Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XAkCFIMWtF_zIiy3xa-jGQdWl24.roa
File: XAkCFIMWtF_zIiy3xa-jGQdWl24.roa (raw, json)
Hash identifier: A2fPTwr9V12FloEMkLhjcifWNfdEns2+PJYoUUXWGpg=
Subject key identifier: 5C:09:02:14:83:16:B4:5F:F3:22:2C:B7:C5:AF:A3:19:07:56:97:6E
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A07B7EC3D8935EF2AB382CC4CA6B1A39C0
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XAkCFIMWtF_zIiy3xa-jGQdWl24.roa
Signing time: Mon 07 Sep 2026 10:51:40 +0000
ROA not before: Mon 07 Sep 2026 10:51:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:7e:c3:d8:93:5e:f2:ab:38:2c:c4:ca:6b:1a:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 7 10:51:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c0902148316b45ff3222cb7c5afa3190756976e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:3b:aa:d8:02:bc:f5:a8:d0:cb:fa:5e:e8:
a6:67:3c:e8:23:ee:bb:42:5a:9e:59:30:2c:9b:e5:
d2:36:67:70:cf:1e:8b:e9:8b:9e:91:36:77:12:0d:
7f:e4:0a:0a:ba:61:0d:46:fd:fd:a5:93:42:ae:09:
93:3e:31:4b:7e:12:f2:d9:7d:49:fd:9a:7f:4d:26:
5a:cb:28:0d:8b:39:39:7d:53:9e:f4:92:5f:62:fa:
64:2d:5b:ee:65:b4:98:39:bb:d2:5e:b5:97:b4:9f:
51:11:5d:e4:6b:3e:7f:ab:ed:07:c7:22:d9:5d:08:
99:8d:81:e1:38:89:95:2c:c9:e0:e1:c8:8c:f2:f4:
ee:59:4c:16:11:e0:3c:f4:a0:42:85:58:04:ae:b1:
96:5d:2b:f8:76:e7:20:48:de:bf:8b:cc:48:a5:88:
3f:f3:a0:98:93:83:bc:b9:75:7a:6c:ba:42:96:b5:
c2:7b:97:12:d9:11:b4:d5:7d:9f:e0:90:f1:20:c8:
b0:fe:74:45:b7:30:dc:d0:11:e6:82:1e:b5:35:b5:
49:8d:2b:49:57:fb:fd:73:d3:98:35:2c:97:83:33:
ae:10:3a:57:ff:74:be:bd:89:61:bc:32:e4:fb:e9:
85:dc:22:ca:85:b3:0a:e1:da:22:82:58:8e:64:09:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:02:14:83:16:B4:5F:F3:22:2C:B7:C5:AF:A3:19:07:56:97:6E
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XAkCFIMWtF_zIiy3xa-jGQdWl24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.174.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
34:63:e7:0b:64:c5:d8:60:64:7d:5b:82:cb:60:98:94:99:1c:
f0:30:91:2f:75:5e:55:f8:7c:df:ce:40:96:32:fb:e3:5d:a6:
05:f7:77:4d:34:29:8d:2f:46:ec:a4:9b:50:bc:38:55:c8:42:
17:20:c0:77:90:97:f3:1f:01:87:3d:85:4f:99:6a:59:05:26:
ac:aa:b8:45:7c:c9:87:b5:83:05:02:fe:52:4f:e1:b8:ee:ac:
5e:9e:e2:ba:e0:74:f5:d3:da:a5:8a:92:b5:51:9b:b3:e9:8c:
29:d3:31:65:78:22:d7:2f:ae:0d:0d:67:c2:99:7f:cf:c7:90:
21:a7:76:1a:40:bd:ee:3a:d6:62:a3:9e:15:00:37:a4:60:af:
51:ea:3f:2e:22:6e:af:21:7d:64:9a:64:2d:dc:15:7a:24:a5:
09:1b:27:33:fc:f7:11:95:7f:82:33:6a:57:d3:a7:09:db:a7:
5c:99:08:98:cc:94:97:7f:b9:87:1d:87:fd:5f:0d:58:50:b7:
7f:c2:76:03:ca:35:85:aa:5e:1d:78:ec:03:ca:23:39:08:c5:
81:8d:d8:37:50:2f:1e:94:e8:8f:a5:84:ed:32:2d:9a:96:b0:
10:b6:4c:15:9d:af:a0:11:97:9f:8d:f8:44:92:8a:7c:68:af:
c3:c2:4e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 15:29:12 2026 by rpki-client