Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OMZm50TF-0TjdbGTe4qpNY6HymI.roa
File: OMZm50TF-0TjdbGTe4qpNY6HymI.roa (raw, json)
Hash identifier: EmrHb8bt4TIzH8KbFgFCCmPS1nU9iqhgX/3pO6pCP54=
Subject key identifier: 38:C6:66:E7:44:C5:FB:44:E3:75:B1:93:7B:8A:A9:35:8E:87:CA:62
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A06128D2E8925C45B679C64650854D8269
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OMZm50TF-0TjdbGTe4qpNY6HymI.roa
Signing time: Wed 02 Sep 2026 08:07:40 +0000
ROA not before: Wed 02 Sep 2026 08:07:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 17:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:28:d2:e8:92:5c:45:b6:79:c6:46:50:85:4d:82:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 2 08:07:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38c666e744c5fb44e375b1937b8aa9358e87ca62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:55:e5:a4:1d:08:d2:c4:ac:0b:8a:bf:61:be:
c3:97:e2:5b:45:ad:5c:b1:d5:59:0e:1e:1e:14:cd:
91:c9:ea:47:d8:74:ca:75:35:b8:dd:70:6c:80:c6:
7a:05:96:f0:14:97:b6:fe:8b:50:e3:84:0f:dc:cc:
35:20:2f:05:9b:06:a9:ec:45:76:3c:b3:fa:97:21:
03:d4:8b:26:1f:dc:93:c6:4e:b3:f5:26:61:1c:2b:
84:32:8b:e6:77:c9:4f:ef:c2:22:b8:7b:1c:56:46:
9d:58:87:7e:7c:5f:31:c0:d5:81:4d:ef:90:da:58:
57:d7:dc:3f:94:69:8e:eb:a7:7a:af:72:e7:d5:9e:
09:46:bd:05:ec:a2:0a:8c:5b:ff:fb:f6:04:be:7a:
b4:f2:63:2b:86:27:69:2f:3d:55:c5:5f:2b:b4:04:
70:85:9f:24:84:8f:dc:ea:cc:1d:90:f8:92:ea:75:
4d:8a:e8:51:74:26:1c:8f:d8:7a:36:59:bb:30:a8:
af:bf:b4:60:70:44:55:56:67:ba:29:a9:9c:4e:a4:
b4:c3:84:4d:e9:45:78:3e:c5:ac:e1:25:66:5d:4d:
c7:20:bb:1d:4b:30:e0:c1:c4:11:9c:df:95:8d:55:
7c:67:6c:4c:ea:be:3c:7c:ca:5b:d7:fb:df:83:65:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C6:66:E7:44:C5:FB:44:E3:75:B1:93:7B:8A:A9:35:8E:87:CA:62
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OMZm50TF-0TjdbGTe4qpNY6HymI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.174.0/24
62.72.180.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f2:e6:90:d5:dc:59:13:fc:c2:ed:04:ce:45:7d:51:61:56:
f5:87:ed:38:a4:25:48:17:6d:1e:68:55:ea:fa:fc:e2:43:6c:
98:85:1d:a3:d4:c0:f6:91:43:a9:d0:61:73:7c:1e:01:6e:fe:
2b:91:3d:a9:cf:14:b7:a5:58:fc:51:b9:1f:36:36:de:7d:59:
6f:90:64:4c:dc:b6:bb:32:9f:82:ec:27:d6:29:4e:94:da:3b:
58:b8:24:3f:84:a2:ef:3f:5d:a4:e9:51:ca:16:ee:c6:53:12:
79:52:b2:91:21:69:bc:a2:61:63:d3:55:a5:15:36:7d:f0:40:
e5:00:68:f7:87:cb:c9:fe:4b:f5:ce:8d:76:8d:20:7a:a4:ac:
13:34:55:3d:a3:d1:18:92:e6:46:81:ce:84:ac:28:66:18:58:
60:8b:f5:a6:01:61:04:0a:81:bb:f3:1e:16:13:c1:9d:ef:1d:
7a:26:10:cd:02:57:2b:11:be:c7:51:12:fd:a1:29:65:10:04:
4f:0a:bb:d2:32:21:ff:38:db:1b:5d:20:1c:d9:9c:0f:9e:c4:
0d:88:b2:9d:3f:49:ff:27:34:ef:5d:b9:96:71:36:c4:77:80:
c4:49:13:4c:f9:7b:d4:ba:a0:50:c6:25:0d:3c:86:28:96:c0:
ab:db:e1:82
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAaBhKNLoklxFtnnGRlCFTYJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYwOTAyMDgwNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGM2NjZlNzQ0YzVmYjQ0ZTM3NWIxOTM3YjhhYTkzNThlODdjYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FXlpB0I0sSsC4q/Yb7Dl+JbRa1c
sdVZDh4eFM2RyepH2HTKdTW43XBsgMZ6BZbwFJe2/otQ44QP3Mw1IC8Fmwap7EV2
PLP6lyED1IsmH9yTxk6z9SZhHCuEMovmd8lP78IiuHscVkadWId+fF8xwNWBTe+Q
2lhX19w/lGmO66d6r3Ln1Z4JRr0F7KIKjFv/+/YEvnq08mMrhidpLz1VxV8rtARw
hZ8khI/c6swdkPiS6nVNiuhRdCYcj9h6Nlm7MKivv7RgcERVVme6KamcTqS0w4RN
6UV4PsWs4SVmXU3HILsdSzDgwcQRnN+VjVV8Z2xM6r48fMpb1/vfg2UixwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFDjGZudExftE43Wxk3uKqTWOh8piMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvT01abTUwVEYtMFRqZGJHVGU0cXBOWTZIeW1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAE+SKID
BAM+SKADBAA+SK4DBAA+SLQDBACwOT8wDQYJKoZIhvcNAQELBQADggEBACry5pDV
3FkT/MLtBM5FfVFhVvWH7TikJUgXbR5oVer6/OJDbJiFHaPUwPaRQ6nQYXN8HgFu
/iuRPanPFLelWPxRuR82Nt59WW+QZEzctrsyn4LsJ9YpTpTaO1i4JD+Eou8/XaTp
UcoW7sZTEnlSspEhabyiYWPTVaUVNn3wQOUAaPeHy8n+S/XOjXaNIHqkrBM0VT2j
0RiS5kaBzoSsKGYYWGCL9aYBYQQKgbvzHhYTwZ3vHXomEM0CVysRvsdREv2hKWUQ
BE8Ku9IyIf842xtdIBzZnA+exA2Isp0/Sf8nNO9duZZxNsR3gMRJE0z5e9S6oFDG
JQ08hiiWwKvb4YI=
-----END CERTIFICATE-----
Generated at Thu Sep 3 03:30:01 2026 by rpki-client