Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mkxeVdqvGa8_RK94mH2It6R-t6s.roa
File: mkxeVdqvGa8_RK94mH2It6R-t6s.roa (raw, json)
Hash identifier: OIAAUN4UKKUEr59vtk7Qhtvzzo1T5ZyKrv8vWf1M9TY=
Subject key identifier: 9A:4C:5E:55:DA:AF:19:AF:3F:44:AF:78:98:7D:88:B7:A4:7E:B7:AB
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A0AF05C168A051FAA9747419C2FABBC0BC
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mkxeVdqvGa8_RK94mH2It6R-t6s.roa
Signing time: Thu 17 Sep 2026 10:59:45 +0000
ROA not before: Thu 17 Sep 2026 10:59:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 62.72.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:05:c1:68:a0:51:fa:a9:74:74:19:c2:fa:bb:c0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 17 10:59:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a4c5e55daaf19af3f44af78987d88b7a47eb7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:92:33:aa:6a:56:ca:2d:18:b2:fc:ca:36:51:
48:02:0c:4f:d0:ef:e0:ff:39:13:68:79:d3:36:1d:
4b:e9:8c:db:8b:f3:93:f8:51:6e:95:06:50:eb:50:
e6:f9:12:a9:2e:fa:3f:95:2a:22:bf:0d:8d:1a:0f:
a8:b9:c7:49:fd:dd:0c:36:07:9b:a4:cd:dd:43:cd:
d5:6b:61:90:eb:b6:eb:9b:31:f7:aa:c8:10:36:c2:
bf:1e:0e:b6:0f:8d:99:bd:10:b4:a3:ac:ff:d5:98:
08:32:7e:35:1e:37:42:52:40:36:34:a5:7c:77:7f:
f7:31:52:11:e5:09:6e:b2:a2:2d:de:c5:84:11:14:
42:4d:e9:87:18:75:6b:3a:0c:09:65:16:54:8c:16:
42:29:ae:eb:61:f7:29:60:77:4d:57:99:b7:89:45:
c7:54:27:74:ac:f4:5e:9c:c0:f4:a7:b4:88:6b:8b:
ad:db:31:69:61:69:13:6a:9c:70:4f:18:cf:a2:6a:
96:ee:74:a7:d9:3e:ff:de:42:c2:2a:14:73:49:d9:
3f:da:61:1e:c1:c3:e1:9a:ce:d2:03:b4:4a:5d:0b:
81:c3:2e:fb:00:45:c4:1f:9f:03:9b:4b:de:9a:04:
d5:f6:ba:2b:0d:dd:65:7e:71:cd:59:cc:8a:d9:95:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4C:5E:55:DA:AF:19:AF:3F:44:AF:78:98:7D:88:B7:A4:7E:B7:AB
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mkxeVdqvGa8_RK94mH2It6R-t6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/24
Signature Algorithm: sha256WithRSAEncryption
87:fe:80:01:55:21:59:bf:8f:13:e5:d0:9b:6f:b5:05:f5:47:
c4:35:1a:16:73:b1:f5:c6:cd:45:b9:01:98:79:02:87:a4:2e:
00:2f:7c:46:e4:a8:27:50:c8:c0:ff:d0:a6:02:61:56:90:e9:
f2:6f:3e:d0:9d:bc:76:d4:f5:b9:cb:4e:99:cb:45:46:78:c8:
b2:af:9d:76:0b:46:09:bf:e8:00:07:2b:b2:0f:63:bb:25:77:
33:b8:e2:c9:b5:bd:3b:97:1e:16:18:48:fb:f0:1f:40:e3:2c:
59:43:a8:94:6f:06:3e:45:78:42:e3:68:3e:cf:eb:dc:e8:fc:
f8:11:ce:82:3c:23:2c:9b:9d:f4:87:1d:73:b5:80:67:cc:1d:
ad:87:b9:88:5a:b2:20:6d:b9:f8:ae:84:4f:73:15:3e:5b:d0:
44:98:ee:82:cb:22:64:77:5a:be:fc:8b:e3:06:8b:ff:5c:c6:
9b:34:04:1d:88:85:6f:1b:08:b4:7b:d5:3c:c0:39:a9:b5:fd:
3b:94:b2:9e:54:ab:b9:e5:00:be:53:f4:e2:1c:5b:da:9a:77:
be:bf:e0:1d:66:a3:22:3f:ce:85:d1:ee:64:fe:a7:50:b4:50:
65:53:9b:31:4c:aa:53:74:be:9f:b1:43:86:9f:12:9f:5b:b9:
e2:34:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 04:17:16 2026 by rpki-client