Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/s5BBxW0FDAnW7VbpSvFNRkftADQ.roa
File: s5BBxW0FDAnW7VbpSvFNRkftADQ.roa (raw, json)
Hash identifier: CI4Op8cPDXDRmWOv4OnxJAe5Fa8ebNgcFN1z/ZOD1F0=
Subject key identifier: B3:90:41:C5:6D:05:0C:09:D6:ED:56:E9:4A:F1:4D:46:47:ED:00:34
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A09968F4C2A2958DC7563B70F7A79CDD96
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/s5BBxW0FDAnW7VbpSvFNRkftADQ.roa
Signing time: Sun 13 Sep 2026 06:16:27 +0000
ROA not before: Sun 13 Sep 2026 06:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:68:f4:c2:a2:95:8d:c7:56:3b:70:f7:a7:9c:dd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 13 06:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b39041c56d050c09d6ed56e94af14d4647ed0034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:b5:bd:86:e1:74:b3:38:ec:d4:b4:ac:5b:
38:a4:15:81:15:4b:8f:4e:55:e9:2c:9b:6c:58:cc:
62:c4:e9:f7:c1:97:69:69:89:11:8f:06:6f:b0:a4:
e5:08:fb:91:b0:99:11:6e:a6:9f:e4:6e:83:42:09:
40:46:97:ec:31:8d:12:72:4b:78:98:d8:c1:7c:ef:
90:ad:bd:9d:6d:06:ff:2c:31:81:bd:37:99:63:bc:
13:b3:9b:6b:17:eb:ce:8e:fd:94:35:71:f2:7d:ac:
5b:e0:c6:25:92:e3:f4:cd:63:ae:05:6a:f6:f0:d0:
0f:35:ec:15:20:59:4f:76:61:23:a3:8f:2d:d8:12:
85:7c:45:5a:00:65:d8:b7:cf:d0:e9:43:1d:e0:38:
57:15:bc:61:32:2b:fc:3d:6b:74:82:41:94:a9:86:
33:a8:8e:a0:e9:fe:a3:2c:55:f2:77:44:76:14:8f:
e1:4b:9d:07:f9:91:82:e5:80:7f:d3:fa:79:8f:d5:
ea:c6:f5:1c:e7:f5:60:25:d3:b8:1c:11:4e:7e:c3:
1f:39:82:a5:22:bc:3f:74:e5:5a:d4:76:3b:ab:14:
d9:12:bd:b2:7a:22:98:48:cd:4f:c8:d5:46:61:f7:
8d:7e:44:67:24:be:73:e5:51:c5:eb:c5:80:04:67:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:90:41:C5:6D:05:0C:09:D6:ED:56:E9:4A:F1:4D:46:47:ED:00:34
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/s5BBxW0FDAnW7VbpSvFNRkftADQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.174.0/24
176.57.54.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b9:43:98:70:10:a2:96:b6:c3:0f:68:18:84:27:eb:17:d9:
03:a1:8b:ce:f8:17:a8:7f:29:12:20:b6:01:e9:1c:8f:b6:9f:
4d:33:b8:f0:5a:06:e9:56:59:9a:b0:1e:e4:00:be:ee:16:9e:
02:8e:c0:e7:80:21:a1:d0:ae:ac:f8:8b:0b:9b:2d:24:56:b8:
d1:af:78:e8:c5:df:f5:a5:fd:e4:7e:4e:f8:9c:8f:d1:b8:b7:
a1:51:b9:77:bd:11:2b:79:9c:b7:68:a7:04:85:9a:be:b8:ac:
70:b6:f3:02:92:f3:06:ff:28:6e:55:7c:47:1f:36:16:7a:3d:
a2:4b:dc:55:71:c6:a7:db:f9:cc:2e:5f:32:e4:df:52:fc:2a:
36:40:f4:c6:d3:7e:07:f6:e3:68:ab:fb:bf:8d:e5:56:54:9f:
ca:bc:a2:4a:2e:88:4e:c9:63:f7:7d:5e:06:68:cc:41:a3:a1:
42:c0:28:48:61:b2:a0:da:25:79:b4:a5:15:76:94:40:72:52:
a5:09:ac:7e:93:66:0a:0f:54:9c:ec:b4:3c:5d:3f:86:6d:0c:
72:58:97:e9:33:1f:fa:c6:8c:bc:9a:a9:b8:15:0f:d3:5d:13:
bd:5e:64:2d:e7:42:d8:d0:d3:07:0b:36:a7:31:90:fa:28:5a:
5a:a2:0a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 23:57:24 2026 by rpki-client