Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HgnXGXwVbfTI1BTlPNxAAI8kisw.roa
File: HgnXGXwVbfTI1BTlPNxAAI8kisw.roa (raw, json)
Hash identifier: dFymMsmg5Ti+zYG4ZBRRJH+gPEzJ65GsCvbf6LCEjZE=
Subject key identifier: 1E:09:D7:19:7C:15:6D:F4:C8:D4:14:E5:3C:DC:40:00:8F:24:8A:CC
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A0AF05C0F8B40D06F9615528456685D207
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HgnXGXwVbfTI1BTlPNxAAI8kisw.roa
Signing time: Thu 17 Sep 2026 10:59:44 +0000
ROA not before: Thu 17 Sep 2026 10:59:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 62.72.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:05:c0:f8:b4:0d:06:f9:61:55:28:45:66:85:d2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 17 10:59:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e09d7197c156df4c8d414e53cdc40008f248acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:8c:e3:4e:10:e8:d9:40:22:c6:12:45:74:
d8:3d:22:4f:09:54:9e:2f:ca:13:58:f3:aa:b1:11:
71:f4:e6:20:71:79:89:e7:36:44:25:5e:a3:3f:1a:
0c:7e:82:29:d0:1c:8a:ca:8e:cd:82:fd:b3:04:ef:
dd:f0:b3:4c:46:68:ef:dc:57:52:ea:22:1d:62:da:
f4:fe:1b:d2:39:d4:5e:cd:b2:df:f4:8c:3b:5a:46:
8f:5d:28:02:49:5b:1d:43:18:e6:ae:3d:06:c1:3e:
fa:be:49:9b:d4:83:c4:11:a2:23:81:91:3a:fc:da:
bb:71:41:4c:75:d3:de:b7:14:16:e0:f7:90:fa:d3:
f2:1e:4a:5a:56:e2:9e:d1:b8:76:13:35:5e:be:b1:
2f:5f:aa:ad:bc:53:f1:6d:22:40:e5:5d:b3:2f:73:
df:ac:91:87:11:f4:f9:5f:14:68:97:74:6f:46:d7:
3f:e8:d7:6a:73:d0:2b:71:c6:62:98:20:cb:26:a0:
8c:62:38:c8:48:bc:32:cc:5c:5f:b1:74:5e:11:d5:
80:d1:03:ae:b5:0f:00:46:ed:2d:ef:fa:9b:6e:02:
28:7c:2b:6e:2f:f5:21:08:6a:8b:a5:60:1c:a7:e0:
7f:a0:9f:2c:4b:4e:0d:fe:a7:97:26:14:83:4f:6f:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:09:D7:19:7C:15:6D:F4:C8:D4:14:E5:3C:DC:40:00:8F:24:8A:CC
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HgnXGXwVbfTI1BTlPNxAAI8kisw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/24
Signature Algorithm: sha256WithRSAEncryption
09:31:b8:4e:36:e9:30:bd:89:d1:49:23:fd:de:39:02:fe:28:
d6:0d:8e:15:4d:ac:ae:48:c1:b7:a8:c7:56:47:d8:7c:52:a9:
36:0b:ed:e9:67:e6:f6:e9:35:d1:32:db:9e:b1:08:ba:03:24:
c2:c4:ba:f4:9c:5d:bd:99:26:c1:98:b3:96:c7:78:5b:c2:bd:
4a:1f:ae:21:0f:a1:f8:c6:ec:a2:31:3b:2a:60:94:60:87:67:
a6:8b:27:b9:35:62:f8:3f:a9:3b:9b:3b:60:c5:9a:c1:c1:79:
a6:47:05:d9:c3:32:4c:73:b0:38:81:17:9e:7e:51:c1:85:f7:
ff:d8:35:d7:fd:10:59:e1:97:d7:5b:56:2f:50:cb:be:1d:4a:
3e:91:b4:a8:14:4c:43:e7:91:2f:29:fc:21:9d:8b:39:51:0c:
ca:1c:06:ac:96:d8:69:54:ea:a7:62:e9:2a:0e:1b:03:ca:33:
b1:5b:f5:6c:c5:d0:85:4d:01:3f:97:bd:48:28:2b:3a:e2:de:
b6:1e:47:e4:3a:86:2d:b6:6b:93:17:4e:3e:ea:92:9e:84:1f:
24:4a:d1:cb:b2:38:20:04:0a:be:bb:e0:f7:a9:61:65:e8:16:
0c:ec:ac:84:cf:ab:70:1d:35:b9:37:43:ca:75:bf:9d:36:29:
38:23:b6:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCvBcD4tA0G+WFVKEVmhdIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYwOTE3MTA1OTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTA5ZDcxOTdjMTU2ZGY0YzhkNDE0ZTUzY2RjNDAwMDhmMjQ4YWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EGM404Q6NlAIsYSRXTYPSJPCVSe
L8oTWPOqsRFx9OYgcXmJ5zZEJV6jPxoMfoIp0ByKyo7Ngv2zBO/d8LNMRmjv3FdS
6iIdYtr0/hvSOdRezbLf9Iw7WkaPXSgCSVsdQxjmrj0GwT76vkmb1IPEEaIjgZE6
/Nq7cUFMddPetxQW4PeQ+tPyHkpaVuKe0bh2EzVevrEvX6qtvFPxbSJA5V2zL3Pf
rJGHEfT5XxRol3RvRtc/6Ndqc9ArccZimCDLJqCMYjjISLwyzFxfsXReEdWA0QOu
tQ8ARu0t7/qbbgIofCtuL/UhCGqLpWAcp+B/oJ8sS04N/qeXJhSDT2/ZPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB4J1xl8FW30yNQU5TzcQACPJIrMMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvSGduWEdYd1ZiZlRJMUJUbFBOeEFBSThraXN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkiwMA0G
CSqGSIb3DQEBCwUAA4IBAQAJMbhONukwvYnRSSP93jkC/ijWDY4VTayuSMG3qMdW
R9h8Uqk2C+3pZ+b26TXRMtuesQi6AyTCxLr0nF29mSbBmLOWx3hbwr1KH64hD6H4
xuyiMTsqYJRgh2emiye5NWL4P6k7mztgxZrBwXmmRwXZwzJMc7A4gReeflHBhff/
2DXX/RBZ4ZfXW1YvUMu+HUo+kbSoFExD55EvKfwhnYs5UQzKHAaslthpVOqnYukq
DhsDyjOxW/VsxdCFTQE/l71IKCs64t62HkfkOoYttmuTF04+6pKehB8kStHLsjgg
BAq+u+D3qWFl6BYM7KyEz6twHTW5N0PKdb+dNik4I7b/
-----END CERTIFICATE-----
Generated at Fri Sep 18 04:17:50 2026 by rpki-client