Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/w8KIitXDjj8NFkv3WKLLm6K3QUQ.roa
File: w8KIitXDjj8NFkv3WKLLm6K3QUQ.roa (raw, json)
Hash identifier: EIHMaqhf115zF07LoEIsrQG57ha/nUVgdagng1w6F7o=
Subject key identifier: C3:C2:88:8A:D5:C3:8E:3F:0D:16:4B:F7:58:A2:CB:9B:A2:B7:41:44
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A0ED93C66D5CDB09AC81211D154971109A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/w8KIitXDjj8NFkv3WKLLm6K3QUQ.roa
Signing time: Tue 29 Sep 2026 14:31:19 +0000
ROA not before: Tue 29 Sep 2026 14:31:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 16:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:93:c6:6d:5c:db:09:ac:81:21:1d:15:49:71:10:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 29 14:31:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3c2888ad5c38e3f0d164bf758a2cb9ba2b74144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:92:56:3e:b8:2e:fa:77:86:a6:b3:2f:f1:
c3:13:14:03:30:ec:81:0a:56:b4:95:4c:1e:4f:6b:
c6:dd:06:e4:cd:29:38:f7:13:53:40:ba:ca:3d:0d:
87:ef:39:9d:bd:45:10:16:06:df:da:ca:df:40:0f:
b2:71:9d:71:eb:5d:21:d4:16:82:a5:11:fa:25:b0:
36:36:e7:9a:9a:ed:b9:59:72:c6:54:62:9c:40:74:
ab:36:fb:be:16:d5:a8:a8:83:11:51:7d:c2:ec:d4:
1b:9d:c9:87:fa:82:b5:da:8a:9c:d4:85:db:e2:e8:
b2:4e:e8:4d:fc:69:77:0a:8c:0c:ce:29:ba:82:57:
42:f7:75:62:31:81:cf:99:13:38:ae:60:48:14:3a:
6a:7a:b9:c4:88:73:88:c9:6f:1b:e5:bc:12:d5:9b:
28:64:c5:5a:b2:e0:d0:66:21:43:95:82:1f:20:98:
9f:5f:a6:65:52:72:c3:f1:cc:03:42:a4:c1:2f:83:
eb:05:c0:55:74:86:dd:e3:ec:cd:1a:f7:1f:27:2a:
70:1c:04:8f:c9:85:94:79:78:c9:1f:3e:a1:81:8e:
95:e4:65:04:86:b1:46:18:f1:d1:77:0c:43:00:81:
ff:8f:ff:85:79:8d:9a:6d:c2:05:0b:c5:53:6f:58:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:88:8A:D5:C3:8E:3F:0D:16:4B:F7:58:A2:CB:9B:A2:B7:41:44
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/w8KIitXDjj8NFkv3WKLLm6K3QUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.174.0/24
176.57.54.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5c:d8:50:36:41:4d:01:df:ae:4c:91:e9:6e:d2:6e:e0:d7:
6b:9b:44:e1:13:a2:7d:9a:37:10:d3:d1:21:44:ab:95:30:65:
a2:76:5c:c5:a6:c5:33:c2:48:2e:05:3a:d5:0f:34:52:bb:a5:
d0:38:2e:f3:04:97:22:12:6f:b4:e8:df:47:64:59:9e:74:30:
18:56:6d:30:e8:e7:d4:b9:e6:24:14:1d:8e:f4:d2:c7:91:05:
b4:68:13:f5:f6:2e:4e:8d:e3:75:81:8e:07:95:bd:2e:f4:95:
73:c6:76:aa:08:0f:91:68:7d:94:ef:cc:d0:f9:e7:b9:03:b3:
9c:46:4e:12:49:96:e6:38:1e:8e:82:68:01:3e:22:b6:7e:71:
4c:e4:75:9f:9a:99:71:cb:d3:0a:f0:fd:05:64:e3:51:16:eb:
a4:29:8d:92:c9:29:75:c1:27:5b:60:9c:d7:cb:3e:42:3a:85:
3c:61:da:42:f0:b7:d1:0c:bb:b3:b4:84:74:7a:b4:1c:74:ca:
80:76:62:62:7e:c8:83:2d:06:75:9b:ee:93:24:5c:69:31:40:
33:18:2c:a8:c3:e9:3a:7f:a5:81:3d:1b:ad:ee:68:0c:ef:02:
de:be:5d:db:34:fd:52:d0:a5:f5:50:f2:8b:c2:55:fd:b7:64:
29:60:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:39:26 2026 by rpki-client