Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hiEAKwNwMataYhh9HUPUSGMp4_k.roa
File: hiEAKwNwMataYhh9HUPUSGMp4_k.roa (raw, json)
Hash identifier: qesXO3PD2AY3xqYNjo/abnsepel3YZoOMANe1Rv32kU=
Subject key identifier: 86:21:00:2B:03:70:31:AB:5A:62:18:7D:1D:43:D4:48:63:29:E3:F9
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019DCF0249BF992A2851A7FE79EF04F13AE3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hiEAKwNwMataYhh9HUPUSGMp4_k.roa
Signing time: Mon 27 Apr 2026 12:55:26 +0000
ROA not before: Mon 27 Apr 2026 12:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
176.57.50.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 13:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:02:49:bf:99:2a:28:51:a7:fe:79:ef:04:f1:3a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 27 12:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8621002b037031ab5a62187d1d43d4486329e3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d8:d0:2f:2a:27:40:9d:5b:aa:33:6f:63:42:
10:f2:0e:11:80:05:0a:10:1d:73:3e:4f:93:b9:f6:
8b:02:d7:7f:8b:72:82:4f:09:8d:2a:24:89:09:46:
39:06:47:b1:a6:b9:5c:7e:16:57:9b:78:42:25:ef:
25:fb:cc:a6:10:d5:54:b0:27:3c:ee:41:10:97:9b:
fc:54:a9:1d:15:bc:7c:eb:66:b8:0f:76:50:c3:9a:
4f:ec:53:d9:aa:19:b2:7d:04:e0:67:ad:20:e6:ea:
35:c1:da:6c:16:b7:2d:90:de:66:96:b3:ce:4e:c0:
80:48:70:fe:f2:63:8c:dd:89:20:1f:08:05:9a:ec:
df:8e:85:84:f2:b5:9a:16:8a:36:a5:60:a9:a8:97:
74:d4:79:3c:10:70:0a:81:f6:39:88:04:51:8a:2b:
90:5c:50:6f:f8:da:95:ef:ba:63:9f:b0:6f:5f:00:
80:4a:46:bb:74:b1:c8:c7:9d:2f:71:61:da:53:bb:
70:e5:a5:43:79:91:26:3d:3a:1f:3c:dd:e8:d7:44:
cb:dc:a9:28:65:ae:e2:8e:f2:cb:66:60:74:db:ae:
5b:92:56:a1:a0:71:89:38:d3:9e:ce:8a:c3:a6:cf:
d3:b2:d7:7c:01:cc:af:d4:c4:c5:75:ff:36:08:c0:
f4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:21:00:2B:03:70:31:AB:5A:62:18:7D:1D:43:D4:48:63:29:E3:F9
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hiEAKwNwMataYhh9HUPUSGMp4_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.174.0/24
62.72.176.0/24
62.72.180.0/24
176.57.50.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:f2:dc:92:cf:b2:00:0d:11:cf:6b:72:80:01:53:2a:76:1e:
f4:ab:e5:ca:bd:54:8d:c4:d3:e9:53:22:0b:9b:ca:81:b9:f1:
19:ca:7a:72:46:15:3b:af:be:d5:af:60:21:d4:be:c2:4f:41:
8a:7f:bf:ea:50:8c:fd:3b:80:3e:4f:3b:15:a8:f5:ad:8b:4e:
9d:da:c6:5f:4d:c3:79:99:b0:51:98:e3:e8:54:81:87:45:ca:
f3:6b:47:e2:2a:b4:21:10:04:2d:a0:ec:cb:4f:ac:7d:3e:cb:
43:20:80:76:48:d3:eb:b0:7f:14:48:38:21:3c:f7:57:8f:f0:
2a:1a:25:fd:80:d8:2b:44:8f:bd:9b:b6:9a:62:bd:77:3a:6b:
7b:8e:aa:71:0f:85:75:24:b6:10:f6:b7:05:55:f6:1b:a6:0a:
eb:7a:32:c4:84:41:d9:50:ee:73:e6:0c:26:28:64:9f:04:39:
03:fb:1f:aa:4e:68:2e:96:ad:00:a3:92:79:2f:59:c4:e4:72:
62:62:7e:ae:37:20:44:3d:03:29:fa:7b:71:73:51:3c:8f:54:
90:42:ac:56:08:2d:39:6a:1e:5c:ec:36:27:6a:af:fc:68:56:
d6:82:ab:b0:00:ab:d8:0b:f2:ba:32:48:d3:de:40:d9:fe:91:
4e:76:af:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 23:25:47 2026 by rpki-client