Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/u7iEmRQisSf83RBqjjO6HMVH_uM.roa
File: u7iEmRQisSf83RBqjjO6HMVH_uM.roa (raw, json)
Hash identifier: hiSgmMMSf/VUxaoPszyD77C2EBYHq8JpPtq0tK9fiAI=
Subject key identifier: BB:B8:84:99:14:22:B1:27:FC:DD:10:6A:8E:33:BA:1C:C5:47:FE:E3
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A04865497FDC07864970445A2808859A4A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/u7iEmRQisSf83RBqjjO6HMVH_uM.roa
Signing time: Fri 28 Aug 2026 12:43:12 +0000
ROA not before: Fri 28 Aug 2026 12:43:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 62.72.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 12:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:65:49:7f:dc:07:86:49:70:44:5a:28:08:85:9a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 28 12:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbb884991422b127fcdd106a8e33ba1cc547fee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:07:22:49:21:7a:a3:4f:d7:6f:61:e6:3f:
5f:24:2b:11:8d:84:5d:5d:82:5a:6c:a7:ab:f6:a0:
53:7e:2b:81:cb:1f:02:d2:69:5a:b6:89:d8:bc:3f:
2a:7a:eb:95:7d:44:cd:9f:f6:dd:dc:ff:64:7c:f9:
0f:8f:e5:48:12:9e:97:c6:5b:1d:9c:57:c1:96:2e:
45:ad:6b:b8:3f:87:9d:11:f0:60:3b:64:6f:d2:e0:
97:9e:00:79:62:d6:67:5f:5b:e8:0e:7f:6b:8c:5d:
18:34:2c:5e:17:86:f0:93:51:2d:a2:bb:97:2a:3d:
3a:df:b6:43:de:2d:b3:c2:4d:6b:ee:1e:8a:1c:e4:
6f:5b:53:0d:11:ed:e7:ec:3a:cd:8a:75:5f:e7:65:
ef:42:cd:ba:7e:e3:b8:82:66:5b:02:14:e4:73:d9:
d4:5d:37:21:80:af:d6:e9:97:a6:b9:b7:89:f5:63:
61:b1:e8:2a:6c:8c:b6:60:f8:3d:d6:13:dd:5c:a0:
1d:7b:fc:49:02:0d:6f:2d:4d:86:bf:90:c6:0b:47:
3d:b1:e2:72:e5:50:47:71:0e:f4:dc:0e:0a:3a:b8:
30:a6:fd:35:b3:4a:c7:d4:1d:90:4c:e8:57:a3:b7:
ce:ab:ea:b6:e8:58:4c:d7:31:f8:d1:c2:de:5a:1c:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B8:84:99:14:22:B1:27:FC:DD:10:6A:8E:33:BA:1C:C5:47:FE:E3
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/u7iEmRQisSf83RBqjjO6HMVH_uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.168.0/24
Signature Algorithm: sha256WithRSAEncryption
87:9e:82:9d:97:3e:db:ac:89:ba:be:28:29:e4:3b:65:dd:93:
09:f3:0a:e2:a1:95:fe:3b:85:ce:07:e6:41:9b:53:6c:6f:1f:
ba:34:22:c1:7d:3f:20:e1:98:51:af:37:e5:13:3c:e9:50:08:
99:b2:02:0d:fd:b6:44:1e:96:1b:2a:84:96:39:02:f1:a5:52:
20:b2:da:26:a2:f7:f6:e7:74:81:5f:5e:a9:f0:86:e9:9b:35:
29:90:e8:40:a1:92:e4:75:5f:02:63:36:74:50:a9:85:70:4e:
fd:ee:2c:99:90:07:cc:26:23:1f:ae:bb:10:58:fb:c9:2d:57:
2c:ae:36:a6:ab:59:e1:a0:8b:80:d2:4d:3f:2f:4f:5e:ec:3a:
28:62:db:9e:74:48:3d:0a:2c:f5:10:00:74:b9:31:f9:11:4d:
eb:f8:c9:27:d2:08:75:bf:d3:5e:f4:e8:aa:ff:a2:8b:27:bf:
e4:6d:53:9e:5e:32:9e:e2:83:4c:2e:ea:4d:16:a1:41:82:73:
7c:b5:d0:d9:a5:fe:01:f7:8a:53:1e:a9:35:38:e3:80:2d:02:
05:db:6c:71:17:44:45:4b:4c:4c:af:43:10:ec:a8:0b:7b:22:
b4:53:74:f6:e3:4f:1c:e7:e4:6a:93:b5:b7:5e:56:fb:0b:32:
0b:d2:2c:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBIZUl/3AeGSXBEWigIhZpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYwODI4MTI0MzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmI4ODQ5OTE0MjJiMTI3ZmNkZDEwNmE4ZTMzYmExY2M1NDdmZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyMHIkkheqNP129h5j9fJCsRjYRd
XYJabKer9qBTfiuByx8C0mlatonYvD8qeuuVfUTNn/bd3P9kfPkPj+VIEp6Xxlsd
nFfBli5FrWu4P4edEfBgO2Rv0uCXngB5YtZnX1voDn9rjF0YNCxeF4bwk1EtoruX
Kj0637ZD3i2zwk1r7h6KHORvW1MNEe3n7DrNinVf52XvQs26fuO4gmZbAhTkc9nU
XTchgK/W6ZemubeJ9WNhsegqbIy2YPg91hPdXKAde/xJAg1vLU2Gv5DGC0c9seJy
5VBHcQ703A4KOrgwpv01s0rH1B2QTOhXo7fOq+q26FhM1zH40cLeWhxfUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLu4hJkUIrEn/N0Qao4zuhzFR/7jMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvdTdpRW1SUWlzU2Y4M1JCcWpqTzZITVZIX3VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkioMA0G
CSqGSIb3DQEBCwUAA4IBAQCHnoKdlz7brIm6vigp5Dtl3ZMJ8wrioZX+O4XOB+ZB
m1Nsbx+6NCLBfT8g4ZhRrzflEzzpUAiZsgIN/bZEHpYbKoSWOQLxpVIgstomovf2
53SBX16p8IbpmzUpkOhAoZLkdV8CYzZ0UKmFcE797iyZkAfMJiMfrrsQWPvJLVcs
rjamq1nhoIuA0k0/L09e7DooYtuedEg9Ciz1EAB0uTH5EU3r+Mkn0gh1v9Ne9Oiq
/6KLJ7/kbVOeXjKe4oNMLupNFqFBgnN8tdDZpf4B94pTHqk1OOOALQIF22xxF0RF
S0xMr0MQ7KgLeyK0U3T2408c5+Rqk7W3Xlb7CzIL0iz3
-----END CERTIFICATE-----
Generated at Fri Aug 28 21:26:51 2026 by rpki-client