Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jFOOiVIJXUplo5sbQn459HQ3ZVg.roa
File: jFOOiVIJXUplo5sbQn459HQ3ZVg.roa (raw, json)
Hash identifier: leW7ID8jgMsQdyPHewYzl9kELPvtbc87rM05EgGaQW0=
Subject key identifier: 8C:53:8E:89:52:09:5D:4A:65:A3:9B:1B:42:7E:39:F4:74:37:65:58
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A139E332BB4322B62B52AC1C67B14DBF32
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jFOOiVIJXUplo5sbQn459HQ3ZVg.roa
Signing time: Wed 14 Oct 2026 10:09:13 +0000
ROA not before: Wed 14 Oct 2026 10:09:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401443
IP address blocks: 62.72.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:e3:32:bb:43:22:b6:2b:52:ac:1c:67:b1:4d:bf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 14 10:09:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c538e8952095d4a65a39b1b427e39f474376558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:79:ba:7b:96:66:53:70:94:e1:d5:21:20:
45:6a:9c:ea:06:a0:90:4b:05:61:2c:24:c4:0e:7d:
3a:f8:e5:92:e9:9e:c3:60:18:97:e2:04:1c:89:19:
56:0f:a7:21:ca:1d:0a:e6:c2:ed:4d:70:fe:b4:ee:
f0:7c:c6:72:77:7a:90:89:bc:0b:25:6a:b2:6e:59:
e5:0f:b2:95:9b:da:3d:39:ea:44:99:22:2d:b3:b8:
ab:c4:74:2c:76:75:3b:c1:99:b4:81:be:17:31:fc:
51:b0:03:ca:7d:58:56:08:72:2c:df:42:e7:aa:1c:
6a:94:43:94:fb:b7:61:e6:59:07:54:b0:3f:35:1c:
8b:bb:95:69:a6:e3:7a:d5:cc:57:35:09:27:c2:20:
13:a7:67:b0:70:36:3c:db:54:3e:cf:27:27:6c:48:
13:5d:f2:c9:dd:76:98:c6:40:fb:1c:ab:05:5d:45:
16:34:4b:89:4a:b9:01:97:a7:0a:0b:37:6a:b1:6d:
5f:25:76:a7:92:a5:4a:1c:6c:bd:7e:03:a2:3b:17:
59:af:66:77:56:fb:f3:ee:d2:9b:ce:9f:0a:81:dd:
bf:e8:6b:b2:91:c6:a1:1e:af:96:90:ab:96:ca:d4:
44:a0:0d:46:7e:90:f3:c1:52:b6:fb:22:f6:62:4d:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:53:8E:89:52:09:5D:4A:65:A3:9B:1B:42:7E:39:F4:74:37:65:58
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jFOOiVIJXUplo5sbQn459HQ3ZVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.163.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b3:1d:27:20:6d:a4:64:50:7d:f2:ce:ae:ee:b3:cd:d0:e0:
2c:6c:a3:4b:e7:70:03:5d:c5:ff:64:72:c4:9d:ff:ac:06:7f:
af:8b:94:e0:15:fe:28:20:92:76:76:a5:0f:b9:55:fc:1c:16:
68:eb:e9:d0:ac:89:92:24:14:5a:bb:c4:1b:09:e2:e5:1d:e3:
46:8e:a4:d7:11:3a:ad:f6:7b:dc:96:20:cb:eb:ca:91:2d:37:
9c:b7:dc:2a:9b:09:c6:f2:6a:4e:9c:32:5a:be:c2:58:f5:45:
68:d7:12:df:55:8a:57:9a:75:2a:ea:51:18:86:60:b0:54:d6:
9e:02:1e:35:b7:8d:c8:a8:ad:03:2c:dd:07:42:c3:d2:4a:e1:
a0:c7:b1:17:47:f4:8e:4a:f2:9f:43:f1:3d:4a:9a:35:3c:a7:
c5:1c:1e:74:7b:7a:54:19:cf:bd:bf:04:d7:fd:62:a3:0c:d4:
5d:bb:a0:39:d1:a1:84:48:ce:dd:84:e9:bf:ab:88:e4:81:81:
1c:6b:d0:40:f3:3e:3c:26:8f:9e:82:86:50:a9:96:2f:f2:b9:
6b:a1:24:4f:22:22:3d:9f:1d:15:05:5c:2c:48:7b:5d:56:bb:
8e:a6:33:c8:ce:20:53:6c:4d:c6:c9:07:df:8c:06:ee:b9:dc:
47:fb:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:08:30 2026 by rpki-client