Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JlMz45c7xbNRYpxXrP0lPBpw-MA.roa
File: JlMz45c7xbNRYpxXrP0lPBpw-MA.roa (raw, json)
Hash identifier: U/CAJWnT0LYa7rX5f/1I/xTjoeCl4tFMWxyZw1j/B3g=
Subject key identifier: 26:53:33:E3:97:3B:C5:B3:51:62:9C:57:AC:FD:25:3C:1A:70:F8:C0
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A0486548E7C70A45DB1C0EE81F9B8D3B99
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JlMz45c7xbNRYpxXrP0lPBpw-MA.roa
Signing time: Fri 28 Aug 2026 12:43:12 +0000
ROA not before: Fri 28 Aug 2026 12:43:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 12:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:65:48:e7:c7:0a:45:db:1c:0e:e8:1f:9b:8d:3b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 28 12:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=265333e3973bc5b351629c57acfd253c1a70f8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:d4:ef:3b:58:61:c0:91:d2:c0:4c:9e:bd:
fb:52:3f:4b:54:b6:ad:14:9c:96:66:62:eb:a0:6f:
36:5c:a1:06:50:f6:8a:f2:4d:57:ad:8a:89:b0:ab:
da:03:64:ab:67:59:72:c4:63:ba:ba:bc:86:40:1b:
a0:3f:9f:3c:d4:9c:9f:91:22:d9:3d:f9:db:5f:60:
f6:b5:93:e7:ca:f9:2d:d0:f9:d4:ff:23:34:4b:df:
74:51:0c:d9:7a:34:e2:3c:ee:dc:2f:d1:eb:81:6b:
f3:7e:5e:a1:d4:aa:ac:f7:41:1c:a6:e3:26:85:af:
1d:ff:8d:5d:19:a0:78:54:68:ce:3b:6e:0c:db:08:
60:43:47:6f:b0:38:f6:8c:0e:f3:35:f4:f5:90:0e:
24:b5:76:c2:8f:cf:bd:8d:3b:4e:05:4b:cb:a2:2c:
1e:1c:15:b8:3b:0b:30:db:64:ab:e4:6e:d7:5a:7b:
9f:38:66:14:69:ce:14:e1:c2:22:0e:a8:50:85:a6:
44:c0:be:56:c6:aa:5c:02:51:4f:4b:44:b9:7e:1f:
b3:05:a5:67:f4:27:11:b2:be:6e:a8:7c:82:61:7a:
a3:ad:72:51:42:49:0f:f7:20:33:57:9a:d2:07:63:
49:f7:07:2e:fd:55:bf:be:92:93:a7:b5:6e:04:2f:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:53:33:E3:97:3B:C5:B3:51:62:9C:57:AC:FD:25:3C:1A:70:F8:C0
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JlMz45c7xbNRYpxXrP0lPBpw-MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.174.0/24
62.72.176.0/24
62.72.180.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
58:91:7b:de:d3:a6:64:e0:96:cd:a2:87:b8:9b:10:82:19:bb:
23:d2:4a:59:41:8d:2b:f7:62:8b:c6:40:b2:07:9c:be:61:68:
96:d2:d4:f0:fc:61:3a:f6:af:0e:2c:7c:be:95:c3:24:e3:6c:
d5:6a:df:97:48:4f:ee:f2:06:08:9e:f2:e3:ff:00:bd:34:03:
e9:45:2a:24:12:66:e2:96:bc:a7:0a:13:57:07:b1:ee:29:45:
11:ff:fa:8a:6d:c1:a1:01:c0:95:a6:fc:e1:97:eb:3e:6d:10:
5c:70:87:c3:22:eb:ae:75:1b:de:99:34:1a:b0:c3:ed:02:d8:
0b:c3:31:62:0b:05:8d:f0:cf:d6:64:18:8d:d7:61:88:07:cb:
f2:65:71:14:74:44:00:63:cb:c1:d5:2b:7e:7d:90:82:b0:14:
d6:c6:e8:ae:be:4a:32:41:7e:e0:43:c9:73:7e:37:b0:b3:16:
1c:34:ab:77:11:0f:6c:69:2a:70:0d:48:d0:74:87:b7:1b:5d:
34:d4:95:25:5e:32:1f:d9:0a:11:a5:8f:3f:1f:4b:02:43:af:
f0:33:a1:6e:86:f6:f7:1c:e7:ae:32:60:7d:f4:8b:04:60:44:
07:b0:10:6f:28:71:0c:6a:a7:f4:b9:53:09:00:bf:f6:47:fb:
c2:93:b1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 21:26:52 2026 by rpki-client