8ABB440
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7q6V5tGfbvLhXSOBDKKjY0aQpUg.roa
Signing time: Wed 08 Apr 2026 08:09:20 +0000
ROA not before: Wed 08 Apr 2026 08:09:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50670
IP address blocks: 62.72.161.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.171.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.3.0/24 maxlen: 24
81.21.4.0/24 maxlen: 24
81.21.7.0/24 maxlen: 24
81.21.8.0/22 maxlen: 22
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.11.0/24 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
109.237.192.0/20 maxlen: 24
109.237.192.0/24 maxlen: 24
109.237.193.0/24 maxlen: 24
109.237.194.0/24 maxlen: 24
109.237.195.0/24 maxlen: 24
109.237.196.0/24 maxlen: 24
109.237.197.0/24 maxlen: 24
109.237.198.0/24 maxlen: 24
109.237.199.0/24 maxlen: 24
109.237.200.0/24 maxlen: 24
109.237.201.0/24 maxlen: 24
109.237.202.0/24 maxlen: 24
109.237.203.0/24 maxlen: 24
109.237.204.0/24 maxlen: 24
109.237.205.0/24 maxlen: 24
109.237.206.0/24 maxlen: 24
109.237.207.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.241.64.0/21 maxlen: 24
176.241.64.0/24 maxlen: 24
176.241.65.0/24 maxlen: 24
176.241.66.0/24 maxlen: 24
176.241.67.0/24 maxlen: 24
176.241.68.0/24 maxlen: 24
176.241.69.0/24 maxlen: 24
176.241.70.0/24 maxlen: 24
176.241.71.0/24 maxlen: 24
178.20.184.0/21 maxlen: 24
178.20.184.0/24 maxlen: 24
178.20.185.0/24 maxlen: 24
178.20.186.0/24 maxlen: 24
178.20.187.0/24 maxlen: 24
178.20.188.0/24 maxlen: 24
178.20.189.0/24 maxlen: 24
178.20.190.0/24 maxlen: 24
178.20.191.0/24 maxlen: 24
185.51.212.0/22 maxlen: 22
185.51.212.0/24 maxlen: 24
185.51.213.0/24 maxlen: 24
185.51.214.0/24 maxlen: 24
185.51.215.0/24 maxlen: 24
185.193.176.0/22 maxlen: 22
185.193.176.0/24 maxlen: 24
185.193.177.0/24 maxlen: 24
185.193.178.0/24 maxlen: 24
185.193.179.0/24 maxlen: 24
2a01:1d0::/29 maxlen: 29
2a01:1d0::/32 maxlen: 32
2a0a:2740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 14:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:23:85:29:9b:82:11:1b:c7:38:cb:9e:f8:ab:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 8 08:09:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eeae95e6d19f6ef2e15d23810ca2a3634690a548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:06:c8:b7:1b:e7:2f:22:da:f6:50:fa:02:
5f:7a:ef:8c:77:ec:80:b4:23:39:20:3a:1d:04:9d:
44:b6:de:73:44:a0:79:09:1f:81:67:1a:b5:e2:f1:
a6:c9:4a:98:b6:de:48:4b:e7:75:58:64:df:bb:09:
45:e5:97:95:2e:18:6b:c6:a6:8b:8c:94:ef:fc:08:
99:14:83:12:8c:95:ec:6b:81:6d:6f:7d:67:51:5e:
04:67:6b:92:b8:f4:19:ca:5b:49:81:87:df:95:23:
2f:45:c3:77:a2:c3:b5:5a:80:51:20:32:12:02:7d:
0b:3c:a2:e5:ae:3a:ff:e4:54:5c:06:85:09:af:f6:
0d:7e:33:bd:24:4f:03:a6:c0:ef:de:f9:31:24:28:
b9:ca:8a:0d:ad:f9:16:42:c3:04:c9:00:eb:5d:7b:
0e:dc:cb:b6:d0:8f:05:86:77:b2:27:95:fa:6d:22:
98:28:63:91:44:96:4d:13:7b:7d:ed:38:f5:fb:46:
84:ef:66:a2:80:c8:c4:9b:29:99:ab:10:aa:c1:2c:
87:36:c8:4f:93:cd:a4:5c:a7:a9:38:73:16:94:42:
