Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JEXjmyvaCY6kd0XBI4gnd6RujMQ.roa
File: JEXjmyvaCY6kd0XBI4gnd6RujMQ.roa (raw, json)
Hash identifier: ovAUFikiLG2taOoXNI7dIX+zhL17JAWSt7DJKtOoA08=
Subject key identifier: 24:45:E3:9B:2B:DA:09:8E:A4:77:45:C1:23:88:27:77:A4:6E:8C:C4
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A19BD892B65D3FA60670F2D604CA203672
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JEXjmyvaCY6kd0XBI4gnd6RujMQ.roa
Signing time: Mon 02 Nov 2026 10:40:24 +0000
ROA not before: Mon 02 Nov 2026 10:40:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 62.72.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:d8:92:b6:5d:3f:a6:06:70:f2:d6:04:ca:20:36:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 2 10:40:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2445e39b2bda098ea47745c123882777a46e8cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:39:f4:00:c7:f9:97:2c:68:c2:fd:b2:0e:
5e:d7:c8:c2:ce:05:d8:52:46:b5:3f:f4:a1:74:84:
39:63:b8:5b:da:6b:13:24:13:b8:be:5f:3f:e9:b6:
5c:9f:a2:7c:c3:18:3c:ea:df:45:e9:72:2f:99:f3:
d4:82:0f:06:42:8e:2a:75:54:c7:b9:46:96:3d:7a:
59:a2:1c:b1:4e:44:07:25:22:82:17:5b:49:8e:69:
09:64:17:68:e0:85:4c:16:76:42:5d:ca:36:10:11:
f5:5c:2e:18:1e:21:7a:a8:5e:85:8f:67:25:a9:fe:
64:86:43:05:3b:33:a7:8f:c9:e2:68:ce:aa:12:40:
be:e2:44:e2:50:e2:ea:40:91:75:44:68:48:a4:fc:
67:bb:39:18:f5:3d:9a:63:0c:34:9a:72:ea:d9:34:
13:c1:74:27:6b:d7:d8:f6:5e:b1:fc:9f:ed:26:bd:
91:ff:16:fe:7f:54:7d:28:56:e1:f4:5b:6b:17:49:
d0:a2:7e:37:93:ff:d3:fe:a6:b3:11:9e:9c:50:df:
05:e9:16:4b:11:20:e6:db:69:0c:e9:2a:7d:52:89:
f7:e2:be:a5:f7:6e:a7:d2:5b:98:d6:70:4d:fe:0b:
a8:e0:b5:fc:bd:df:e2:f1:97:db:72:c8:31:b5:9b:
fe:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:45:E3:9B:2B:DA:09:8E:A4:77:45:C1:23:88:27:77:A4:6E:8C:C4
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JEXjmyvaCY6kd0XBI4gnd6RujMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:27:ea:9d:93:22:f1:5d:0c:d7:09:f7:69:aa:0a:b2:fb:b4:
0a:7e:c0:08:f7:73:86:4a:ef:cd:c8:31:ca:12:21:bc:6d:06:
98:98:b8:23:ef:12:da:66:2f:48:55:45:20:6b:95:b0:2f:19:
54:d3:55:19:bc:eb:ea:d6:d3:0e:3d:3c:2a:81:10:1d:50:5a:
fa:b7:14:6e:29:f6:55:d6:04:0d:01:55:b5:a6:e3:80:87:8d:
db:23:2c:be:7c:73:e8:da:ab:3a:01:2d:5d:eb:11:26:46:38:
c4:22:40:bd:6a:f9:8d:f9:c7:11:91:41:77:a7:32:af:dd:b8:
9e:29:31:10:53:b8:94:db:f8:9f:d5:c2:90:2f:85:d3:42:e2:
2d:7b:33:07:e7:47:ba:4a:11:1b:4d:f4:dd:c5:56:72:8d:90:
af:ce:39:08:46:9c:5e:38:de:5a:3f:ce:57:8d:28:3b:5e:10:
c3:1d:18:32:64:91:bd:49:ba:57:cc:a4:94:5f:bd:67:cf:3d:
96:27:37:1a:1b:09:7e:15:ce:47:bc:1e:28:df:59:0a:18:19:
06:3a:f5:6c:1d:80:96:f7:15:bd:e6:fa:0e:99:64:7b:9f:4a:
0c:a2:2d:bd:53:fc:a3:d2:a6:26:ca:4d:8c:fe:fc:63:b0:1d:
bd:7f:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:42 2026 by rpki-client