Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/MYkvB2GG4KyUbb9t8wtKuudjcUc.roa
File: MYkvB2GG4KyUbb9t8wtKuudjcUc.roa (raw, json)
Hash identifier: StyOsvY6f49b11bzmUAfdI8EpecZB7kX511O4LoHQ4g=
Subject key identifier: 31:89:2F:07:61:86:E0:AC:94:6D:BF:6D:F3:0B:4A:BA:E7:63:71:47
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019DA4A970911910CF7AEF11892A5E89C2FA
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/MYkvB2GG4KyUbb9t8wtKuudjcUc.roa
Signing time: Sun 19 Apr 2026 07:34:20 +0000
ROA not before: Sun 19 Apr 2026 07:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 62.72.172.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 12:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:a9:70:91:19:10:cf:7a:ef:11:89:2a:5e:89:c2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 19 07:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31892f076186e0ac946dbf6df30b4abae7637147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:df:b9:4f:2d:2e:d4:5a:53:11:cb:ab:cf:97:
d9:e8:be:5f:7b:d5:8c:41:70:64:b2:75:f6:c6:bb:
e6:14:20:82:3b:5c:bc:b0:ec:76:a7:e4:f0:45:8a:
3f:45:b8:80:9f:ac:f6:85:a6:da:48:2e:92:6c:d7:
4f:2c:6a:10:23:00:58:f3:ed:6c:1f:b7:c8:1d:0e:
4b:98:5d:41:b3:a5:76:45:55:2a:2e:5d:5e:4d:21:
0f:c2:54:19:37:2e:39:c3:98:96:b1:09:b8:88:c9:
b1:11:53:5d:2f:41:8f:51:9d:9a:b7:7e:b4:97:d1:
12:01:79:f8:d7:af:37:69:61:27:c7:b7:46:be:62:
4d:5b:a7:46:dd:29:17:3b:e8:bf:99:d7:6c:19:6f:
85:7e:b6:c3:4d:55:fa:60:39:97:37:a3:9c:2d:22:
f9:7b:02:1f:e1:60:91:60:dc:54:e0:46:0b:3b:4d:
fb:38:d3:04:d5:b3:51:74:9e:a2:a9:89:97:7f:f0:
9e:d5:2e:d5:26:80:14:f5:40:72:b1:a4:97:6a:7c:
62:5d:36:1b:2d:98:b2:c6:ce:0c:e7:e5:13:bd:c8:
e2:c5:67:e5:96:47:63:fa:4e:b5:33:d2:ef:ef:87:
7d:8d:79:88:5e:9d:33:0b:ca:29:99:c3:43:3c:60:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:89:2F:07:61:86:E0:AC:94:6D:BF:6D:F3:0B:4A:BA:E7:63:71:47
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/MYkvB2GG4KyUbb9t8wtKuudjcUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.172.0/23
Signature Algorithm: sha256WithRSAEncryption
72:5e:f9:48:bc:7f:90:10:23:7a:5a:94:a3:0c:a5:13:bb:73:
d2:94:5e:d6:46:4f:6e:2f:9c:8a:a8:de:4c:8d:1c:07:2a:8d:
02:09:b8:2b:40:47:bb:8a:a3:4b:4a:9d:47:f1:64:65:73:1c:
f2:02:69:d0:13:94:6b:1b:92:ad:7a:40:7c:f2:80:02:d7:de:
e4:26:b5:80:f3:c5:ff:c2:c8:5d:58:74:c1:71:7a:92:f6:03:
77:0f:bb:d8:40:66:fe:4b:b6:e4:d4:e1:f3:0e:fb:66:62:7b:
53:93:68:21:a7:15:4f:c8:57:44:a9:61:34:99:fb:58:21:a4:
11:37:ba:c7:dd:39:df:d5:ea:13:4e:b5:30:ea:ad:4a:94:c7:
63:48:50:5e:6f:89:c2:f1:75:8c:3b:85:85:47:7d:a4:fe:da:
50:bc:77:59:2c:40:91:04:4c:2c:51:4f:96:73:f2:74:92:73:
0d:4f:62:35:61:f3:1a:0e:09:fa:a5:40:fe:c6:55:35:63:36:
be:89:54:06:34:92:9d:26:ce:49:79:27:07:77:86:ca:8c:b5:
13:5b:17:b1:4b:3f:3c:c6:e4:1e:47:0e:7a:93:1d:84:7a:77:
29:75:ac:c8:8d:78:d5:ed:f1:68:d7:4c:46:c3:e4:d3:d0:1d:
17:7f:69:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 18:42:36 2026 by rpki-client