Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/PYCVbJ1vffPW_TvvIq_XI2iZ0N0.roa
File: PYCVbJ1vffPW_TvvIq_XI2iZ0N0.roa (raw, json)
Hash identifier: 7eoowYLymhOX2Fm9X0fOsfGTIcRqtUS7w/PgW47/j14=
Subject key identifier: 3D:80:95:6C:9D:6F:7D:F3:D6:FD:3B:EF:22:AF:D7:23:68:99:D0:DD
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A0F6192C2B2D6C33BBC2ED4D57A51176A7
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/PYCVbJ1vffPW_TvvIq_XI2iZ0N0.roa
Signing time: Thu 01 Oct 2026 06:13:59 +0000
ROA not before: Thu 01 Oct 2026 06:13:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:19:2c:2b:2d:6c:33:bb:c2:ed:4d:57:a5:11:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 1 06:13:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d80956c9d6f7df3d6fd3bef22afd7236899d0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:e9:40:e8:55:68:bd:93:bf:eb:97:6e:97:
49:17:f5:3d:e3:5e:5a:a1:03:d6:68:ed:38:e0:5f:
3d:da:e2:58:ce:0f:90:e1:10:81:f8:f3:94:d5:98:
b9:c9:37:3a:0f:4d:5d:8f:0b:0e:a0:55:6c:34:78:
17:c5:ed:89:1f:42:ab:c0:f5:89:cf:df:42:54:7c:
9f:83:6d:4f:b5:6a:b2:49:16:5c:4e:61:b7:e7:6f:
f5:ea:66:0e:fb:02:66:ca:4c:d1:9d:90:83:00:7b:
f4:f4:f5:83:1f:73:7b:01:b0:c9:ee:30:e8:86:02:
07:a7:ec:41:b1:85:c8:45:c3:4d:92:c2:d7:6c:75:
58:65:df:7f:97:05:84:1b:10:33:8c:ed:8c:c9:b0:
d5:4a:82:c0:fd:c1:49:df:7b:e5:ac:3d:1d:2d:33:
7d:3a:38:e5:75:14:34:90:4c:bb:47:5b:fc:31:55:
a7:23:2a:af:d8:f2:a7:42:c6:b9:76:04:72:bd:a6:
9e:47:20:f6:3b:ff:b0:f3:09:8d:ab:d4:cc:48:53:
5f:9b:e1:25:5b:ec:5c:29:cf:ae:77:fc:6b:87:1f:
aa:9b:1b:a9:12:54:fd:e1:2f:39:c2:b8:9c:8e:f9:
7b:70:59:87:35:39:38:ce:db:47:08:8d:76:73:d3:
60:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:80:95:6C:9D:6F:7D:F3:D6:FD:3B:EF:22:AF:D7:23:68:99:D0:DD
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/PYCVbJ1vffPW_TvvIq_XI2iZ0N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.174.0/24
62.72.176.0/24
176.57.54.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:bd:72:20:fd:17:6a:3a:84:dc:37:9e:d6:12:c6:3b:7b:dc:
a0:b8:b5:44:5c:d4:2d:8b:78:d2:af:64:40:0a:23:2d:06:ae:
e3:89:02:76:db:9d:79:fc:6c:86:65:85:a3:db:24:c2:ee:21:
2a:35:52:de:14:41:6e:9b:71:cf:89:f4:6d:4a:c5:42:90:31:
fe:c9:61:cf:02:a6:e6:c4:9b:68:a6:f1:e8:96:f8:e7:ce:3d:
ba:ed:be:b3:0b:1a:0c:c1:02:f8:87:15:b4:ab:25:ce:62:bd:
77:ed:18:6e:64:ec:f0:23:98:84:ae:c6:6f:51:c1:95:7f:c3:
9a:36:06:f5:67:85:76:f9:88:8b:79:c1:cd:6d:91:62:54:49:
c7:3a:a3:d2:e3:db:df:c0:f7:04:27:4e:7c:03:e2:db:ca:c0:
b5:9b:1d:09:6e:8c:9e:d3:3e:05:36:cd:b3:94:c1:e5:55:f9:
e4:dd:d6:9c:12:da:d3:f0:f4:c2:fe:b8:05:bd:78:a3:b4:ed:
80:19:84:a1:15:69:5b:87:93:8a:d9:db:bb:50:92:4a:f4:2d:
ce:f1:22:41:ee:31:42:15:36:76:71:52:0d:6e:db:ae:78:c5:
a8:ad:91:db:c7:ac:ff:34:d0:92:a3:22:e6:96:f7:b9:a3:88:
50:6a:bb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:15:29 2026 by rpki-client