Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HxdiwSRUmgtfx_Kzpm8iakZlshQ.roa
File: HxdiwSRUmgtfx_Kzpm8iakZlshQ.roa (raw, json)
Hash identifier: NuZmUPsYGQYy/Wq1HHdRs3azySlyhMaPIgb+Xua5Zqw=
Subject key identifier: 1F:17:62:C1:24:54:9A:0B:5F:C7:F2:B3:A6:6F:22:6A:46:65:B2:14
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019A7BE505044B8EDD5DD2255C59AC53185D
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HxdiwSRUmgtfx_Kzpm8iakZlshQ.roa
Signing time: Thu 13 Nov 2025 06:26:37 +0000
ROA not before: Thu 13 Nov 2025 06:26:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 62.72.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 12:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7b:e5:05:04:4b:8e:dd:5d:d2:25:5c:59:ac:53:18:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 13 06:26:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f1762c124549a0b5fc7f2b3a66f226a4665b214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:af:b2:29:0b:2a:42:b5:76:0c:93:2b:1b:
0c:a6:04:c1:72:2d:36:62:bb:a1:a8:bf:cd:03:46:
97:49:5a:01:ea:60:27:72:ac:1f:16:e4:66:76:c8:
78:db:a5:ad:51:40:88:e8:c3:0f:d4:c0:ff:31:7e:
97:c2:3d:b5:21:92:70:ac:3c:b0:89:2b:b2:69:23:
22:dc:ba:10:0e:6c:66:9c:90:e2:3e:23:c6:fc:2a:
68:b4:28:b6:30:7c:da:15:11:ba:8b:6f:10:f1:0c:
2b:eb:ad:29:a3:48:58:46:60:c2:3b:70:43:7c:3b:
d6:05:57:79:ec:17:7e:8e:59:43:fc:09:3b:3c:ef:
c7:d6:17:e0:f4:89:bb:ba:7a:5c:7a:7b:bd:f2:99:
0c:4d:ed:7b:be:3b:3b:99:35:ad:91:c5:75:22:4c:
9e:fd:9a:f1:85:dc:ad:c4:99:19:f4:63:18:99:45:
3f:08:59:42:cf:83:2d:db:02:eb:05:8b:4f:66:16:
02:5e:ea:20:24:b0:42:c9:dd:78:dc:56:a8:1e:ca:
9b:f1:24:7f:97:22:35:88:ea:87:cc:f1:d9:45:75:
45:83:45:b4:4e:da:b1:f7:b6:a4:6c:f6:08:e3:3a:
f8:d8:8e:81:b1:2d:fa:7e:f7:74:10:42:07:02:a8:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:17:62:C1:24:54:9A:0B:5F:C7:F2:B3:A6:6F:22:6A:46:65:B2:14
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HxdiwSRUmgtfx_Kzpm8iakZlshQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.188.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0f:65:15:eb:95:cc:28:3b:7f:45:1b:cc:05:8f:04:17:63:
91:c9:ee:53:35:ff:f0:2c:c8:97:11:42:fe:88:ee:a5:e5:b9:
a4:6f:b6:0b:13:c6:f7:13:e0:01:c3:69:57:a1:f8:18:63:88:
bb:1b:7d:8f:cd:71:89:35:02:46:37:59:ff:36:53:a9:bb:01:
4e:24:40:ee:b8:af:73:df:3b:74:db:55:c3:ec:05:68:7e:c7:
b2:b5:1a:8e:ee:f7:ae:1d:30:84:07:db:2a:db:9f:a3:d8:2d:
fd:cc:9d:46:8e:39:5a:45:55:04:a4:ad:64:4d:a0:18:6f:ad:
d6:82:91:bc:14:54:cd:af:b5:f9:60:53:e5:47:04:4c:7d:2a:
97:b9:b8:27:ec:28:69:12:a2:01:94:54:4f:cd:5e:cc:30:d0:
b4:b7:a2:e4:8b:f9:eb:0e:43:20:61:71:46:dc:de:ff:87:92:
05:c1:f4:1f:93:c6:0f:cf:e4:84:46:bf:3a:6c:c4:e0:7b:a2:
da:df:2a:34:b6:cb:4e:3b:d9:c3:e7:50:4c:e0:fb:62:2a:2f:
6a:d7:19:b5:c7:8f:d2:98:6b:ab:b5:d3:d8:e4:46:7f:0b:92:
d1:de:ad:1d:32:c5:91:b7:bd:75:58:9a:6e:91:7e:5e:1b:96:
5d:b1:d8:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZp75QUES47dXdIlXFmsUxhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjUxMTEzMDYyNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjE3NjJjMTI0NTQ5YTBiNWZjN2YyYjNhNjZmMjI2YTQ2NjViMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE+vsikLKkK1dgyTKxsMpgTBci02
YruhqL/NA0aXSVoB6mAncqwfFuRmdsh426WtUUCI6MMP1MD/MX6Xwj21IZJwrDyw
iSuyaSMi3LoQDmxmnJDiPiPG/CpotCi2MHzaFRG6i28Q8Qwr660po0hYRmDCO3BD
fDvWBVd57Bd+jllD/Ak7PO/H1hfg9Im7unpcenu98pkMTe17vjs7mTWtkcV1Ikye
/ZrxhdytxJkZ9GMYmUU/CFlCz4Mt2wLrBYtPZhYCXuogJLBCyd143FaoHsqb8SR/
lyI1iOqHzPHZRXVFg0W0Ttqx97akbPYI4zr42I6BsS36fvd0EEIHAqj3nwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB8XYsEkVJoLX8fys6ZvImpGZbIUMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvSHhkaXdTUlVtZ3RmeF9LenBtOGlha1psc2hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPki8MA0G
CSqGSIb3DQEBCwUAA4IBAQAXD2UV65XMKDt/RRvMBY8EF2ORye5TNf/wLMiXEUL+
iO6l5bmkb7YLE8b3E+ABw2lXofgYY4i7G32PzXGJNQJGN1n/NlOpuwFOJEDuuK9z
3zt021XD7AVofseytRqO7veuHTCEB9sq25+j2C39zJ1GjjlaRVUEpK1kTaAYb63W
gpG8FFTNr7X5YFPlRwRMfSqXubgn7ChpEqIBlFRPzV7MMNC0t6Lki/nrDkMgYXFG
3N7/h5IFwfQfk8YPz+SERr86bMTge6La3yo0tstOO9nD51BM4PtiKi9q1xm1x4/S
mGurtdPY5EZ/C5LR3q0dMsWRt711WJpukX5eG5Zdsdgo
-----END CERTIFICATE-----
Generated at Mon Nov 17 15:54:32 2025 by rpki-client