Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/iiL_ATZnipNNkGvxgnn9uGSBSAk.roa
File: iiL_ATZnipNNkGvxgnn9uGSBSAk.roa (raw, json)
Hash identifier: vLi/uHbjZM0sGPO0Afr+xRnrySbPnXfmvPohJMUcn/E=
Subject key identifier: 8A:22:FF:01:36:67:8A:93:4D:90:6B:F1:82:79:FD:B8:64:81:48:09
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019D495A45D9B60712CF01B595F3E987F6DD
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/iiL_ATZnipNNkGvxgnn9uGSBSAk.roa
Signing time: Wed 01 Apr 2026 14:02:25 +0000
ROA not before: Wed 01 Apr 2026 14:02:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50670
IP address blocks: 62.72.161.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.171.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.8.0/22 maxlen: 22
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.11.0/24 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
109.237.192.0/20 maxlen: 24
109.237.192.0/24 maxlen: 24
109.237.193.0/24 maxlen: 24
109.237.194.0/24 maxlen: 24
109.237.195.0/24 maxlen: 24
109.237.196.0/24 maxlen: 24
109.237.197.0/24 maxlen: 24
109.237.198.0/24 maxlen: 24
109.237.199.0/24 maxlen: 24
109.237.200.0/24 maxlen: 24
109.237.201.0/24 maxlen: 24
109.237.202.0/24 maxlen: 24
109.237.203.0/24 maxlen: 24
109.237.204.0/24 maxlen: 24
109.237.205.0/24 maxlen: 24
109.237.206.0/24 maxlen: 24
109.237.207.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.241.64.0/21 maxlen: 24
176.241.64.0/24 maxlen: 24
176.241.65.0/24 maxlen: 24
176.241.66.0/24 maxlen: 24
176.241.67.0/24 maxlen: 24
176.241.68.0/24 maxlen: 24
176.241.69.0/24 maxlen: 24
176.241.70.0/24 maxlen: 24
176.241.71.0/24 maxlen: 24
178.20.184.0/21 maxlen: 24
178.20.184.0/24 maxlen: 24
178.20.185.0/24 maxlen: 24
178.20.186.0/24 maxlen: 24
178.20.187.0/24 maxlen: 24
178.20.188.0/24 maxlen: 24
178.20.189.0/24 maxlen: 24
178.20.190.0/24 maxlen: 24
178.20.191.0/24 maxlen: 24
185.51.212.0/22 maxlen: 22
185.51.212.0/24 maxlen: 24
185.51.213.0/24 maxlen: 24
185.51.214.0/24 maxlen: 24
185.51.215.0/24 maxlen: 24
185.193.176.0/22 maxlen: 22
185.193.176.0/24 maxlen: 24
185.193.177.0/24 maxlen: 24
185.193.178.0/24 maxlen: 24
185.193.179.0/24 maxlen: 24
2a01:1d0::/29 maxlen: 29
2a01:1d0::/32 maxlen: 32
2a0a:2740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:5a:45:d9:b6:07:12:cf:01:b5:95:f3:e9:87:f6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 1 14:02:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a22ff0136678a934d906bf18279fdb864814809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:ae:c7:c5:38:21:ee:bf:5b:e4:15:b3:4a:
df:1a:24:54:35:85:ac:56:f1:4f:82:c3:1d:72:3e:
00:45:61:49:79:23:76:77:00:9c:ae:90:17:d3:3a:
04:69:e9:e6:31:ca:8d:84:6f:ac:6e:98:76:55:51:
72:0d:cb:73:43:81:cb:58:c4:ee:c6:6e:f3:91:92:
4d:d2:68:fd:24:86:12:27:3d:e9:71:84:35:3b:c1:
88:23:80:04:db:f9:d7:7d:0a:88:27:09:18:9a:8b:
9b:f9:1a:36:ce:1f:62:09:d6:4f:63:d0:24:ba:a7:
44:b9:82:3f:4b:b4:9b:3d:53:78:cd:05:9e:c8:cb:
ea:be:1d:ca:d5:af:ff:5d:8d:bf:f6:6b:1d:d5:2a:
ac:07:b9:6e:91:19:a6:a5:c8:d6:c4:27:f7:0c:56:
1d:8c:a3:a9:1b:20:19:3a:ff:75:38:bc:18:5f:54:
96:6e:8a:80:e4:00:c9:25:a6:59:a9:23:25:22:2f:
85:7e:6f:00:68:9b:50:64:31:a2:d1:c2:15:19:a1:
22:15:99:8d:8d:a2:1c:75:c3:5c:01:4d:ec:10:af:
be:0e:f1:ef:54:aa:aa:a8:47:1a:1f:2b:d2:20:1b:
88:6e:91:a6:8a:dc:9c:cc:45:cb:2d:f5:57:9e:15:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:22:FF:01:36:67:8A:93:4D:90:6B:F1:82:79:FD:B8:64:81:48:09
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/iiL_ATZnipNNkGvxgnn9uGSBSAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.162.255
62.72.170.0/23
62.72.174.0/24
62.72.187.0/24
62.72.191.0/24
81.21.1.0/24
81.21.8.0/21
109.237.192.0/20
176.57.56.0/23
176.241.64.0/21
178.20.184.0/21
185.51.212.0/22
185.193.176.0/22
IPv6:
2a01:1d0::/29
2a0a:2740::/29
Signature Algorithm: sha256WithRSAEncryption
4b:0b:f7:54:9e:e9:9c:3a:f3:84:8b:83:21:e2:e9:65:18:d6:
0a:7f:db:9a:bc:e7:33:d0:ee:37:52:42:37:dd:29:b1:bf:fb:
f1:24:35:78:e1:ef:ac:cc:3d:3b:b7:5c:db:9d:4c:b5:26:7e:
4c:86:4a:c8:10:2c:2f:67:eb:72:00:f4:84:da:81:d9:da:67:
f1:8a:6a:85:10:f0:7f:5a:5a:9a:4b:6e:62:85:7f:af:f8:2f:
03:a0:dc:56:b8:42:f9:bb:55:fc:7f:10:3c:36:1f:85:30:c5:
d4:ee:31:2d:07:29:99:40:4a:0c:79:72:c5:be:a7:44:b3:32:
e3:3e:96:a2:77:ce:3b:11:83:1e:fc:1f:72:41:b7:2c:8f:15:
73:10:ae:7c:aa:e7:40:3b:3a:fc:02:0f:c1:8c:9f:b6:2f:8c:
50:d0:3a:ac:e5:d4:93:9d:d3:70:e0:ef:5b:be:ed:83:1b:ea:
c7:c8:44:0b:11:59:85:02:7e:e6:1c:ce:63:f8:06:ed:0b:db:
66:d0:b0:94:8f:8a:ea:99:de:e2:1e:0d:ec:17:9c:09:44:3f:
4d:9c:39:44:fb:8b:7c:75:cb:5e:8c:61:41:18:10:36:f6:93:
6c:e0:14:ef:3c:ba:63:84:73:15:f4:89:e9:ec:9f:2c:57:38:
79:93:49:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:54:39 2026 by rpki-client