Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/emeT67bvoFCa3Eb7J482p65sr9U.roa
File: emeT67bvoFCa3Eb7J482p65sr9U.roa (raw, json)
Hash identifier: BzilpLTeGyxa5hg7DWYdoEiF0OzP0CtLo6F5LWuCuv4=
Subject key identifier: 7A:67:93:EB:B6:EF:A0:50:9A:DC:46:FB:27:8F:36:A7:AE:6C:AF:D5
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A19BDA66C6B67CE24B00E29158BB735DDA
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/emeT67bvoFCa3Eb7J482p65sr9U.roa
Signing time: Mon 02 Nov 2026 10:42:24 +0000
ROA not before: Mon 02 Nov 2026 10:42:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:da:66:c6:b6:7c:e2:4b:00:e2:91:58:bb:73:5d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 2 10:42:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a6793ebb6efa0509adc46fb278f36a7ae6cafd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:ff:26:9c:7e:e5:89:a6:e0:10:30:d2:84:
4f:fe:d2:eb:15:8b:0f:fd:1f:6c:97:89:58:63:6f:
94:aa:c8:16:84:f6:7b:bc:d2:1c:ce:92:aa:87:6c:
75:fd:96:af:fe:62:11:6a:30:03:45:8f:a8:42:ae:
96:3f:03:ec:5a:7a:58:96:92:c0:cc:23:f8:a2:df:
9d:41:77:a6:e2:ae:15:09:da:bc:88:34:f0:46:93:
6b:dd:63:2e:f3:4a:18:e4:4a:5d:84:4e:28:75:83:
cf:58:68:e0:35:d7:3d:61:a4:ad:91:88:be:08:4a:
4f:0b:4d:fb:76:a2:df:33:a5:02:37:b2:71:a2:e4:
94:68:69:b2:e9:36:09:5a:6c:41:55:1e:b2:92:60:
70:06:36:b8:bd:27:ce:0b:8f:f6:4b:a1:ce:44:eb:
22:06:a7:39:33:5e:3e:9a:84:52:63:65:cb:9e:c4:
78:7f:46:dc:38:cb:30:a9:84:08:d2:3e:f0:6b:e1:
de:06:1f:e7:68:7f:e3:25:50:5b:ba:6e:0e:6d:ed:
0b:3d:5d:7e:4e:68:4d:3a:5c:5f:69:07:16:82:e5:
a9:4c:64:31:5a:77:f2:2d:01:d1:53:b1:24:5a:37:
03:52:a6:79:c9:eb:b1:4e:b0:a6:79:f2:af:36:85:
8d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:67:93:EB:B6:EF:A0:50:9A:DC:46:FB:27:8F:36:A7:AE:6C:AF:D5
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/emeT67bvoFCa3Eb7J482p65sr9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.174.0/24
62.72.176.0/24
62.72.183.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:3b:0a:00:44:4f:88:34:bb:34:19:df:6f:21:10:a3:33:0d:
00:52:73:7b:4c:27:f5:e1:a3:00:0a:e2:b2:9f:d8:47:8b:55:
96:a3:10:f1:ea:8c:b5:e1:5f:79:db:bf:02:d7:bb:3b:6e:09:
a6:4f:2a:80:e4:3c:74:4b:5e:33:bf:e9:11:cb:c2:3f:4a:9e:
7d:0a:2c:b9:3d:12:49:9b:b4:11:e2:54:8f:90:c3:ab:ce:03:
04:6f:c9:3f:19:3b:8f:37:b3:37:52:50:ed:26:2c:86:ea:99:
fb:32:b3:05:e3:23:85:fc:dc:5a:25:5f:d3:07:25:05:e9:f8:
c7:c5:0d:64:d7:67:1c:ee:87:26:76:8e:96:bc:e8:f6:dc:25:
ee:9e:01:19:59:e4:2f:f3:7c:70:cf:57:ec:b5:4d:bb:4b:8b:
07:f6:af:1c:9a:0d:d6:28:7a:d3:00:c1:39:6d:f1:70:a6:9e:
10:ae:bd:22:eb:a2:be:fc:3c:c6:e6:f7:78:9d:ff:c2:36:3f:
1a:1f:c7:ec:a7:e3:50:11:a3:ac:67:44:c8:51:04:6e:fe:6b:
35:a8:4c:b6:f7:3e:60:c8:19:1a:69:92:6c:53:b6:e7:d3:58:
ec:d6:bd:5d:6e:98:e4:05:44:0c:b0:16:e7:7c:bf:ef:d0:1a:
f7:59:1b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 15:05:52 2026 by rpki-client