Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_nvRHKvvb_mvanqFMM5V8lm8g8w.roa
File: _nvRHKvvb_mvanqFMM5V8lm8g8w.roa (raw, json)
Hash identifier: RruZ8RVSFy2mwh8xxZXhGWare/JM1CRcpYspOp1Cygk=
Subject key identifier: FE:7B:D1:1C:AB:EF:6F:F9:AF:6A:7A:85:30:CE:55:F2:59:BC:83:CC
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A07B7EC496E31196DA04CF93B8C4AC93D8
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_nvRHKvvb_mvanqFMM5V8lm8g8w.roa
Signing time: Mon 07 Sep 2026 10:51:40 +0000
ROA not before: Mon 07 Sep 2026 10:51:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50670
IP address blocks: 62.72.161.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.171.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.0.0/21 maxlen: 21
81.21.0.0/24 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
81.21.3.0/24 maxlen: 24
81.21.4.0/24 maxlen: 24
81.21.5.0/24 maxlen: 24
81.21.6.0/24 maxlen: 24
81.21.7.0/24 maxlen: 24
81.21.8.0/22 maxlen: 22
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.11.0/24 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
109.237.192.0/20 maxlen: 24
109.237.192.0/24 maxlen: 24
109.237.193.0/24 maxlen: 24
109.237.194.0/24 maxlen: 24
109.237.195.0/24 maxlen: 24
109.237.196.0/24 maxlen: 24
109.237.197.0/24 maxlen: 24
109.237.198.0/24 maxlen: 24
109.237.199.0/24 maxlen: 24
109.237.200.0/24 maxlen: 24
109.237.201.0/24 maxlen: 24
109.237.202.0/24 maxlen: 24
109.237.203.0/24 maxlen: 24
109.237.204.0/24 maxlen: 24
109.237.205.0/24 maxlen: 24
109.237.206.0/24 maxlen: 24
109.237.207.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.241.64.0/21 maxlen: 24
176.241.64.0/24 maxlen: 24
176.241.65.0/24 maxlen: 24
176.241.66.0/24 maxlen: 24
176.241.67.0/24 maxlen: 24
176.241.68.0/24 maxlen: 24
176.241.69.0/24 maxlen: 24
176.241.70.0/24 maxlen: 24
176.241.71.0/24 maxlen: 24
178.20.184.0/21 maxlen: 24
178.20.184.0/24 maxlen: 24
178.20.185.0/24 maxlen: 24
178.20.186.0/24 maxlen: 24
178.20.187.0/24 maxlen: 24
178.20.188.0/24 maxlen: 24
178.20.189.0/24 maxlen: 24
178.20.190.0/24 maxlen: 24
178.20.191.0/24 maxlen: 24
185.51.212.0/22 maxlen: 22
185.51.212.0/24 maxlen: 24
185.51.213.0/24 maxlen: 24
185.51.214.0/24 maxlen: 24
185.51.215.0/24 maxlen: 24
185.193.176.0/22 maxlen: 22
185.193.176.0/24 maxlen: 24
185.193.177.0/24 maxlen: 24
185.193.178.0/24 maxlen: 24
185.193.179.0/24 maxlen: 24
2a01:1d0::/29 maxlen: 29
2a01:1d0::/32 maxlen: 32
2a0a:2740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:7e:c4:96:e3:11:96:da:04:cf:93:b8:c4:ac:93:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 7 10:51:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe7bd11cabef6ff9af6a7a8530ce55f259bc83cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:14:6b:9f:21:31:37:8b:d6:18:5d:b2:07:
f2:ab:ce:fa:b2:a5:ba:13:31:67:77:e6:ac:92:f5:
02:4d:a9:13:9d:b9:8d:61:af:9b:69:ed:21:2a:36:
07:bc:c4:90:44:bb:3a:15:60:02:b7:f6:23:f2:6f:
a4:a0:0d:f3:12:a9:8d:96:0e:0b:bf:34:35:57:bb:
f5:a9:e3:79:d4:10:47:e9:1e:4b:c2:34:2a:15:72:
fd:4e:1b:fb:56:a0:e2:73:f2:7e:d5:0a:c4:6c:4a:
ec:17:91:9b:3f:ba:6e:cc:61:e2:40:df:91:2c:90:
79:88:44:10:52:37:38:c6:69:18:91:7a:3c:ef:e0:
