Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oTirpxNwMHNy09piouk6k2hgBNE.roa
File: oTirpxNwMHNy09piouk6k2hgBNE.roa (raw, json)
Hash identifier: RYy0gkkTZ0t8W1vi3hfDM6p6P71RxIssKBsDmfMyWHM=
Subject key identifier: A1:38:AB:A7:13:70:30:73:72:D3:DA:62:A2:E9:3A:93:68:60:04:D1
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019EDEA57F1FB41AE065302FFF5B49B6D30C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oTirpxNwMHNy09piouk6k2hgBNE.roa
Signing time: Fri 19 Jun 2026 06:50:48 +0000
ROA not before: Fri 19 Jun 2026 06:50:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:de:a5:7f:1f:b4:1a:e0:65:30:2f:ff:5b:49:b6:d3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 19 06:50:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a138aba71370307372d3da62a2e93a93686004d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:98:51:00:18:42:ba:df:41:3b:d2:30:6c:
88:f4:84:ae:8a:ee:95:c1:49:f5:ff:46:84:2c:38:
f1:46:d0:c1:d5:8d:20:e3:c7:77:7c:f3:a7:9d:64:
b9:f9:95:f7:5b:7f:42:80:78:cc:21:6d:fa:c0:53:
e4:20:bd:df:ec:88:61:23:ef:d8:e3:db:5c:ee:dd:
c6:d9:7d:b9:5e:04:0b:3e:c6:ee:4e:84:7e:f3:56:
1f:de:b0:fc:89:ae:7c:ed:ed:0c:d2:47:3a:26:9b:
49:08:4a:b9:42:f7:eb:90:85:b8:18:0d:de:a2:61:
be:4d:e5:e4:4d:2d:2e:e3:aa:01:90:2d:06:7f:b4:
30:19:63:7b:a6:6a:fc:51:7c:77:0b:30:8a:de:7b:
bf:5e:70:56:73:db:34:29:d6:71:c4:7a:eb:01:53:
5e:3a:d2:44:33:96:2b:f4:f1:36:95:1d:e8:e8:72:
06:c2:95:5a:fb:8a:64:f4:b0:ae:22:12:c5:65:2b:
18:22:d7:82:07:14:83:05:0a:fb:af:c3:64:52:43:
3e:f0:a4:75:e8:6b:5f:19:df:9e:af:b3:99:35:49:
08:dc:a2:0b:45:a4:4c:ce:e8:e8:7b:7b:3e:03:bf:
e6:8d:5a:42:91:73:ad:b4:9f:1c:46:6d:73:b1:e1:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:38:AB:A7:13:70:30:73:72:D3:DA:62:A2:E9:3A:93:68:60:04:D1
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oTirpxNwMHNy09piouk6k2hgBNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.174.0/24
62.72.176.0/24
62.72.180.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
49:5d:2b:4b:a1:13:3a:4b:e0:04:7a:db:0b:23:8e:01:a6:6c:
21:3f:80:76:45:45:16:74:dd:e6:43:e7:fe:1d:a0:52:78:34:
fa:d3:b1:ba:c9:41:98:00:81:92:8a:62:78:5d:00:11:75:58:
f5:0c:8f:61:3c:fc:2f:0d:6a:a6:0e:b2:4e:57:33:34:d8:7f:
64:e8:f7:ac:8c:df:ad:8e:02:1a:1b:c6:9b:b4:fb:f5:fd:33:
c7:70:af:ab:56:24:e8:b9:ab:91:a8:ac:97:77:25:c7:66:df:
4f:6c:60:7f:dd:49:c2:3e:1a:7f:9e:43:c0:00:d1:94:77:cb:
fe:74:8a:ce:cd:30:f2:e8:05:6a:19:06:52:dd:a7:ef:a7:39:
2c:fd:a7:d6:41:15:02:c3:07:51:4c:7c:2a:18:6d:06:be:dc:
83:6e:ff:4b:2d:64:3f:2f:18:81:6b:08:7a:80:e4:df:37:95:
fc:1a:c5:c5:c1:33:6e:ce:0d:f7:12:68:2a:8c:f4:f5:80:a0:
fc:e6:4c:d2:a4:f3:c0:1c:2b:02:7f:d3:4a:92:4b:1e:c9:70:
d3:00:6d:58:e8:fc:31:fa:91:70:cd:fe:2d:f8:f8:9d:65:ca:
0f:15:aa:b2:b6:6f:7d:80:7a:9c:4f:b4:23:e0:72:6f:3b:6c:
68:36:4a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 16:12:06 2026 by rpki-client