79:7f:7a:73:c9:fc:b5:ce:b8:69:ef:64:01:40:bd:
a1:5d:6e:08:90:0f:fa:f5:76:0b:c1:02:03:f2:0b:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AE:95:E6:D1:9F:6E:F2:E1:5D:23:81:0C:A2:A3:63:46:90:A5:48
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7q6V5tGfbvLhXSOBDKKjY0aQpUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.162.255
62.72.170.0/23
62.72.174.0/24
62.72.187.0/24
62.72.191.0/24
81.21.1.0/24
81.21.3.0-81.21.4.255
81.21.7.0-81.21.15.255
109.237.192.0/20
176.57.56.0/23
176.241.64.0/21
178.20.184.0/21
185.51.212.0/22
185.193.176.0/22
IPv6:
2a01:1d0::/29
2a0a:2740::/29
Signature Algorithm: sha256WithRSAEncryption
7e:31:ed:9f:af:90:04:b8:b1:73:c4:40:d1:e2:63:d8:f6:1a:
c5:3a:53:85:4a:c5:39:5f:9f:fe:8b:20:1b:8f:a1:cd:b7:02:
e0:0f:31:24:b0:a9:f5:a9:b8:99:a4:66:70:ad:59:31:1d:52:
cd:e8:b9:3c:55:2e:28:77:8a:f1:9d:2a:e6:0a:3d:29:e5:aa:
00:a9:72:51:2b:d1:7e:97:98:77:f8:42:95:ed:85:2d:d1:5e:
55:98:a8:e5:2a:5e:28:8b:34:e4:3a:d1:c2:7f:45:99:95:f8:
63:e9:9d:51:0a:cc:e7:74:6d:85:31:b6:4a:fb:01:73:86:20:
eb:40:1d:87:89:7b:47:e1:1c:33:30:cd:72:cd:16:81:10:8e:
bf:bf:08:42:73:8b:be:8f:b7:d0:cb:16:a4:dd:36:c4:4d:1a:
5d:04:b5:93:de:4c:14:7d:3f:12:6a:af:16:fd:39:e2:ed:c3:
bb:1d:64:a8:29:da:81:74:3f:84:4a:d8:bb:8d:9f:05:2b:dc:
e1:2a:de:97:04:06:b7:83:a7:57:00:f7:44:28:28:99:24:5f:
cd:7d:1b:0f:39:6c:7e:19:ea:5a:df:f9:7b:b9:8a:09:6a:f8:
62:0a:0f:79:5e:36:13:e6:0d:63:4c:50:2b:7a:06:e1:1d:f3:
e1:aa:3a:20
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAZ1sI4Upm4IRG8c4y574q7RAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYwNDA4MDgwOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWFlOTVlNmQxOWY2ZWYyZTE1ZDIzODEwY2EyYTM2MzQ2OTBhNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iwGyLcb5y8i2vZQ+gJfeu+Md+yA
tCM5IDodBJ1Ett5zRKB5CR+BZxq14vGmyUqYtt5IS+d1WGTfuwlF5ZeVLhhrxqaL
jJTv/AiZFIMSjJXsa4Ftb31nUV4EZ2uSuPQZyltJgYfflSMvRcN3osO1WoBRIDIS
An0LPKLlrjr/5FRcBoUJr/YNfjO9JE8DpsDv3vkxJCi5yooNrfkWQsMEyQDrXXsO
3Mu20I8FhneyJ5X6bSKYKGORRJZNE3t97Tj1+0aE72aigMjEmymZqxCqwSyHNshP
k82kXKepOHMWlEJ5f3pzyfy1zrhp72QBQL2hXW4IkA/69XYLwQID8gsWAwIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFO6ulebRn27y4V0jgQyio2NGkKVIMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvN3E2VjV0R2ZidkxoWFNPQkRLS2pZMGFRcFVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijByBAIAATBsMAwDBAA+
SKEDBAA+SKIDBAE+SKoDBAA+SK4DBAA+SLsDBAA+SL8DBABRFQEwDAMEAFEVAwME
AFEVBDAMAwQAURUHAwQEURUAAwQEbe3AAwQBsDk4AwQDsPFAAwQDshS4AwQCuTPU
AwQCucGwMBQEAgACMA4DBQMqAQHQAwUDKgonQDANBgkqhkiG9w0BAQsFAAOCAQEA
fjHtn6+QBLixc8RA0eJj2PYaxTpThUrFOV+f/osgG4+hzbcC4A8xJLCp9am4maRm
cK1ZMR1Szei5PFUuKHeK8Z0q5go9KeWqAKlyUSvRfpeYd/hCle2FLdFeVZio5Spe
KIs05DrRwn9FmZX4Y+mdUQrM53RthTG2SvsBc4Yg60Adh4l7R+EcMzDNcs0WgRCO
v78IQnOLvo+30MsWpN02xE0aXQS1k95MFH0/EmqvFv054u3Dux1kqCnagXQ/hErY
u42fBSvc4SrelwQGt4OnVwD3RCgomSRfzX0bDzlsfhnqWt/5e7mKCWr4YgoPeV42
E+YNY0xQK3oG4R3z4ao6IA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 17:34:07 2026 by rpki-client