Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vCXWQ56gIcelXwm_zhawUuYXwww.roa
File: vCXWQ56gIcelXwm_zhawUuYXwww.roa (raw, json)
Hash identifier: HcMlppSv27a5QWGrGnHgNKUQrUqBu61lMiD+k1CpuVQ=
Subject key identifier: BC:25:D6:43:9E:A0:21:C7:A5:5F:09:BF:CE:16:B0:52:E6:17:C3:0C
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019DA4A8857AAE90AF97184C98C211997488
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vCXWQ56gIcelXwm_zhawUuYXwww.roa
Signing time: Sun 19 Apr 2026 07:33:20 +0000
ROA not before: Sun 19 Apr 2026 07:33:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
176.57.50.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 12:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:a8:85:7a:ae:90:af:97:18:4c:98:c2:11:99:74:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 19 07:33:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc25d6439ea021c7a55f09bfce16b052e617c30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:fd:1d:7e:c6:9d:05:c9:cd:02:b2:35:97:
6d:16:fa:70:c4:7d:13:04:73:26:96:6d:fc:5f:8d:
9d:c8:74:62:df:2e:49:46:0e:76:79:4b:3c:eb:52:
70:d7:cc:3a:44:48:ac:9e:18:39:ee:3f:5d:60:c1:
42:d8:91:4b:8a:e3:88:43:e3:50:8b:31:ca:d2:b4:
cc:39:d3:ea:8b:7c:5b:c5:61:18:95:36:43:93:a8:
45:09:90:dc:41:06:2f:6e:30:16:8c:c7:e5:03:02:
33:18:cb:c1:5e:39:26:20:2c:96:ca:db:e7:8e:05:
1f:ba:df:e3:d5:26:be:53:55:4c:87:2a:75:0d:82:
45:e3:5e:6a:fb:58:c3:95:38:a4:5c:80:9e:51:7d:
6c:25:95:d6:7b:d1:28:f6:9a:bd:e7:04:8c:08:01:
9e:09:24:6c:d7:e7:ad:64:87:01:84:db:c0:4d:87:
1a:7c:52:79:e6:a4:40:37:fc:18:36:1b:fa:19:b2:
4e:57:ea:5e:f4:eb:94:12:46:ca:f6:99:00:22:ff:
8a:fe:d8:b0:a1:31:46:30:52:d8:68:19:ce:99:3a:
f3:51:af:b5:26:e3:66:c8:aa:19:37:16:a6:59:2f:
2a:94:7e:94:72:45:39:21:a2:93:fd:cc:6f:87:f0:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:25:D6:43:9E:A0:21:C7:A5:5F:09:BF:CE:16:B0:52:E6:17:C3:0C
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vCXWQ56gIcelXwm_zhawUuYXwww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.174.0/24
62.72.176.0/24
176.57.50.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f7:73:10:ff:72:39:44:8b:c5:8a:96:bf:5f:95:bf:11:b7:
63:61:5e:83:03:05:5d:3e:f4:1f:f4:4e:08:89:b2:84:42:01:
f0:fc:dd:6c:83:84:88:05:c2:ff:a4:f3:1c:1c:8a:bd:bf:88:
4c:bc:17:dc:6b:e4:09:99:d3:d8:75:62:a5:27:c6:12:85:65:
2b:0b:d4:9c:2c:cb:99:87:33:1c:6b:05:51:1e:e9:12:51:b8:
39:49:df:2f:f0:60:e3:9f:7f:01:e2:f5:73:6d:b0:60:a0:92:
d5:07:f7:50:84:ab:ba:bb:9f:29:de:dc:51:d4:75:43:b3:da:
29:80:28:d4:d7:85:e1:4b:47:12:51:e1:8e:db:70:3f:8e:8f:
93:e1:c7:f7:f7:c4:1c:c6:42:8f:1d:af:11:81:36:c2:e0:2e:
82:72:20:b9:bf:85:aa:09:5b:4f:61:f6:21:75:c0:db:4a:7f:
61:35:ce:d8:5f:45:8b:8d:33:bc:5e:96:a9:42:31:fc:6a:ff:
8d:36:f0:12:b6:bf:5d:c0:2a:2b:75:04:1e:99:23:e7:5d:3f:
cd:52:f5:38:30:04:57:ab:33:cd:46:9b:39:7d:c7:63:cf:8e:
58:c4:14:7a:95:f1:3b:8c:ea:e5:64:c1:88:7e:3b:f6:0a:7c:
40:9b:41:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 18:42:31 2026 by rpki-client