Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rfk2DZm0XsLThLi4bTuoPO_KU8w.roa
File: rfk2DZm0XsLThLi4bTuoPO_KU8w.roa (raw, json)
Hash identifier: YPXLpe7Q1vn2IHpITENfJ7wfpSW2FVAMoZvPHR9ayrc=
Subject key identifier: AD:F9:36:0D:99:B4:5E:C2:D3:84:B8:B8:6D:3B:A8:3C:EF:CA:53:CC
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019A91C6364CB5A74F22B4B81B2321148511
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rfk2DZm0XsLThLi4bTuoPO_KU8w.roa
Signing time: Mon 17 Nov 2025 12:24:37 +0000
ROA not before: Mon 17 Nov 2025 12:24:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.171.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:91:c6:36:4c:b5:a7:4f:22:b4:b8:1b:23:21:14:85:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 17 12:24:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adf9360d99b45ec2d384b8b86d3ba83cefca53cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:63:44:3b:2d:21:75:6b:4d:48:f6:94:c7:
f7:ac:29:4a:09:ff:bb:dd:22:12:e4:1e:ca:d7:7b:
d7:5a:c2:30:d9:ab:98:0c:39:6d:94:f3:5e:8a:46:
7f:f7:f3:d7:fb:17:c8:97:5b:8c:be:bb:a2:83:1c:
dd:5a:12:9e:c5:bb:99:07:49:d8:19:53:b5:8d:ae:
ed:ee:76:29:fe:7a:0d:c9:80:27:7d:60:fa:c4:9c:
79:92:99:16:6a:90:4b:a6:bb:e7:6a:5e:87:2e:b5:
76:88:a4:c7:32:d1:41:40:9e:a6:8e:8a:45:08:c4:
95:ec:6d:30:43:b8:02:bc:72:5e:3a:d1:1e:e7:38:
01:c1:e7:71:00:30:c7:05:51:1c:79:27:5d:d1:82:
fc:36:75:b8:89:68:b4:5f:4b:e7:be:97:7f:30:81:
c8:81:6a:ba:60:6b:f3:17:da:cc:c1:c5:62:80:44:
4e:85:7a:91:1b:30:cb:9e:23:22:2c:4b:ab:82:11:
a5:38:99:1d:de:2e:43:0d:1a:c3:fc:8f:80:38:0c:
a7:98:3d:37:37:29:99:d2:f6:cb:2d:4b:f4:94:7a:
47:61:b4:ca:9b:59:c4:7e:f7:ae:2c:86:c0:93:53:
a9:51:1d:35:f4:00:f7:76:b1:d0:09:4f:a0:44:48:
82:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F9:36:0D:99:B4:5E:C2:D3:84:B8:B8:6D:3B:A8:3C:EF:CA:53:CC
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rfk2DZm0XsLThLi4bTuoPO_KU8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.171.0/24
81.21.2.0-81.21.7.255
176.57.56.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
22:32:c1:1a:e7:fe:f1:d9:09:0c:07:85:2f:4e:25:7c:b6:75:
5d:83:e2:84:99:eb:02:fa:e9:fc:fb:d7:98:34:6f:8a:8f:8f:
88:b7:5f:b4:f2:6f:1d:7b:df:40:4a:77:0a:70:ea:40:79:78:
a4:e9:44:f2:f6:d5:82:3d:3f:03:37:d8:bd:83:67:a8:9c:5d:
36:5a:c9:24:5d:0e:5e:81:f0:2f:e7:01:5c:6e:49:ec:29:3f:
a5:dd:e6:e0:17:0e:a0:47:86:da:be:e5:3f:19:7d:a7:3a:a0:
bc:e9:ca:33:8a:a9:6f:86:27:35:45:4f:4b:78:ab:fc:c2:18:
4b:0f:4f:c5:22:1d:a7:8e:7a:b7:ab:15:c4:0b:c0:09:20:da:
d6:2f:99:5e:64:0e:07:53:f4:d0:6b:a6:7c:67:87:e9:c2:c2:
44:28:db:61:f6:9e:8e:be:bc:99:89:5f:22:ff:b5:69:80:fc:
a2:c8:0f:f9:58:8e:4d:9b:c3:b8:02:7b:10:bc:43:e0:f9:b0:
e3:da:9c:a2:27:38:39:86:d8:ef:8c:24:14:87:84:f8:3f:42:
f9:70:4d:41:b1:2d:ec:10:04:b9:85:c4:99:64:91:12:6d:b3:
f4:f3:6e:28:86:df:86:b0:07:a3:69:63:e7:9c:19:7a:97:d5:
26:3a:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 15:53:50 2025 by rpki-client