Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/nKmPYXidGAhXn3442nxPoF3fEHE.roa
File: nKmPYXidGAhXn3442nxPoF3fEHE.roa (raw, json)
Hash identifier: xoh2A/CBXVSiJOQmDfAjAO4FcrbJNp0zdoL5VThVjIQ=
Subject key identifier: 9C:A9:8F:61:78:9D:18:08:57:9F:7E:38:DA:7C:4F:A0:5D:DF:10:71
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A0AF05C03561EAA608AF4AE0F58E19FC87
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/nKmPYXidGAhXn3442nxPoF3fEHE.roa
Signing time: Thu 17 Sep 2026 10:59:44 +0000
ROA not before: Thu 17 Sep 2026 10:59:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218797
IP address blocks: 62.72.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:05:c0:35:61:ea:a6:08:af:4a:e0:f5:8e:19:fc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 17 10:59:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ca98f61789d1808579f7e38da7c4fa05ddf1071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:44:93:e5:d5:b9:ef:f6:b4:98:33:a9:12:b2:
a6:df:32:8f:51:0f:6e:bb:2b:34:ce:be:15:b8:cb:
98:7a:72:a7:f1:8d:83:b4:dc:ae:d0:07:c8:35:40:
37:25:a4:f0:9e:9f:c8:22:dc:4c:f3:1f:32:52:f5:
4e:06:88:d3:70:2e:f3:6c:75:10:f6:48:06:5e:7a:
b2:25:7c:43:76:38:ad:4c:a8:36:7e:51:5e:16:bd:
54:c7:f4:23:05:73:a2:31:d2:22:2b:b9:6f:5a:de:
a2:00:21:bc:0b:3b:b0:42:bb:8a:64:3f:1a:28:e4:
56:fd:a9:25:d4:4c:83:51:e5:3e:52:ae:84:bc:d5:
4c:3e:bd:3b:29:34:a6:39:1c:13:76:84:1a:98:ab:
e8:3e:0c:94:6d:55:05:74:46:6d:cb:fd:cf:4b:9f:
80:f7:7a:b8:37:b7:22:4d:4e:95:8e:e4:5d:a7:e4:
83:50:9a:2e:85:8e:bb:21:7d:32:39:b5:55:78:4f:
39:a9:d6:6b:bd:e7:e7:d1:4f:58:83:0f:ea:ef:d3:
6f:a8:a2:dc:85:c0:91:e2:7f:af:0a:f8:1a:8e:52:
bd:7e:73:1d:d0:ed:3a:f6:52:bf:de:02:85:5a:d7:
3b:e8:94:8f:48:e6:f0:2c:90:bb:fd:c9:bc:19:67:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A9:8F:61:78:9D:18:08:57:9F:7E:38:DA:7C:4F:A0:5D:DF:10:71
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/nKmPYXidGAhXn3442nxPoF3fEHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f5:e8:68:a6:d0:4a:bb:21:73:8d:a5:8e:eb:86:a3:d8:91:
74:ba:36:84:ba:2d:37:61:74:d0:39:61:74:f4:a7:a4:8f:2d:
98:7e:ac:b5:88:f3:0c:58:2b:76:1b:c1:a6:a0:b2:0b:70:08:
27:f9:6d:92:c6:f6:b0:1f:93:98:f7:eb:78:79:81:21:b4:a4:
74:56:55:18:2f:82:5a:cb:e0:79:84:92:e3:5b:26:84:5f:66:
b3:bf:e3:e7:ba:a8:82:d4:cf:c7:fc:4e:0a:81:55:b8:e7:fa:
76:45:c5:a2:f0:70:be:a3:cd:ff:7f:d2:75:a8:73:94:11:5f:
75:e5:1d:98:9c:b0:5d:9e:8c:88:83:46:cd:c8:86:15:63:bf:
d0:63:41:9c:4c:7c:8d:34:63:b6:15:28:4b:b1:a1:72:f0:94:
44:d3:5d:3b:f3:24:68:f4:d3:a1:ec:16:4e:45:5b:c0:fa:c6:
bc:89:ce:8a:e0:00:5b:4c:b6:cc:c2:63:e0:38:57:10:2f:3f:
e5:6b:44:a6:5f:6d:c9:32:cd:67:8b:2a:da:03:fc:4a:60:5d:
74:22:a2:14:6d:d9:0f:dd:48:f7:ec:14:a1:a3:94:e7:50:24:
80:6a:b1:7d:da:b0:04:37:d5:7f:f3:43:b1:7b:e6:c3:c3:83:
4d:e1:87:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 04:17:16 2026 by rpki-client