Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/koqB002kFP2trD3EC1fLprFSky4.roa
File: koqB002kFP2trD3EC1fLprFSky4.roa (raw, json)
Hash identifier: eHESD081CZKmtgauUJ9um1jyNiH4IytPTwbHVUMX3AQ=
Subject key identifier: 92:8A:81:D3:4D:A4:14:FD:AD:AC:3D:C4:0B:57:CB:A6:B1:52:93:2E
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A19BD97C5ACFBA102045F0A014A0819503
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/koqB002kFP2trD3EC1fLprFSky4.roa
Signing time: Mon 02 Nov 2026 10:41:24 +0000
ROA not before: Mon 02 Nov 2026 10:41:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 62.72.185.0/24 maxlen: 24
176.57.50.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:d9:7c:5a:cf:ba:10:20:45:f0:a0:14:a0:81:95:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 2 10:41:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=928a81d34da414fdadac3dc40b57cba6b152932e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:9d:55:68:25:dd:6c:4f:5d:4e:33:e6:5c:
65:a3:8a:93:8c:40:80:ec:52:fa:22:c9:4e:a9:46:
5f:7b:2a:6d:67:58:b4:91:6d:2c:4b:a4:87:40:f0:
61:1d:d0:00:70:db:19:cc:2a:ed:a9:af:d2:06:67:
cd:14:63:27:af:a6:47:bd:95:21:c6:03:c6:9e:0d:
6d:51:f1:f0:69:31:68:76:ef:38:e1:18:22:6f:52:
2c:57:8c:aa:60:f7:26:fe:04:35:97:90:71:70:ef:
31:05:8d:0c:70:64:79:c0:14:0f:16:b8:77:54:3d:
30:1f:2b:34:cc:c9:0b:54:d0:06:f9:32:74:3d:85:
98:92:3a:f3:b9:14:a3:ef:a5:10:c1:19:12:4c:9f:
ff:5d:b7:00:7e:e4:d4:15:d3:ba:d0:bc:3d:58:19:
7d:e6:2a:ee:d6:ba:11:72:84:bf:60:c0:17:81:3a:
3e:82:70:df:0d:d0:19:d6:62:62:9c:7a:51:86:b4:
39:0a:85:85:7e:78:f5:16:ca:f5:0a:b4:58:cc:55:
11:70:17:d7:f2:ba:3c:41:40:4e:dc:5a:88:d2:4e:
6b:83:8f:3b:4b:7b:d6:5c:a0:65:eb:8e:c9:b9:c4:
e2:63:40:60:40:9f:2c:6f:4c:c0:b5:48:58:81:35:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8A:81:D3:4D:A4:14:FD:AD:AC:3D:C4:0B:57:CB:A6:B1:52:93:2E
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/koqB002kFP2trD3EC1fLprFSky4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.185.0/24
176.57.50.0/24
176.57.54.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:a0:f6:6e:87:96:35:70:16:a6:b8:fa:66:eb:62:cb:8a:78:
d2:89:73:8b:65:1b:7e:f1:c4:b1:36:59:d2:47:ee:98:65:a1:
c2:a5:d0:69:fa:31:83:32:5f:dc:c5:96:d1:a0:0b:b6:94:63:
f0:d0:19:08:58:9b:e1:a7:ff:73:ce:42:44:40:75:16:52:69:
a5:04:c0:14:4b:e4:52:8a:1e:35:41:03:0d:ae:3f:69:0c:9e:
9d:f4:68:8c:34:9a:9e:bd:0a:48:21:ef:1e:41:32:ab:b8:5a:
f5:f1:41:9d:a9:ab:97:0c:64:66:40:e6:16:ed:c2:29:ad:06:
c6:fc:85:0e:1d:cc:96:07:b5:c6:ab:4e:04:1e:b2:41:e0:bc:
68:81:f3:d0:bf:f9:b3:5c:38:f0:bb:ef:e4:c3:7f:79:6f:87:
b0:09:80:d1:40:f7:f9:6c:e6:42:b6:09:9b:7d:8e:2d:40:36:
f9:64:53:77:a2:19:3b:dc:4c:20:11:82:63:2d:ac:5e:73:56:
bd:e5:31:7a:01:b7:12:cb:fd:4a:9e:1e:d4:28:76:8b:4b:d6:
77:3d:ad:5d:fd:67:a2:be:21:15:33:fb:32:57:4f:f5:62:88:
7c:c7:4b:a2:cb:11:16:1e:4e:ee:51:a0:5f:a5:d5:bf:0b:6e:
93:8a:3f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 15:05:35 2026 by rpki-client