77:39:5d:7e:86:57:6f:74:36:ad:f4:bd:b3:45:b9:
f3:7f:01:64:df:a6:96:0f:4b:1f:0e:2b:16:02:23:
84:75:c7:7b:0e:f2:56:c5:69:cd:27:91:0c:d9:4b:
dd:53:5d:76:79:34:07:b0:f4:9f:16:a2:fe:29:ed:
34:01:fa:fd:5f:7f:ed:90:74:d9:57:d9:be:a8:c1:
ec:de:62:88:29:83:b1:bd:e6:31:67:5a:89:e8:cd:
5e:75:50:f5:e7:bb:a2:1f:c1:02:50:5a:50:3d:85:
28:e8:85:38:1d:72:9a:95:2b:14:28:6e:a8:71:5a:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7B:D1:1C:AB:EF:6F:F9:AF:6A:7A:85:30:CE:55:F2:59:BC:83:CC
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_nvRHKvvb_mvanqFMM5V8lm8g8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.162.255
62.72.170.0/23
62.72.174.0/24
62.72.180.0/24
62.72.187.0/24
62.72.191.0/24
81.21.0.0/20
109.237.192.0/20
176.57.56.0/23
176.241.64.0/21
178.20.184.0/21
185.51.212.0/22
185.193.176.0/22
IPv6:
2a01:1d0::/29
2a0a:2740::/29
Signature Algorithm: sha256WithRSAEncryption
87:b0:a8:8c:b2:b6:01:c8:2c:81:da:9a:ff:b0:5f:fd:e1:32:
a6:a9:bd:8c:5d:94:d9:21:15:7f:c2:a4:3a:d9:e0:35:dc:a1:
cd:d6:f5:1a:66:9e:b5:e7:b6:c3:2b:f1:a6:1c:15:0b:f1:a9:
cc:f2:14:4a:3f:c5:ac:a1:45:2c:78:03:16:5f:29:bd:f2:d6:
45:ff:16:ad:07:9c:30:91:9b:f7:b8:6d:b6:91:69:c3:12:22:
4f:db:26:bc:ea:cd:2b:ec:2d:b9:37:75:7b:73:36:9a:24:be:
39:88:0f:a5:40:d2:2e:7e:8d:6d:d2:f7:2d:dd:1c:f4:46:3f:
85:4f:be:f5:72:ee:54:df:57:5d:7b:7c:43:fc:0a:2c:f2:bb:
e4:d1:10:7e:6c:de:2a:8a:08:33:05:fc:16:1a:7a:ae:d9:72:
86:07:33:c4:f2:7d:45:ca:74:21:44:f6:5a:e5:9b:80:9d:94:
5b:77:a5:5f:52:79:ee:bb:5c:36:5c:fd:50:a8:8a:31:e7:9e:
cc:1f:59:cd:d3:cb:df:5b:bb:63:5a:c6:04:d7:6a:78:b6:9e:
87:08:22:46:2b:6a:b5:16:6f:e2:79:f0:a1:d2:54:9f:51:2e:
b6:fc:93:4e:a3:2c:ef:48:c9:8e:3d:05:33:03:42:1b:ba:98:
fb:46:c5:63
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAaB7fsSW4xGW2gTPk7jErJPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYwOTA3MTA1MTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTdiZDExY2FiZWY2ZmY5YWY2YTdhODUzMGNlNTVmMjU5YmM4M2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W8Ua58hMTeL1hhdsgfyq876sqW6
EzFnd+askvUCTakTnbmNYa+bae0hKjYHvMSQRLs6FWACt/Yj8m+koA3zEqmNlg4L
vzQ1V7v1qeN51BBH6R5LwjQqFXL9Thv7VqDic/J+1QrEbErsF5GbP7puzGHiQN+R
LJB5iEQQUjc4xmkYkXo87+B3OV1+hldvdDat9L2zRbnzfwFk36aWD0sfDisWAiOE
dcd7DvJWxWnNJ5EM2UvdU112eTQHsPSfFqL+Ke00Afr9X3/tkHTZV9m+qMHs3mKI
KYOxveYxZ1qJ6M1edVD157uiH8ECUFpQPYUo6IU4HXKalSsUKG6ocVo/vQIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFP570Ryr72/5r2p6hTDOVfJZvIPMMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvX252UkhLdnZiX212YW5xRk1NNVY4bG04Zzh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwXAQCAAEwVjAMAwQAPkih
AwQAPkiiAwQBPkiqAwQAPkiuAwQAPki0AwQAPki7AwQAPki/AwQEURUAAwQEbe3A
AwQBsDk4AwQDsPFAAwQDshS4AwQCuTPUAwQCucGwMBQEAgACMA4DBQMqAQHQAwUD
KgonQDANBgkqhkiG9w0BAQsFAAOCAQEAh7CojLK2Acgsgdqa/7Bf/eEypqm9jF2U
2SEVf8KkOtngNdyhzdb1Gmaetee2wyvxphwVC/GpzPIUSj/FrKFFLHgDFl8pvfLW
Rf8WrQecMJGb97httpFpwxIiT9smvOrNK+wtuTd1e3M2miS+OYgPpUDSLn6NbdL3
Ld0c9EY/hU++9XLuVN9XXXt8Q/wKLPK75NEQfmzeKooIMwX8Fhp6rtlyhgczxPJ9
Rcp0IUT2WuWbgJ2UW3elX1J57rtcNlz9UKiKMeeezB9ZzdPL31u7Y1rGBNdqeLae
hwgiRitqtRZv4nnwodJUn1EutvyTTqMs70jJjj0FMwNCG7qY+0bFYw==
-----END CERTIFICATE-----
Generated at Tue Sep 8 15:29:17 2026 by rpki-client