Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/y7HQLvljodQI2Sl8h_tCcmTtvBg.roa
File: y7HQLvljodQI2Sl8h_tCcmTtvBg.roa (raw, json)
Hash identifier: bDxAIGckUWTZfUyASUrhqQHqut6RWA1/X5ognST40Jc=
Subject key identifier: CB:B1:D0:2E:F9:63:A1:D4:08:D9:29:7C:87:FB:42:72:64:ED:BC:18
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019FE0063600CBEA3D53201CC4443D9CB4C0
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/y7HQLvljodQI2Sl8h_tCcmTtvBg.roa
Signing time: Sat 08 Aug 2026 06:18:51 +0000
ROA not before: Sat 08 Aug 2026 06:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:06:36:00:cb:ea:3d:53:20:1c:c4:44:3d:9c:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 8 06:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbb1d02ef963a1d408d9297c87fb427264edbc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:a1:01:77:eb:5b:8b:8d:6b:1c:bb:dc:f8:
29:6d:b3:c2:b3:81:b9:58:39:42:a8:b2:b5:8d:9b:
84:f5:91:99:6b:e8:44:84:03:d5:a4:f3:d2:c1:af:
c6:06:09:57:fd:42:66:7f:26:a1:21:06:c8:58:00:
06:71:90:14:bc:cf:c1:ca:0f:d9:3d:b3:cc:bc:92:
68:91:2f:29:94:3a:f1:24:22:40:11:a4:4f:93:4b:
13:73:b4:e3:72:e6:81:fb:03:6e:08:50:f9:e8:5b:
09:a8:9d:bf:d9:0b:80:85:e2:48:b7:6d:88:a9:37:
7c:20:71:06:60:b0:d3:56:9f:1f:c9:a2:81:ca:f2:
ad:98:b3:ee:f9:1c:25:17:2b:ca:43:fe:7f:4e:82:
e8:70:c9:be:64:f5:01:23:b5:4c:49:02:6d:5c:d6:
bf:24:17:c4:bc:d9:e7:77:3f:97:2d:9a:f1:07:96:
f8:d8:27:8e:df:b9:dd:bd:87:f5:94:c3:e4:23:79:
d8:66:f3:02:80:0e:bb:cd:e6:f2:55:44:c4:28:c4:
c8:8f:e5:88:a1:c2:0b:a2:18:25:5b:fa:b5:a5:23:
7c:88:92:94:d7:31:c2:20:92:ec:a8:57:aa:9d:ef:
b1:37:4a:70:90:15:7f:bc:83:21:91:a9:19:78:22:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B1:D0:2E:F9:63:A1:D4:08:D9:29:7C:87:FB:42:72:64:ED:BC:18
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/y7HQLvljodQI2Sl8h_tCcmTtvBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.174.0/24
62.72.176.0/24
62.72.180.0/24
176.57.54.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a9:83:7e:ee:e5:d7:53:52:6e:e9:88:2f:5f:30:9e:92:1f:
59:19:7d:63:60:67:3a:8f:33:22:0f:68:fc:74:20:fa:09:45:
33:65:f9:64:72:d2:1e:02:54:48:f1:fc:16:2e:b1:ac:28:d3:
d4:fc:d0:40:b1:de:63:05:0e:d8:28:ab:52:d6:e8:ed:b5:90:
a7:94:e6:27:a7:12:4c:ba:1a:5e:e1:a2:c2:62:5a:59:9f:aa:
44:54:6a:3e:18:dd:0e:3b:d5:7f:5f:ce:87:e4:e9:e5:8c:c5:
62:7d:d3:2f:dc:e0:96:2c:3c:15:ae:8d:5c:d8:48:d5:d5:f4:
28:51:86:1e:70:21:8f:57:9a:a4:b3:56:00:05:c9:95:1b:87:
93:9d:19:30:c2:33:b7:61:dd:c1:40:4f:b0:e4:d1:4d:d5:b4:
70:9a:7a:b4:5f:02:b7:89:f3:bd:7f:4b:5c:f3:da:b3:d1:75:
2a:03:29:64:ef:8f:08:d7:ea:63:d4:a5:2e:f6:97:7e:54:05:
93:f1:35:69:3d:d7:ab:ad:4a:57:24:a5:f7:21:32:8c:55:ee:
7e:0f:6b:ab:27:b7:b7:a0:02:c3:02:d1:8a:11:df:d8:bf:5e:
f5:35:9e:fd:db:40:12:12:c1:33:b4:d2:de:a7:5e:e7:94:3f:
bd:3d:7b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 09:46:55 2026 by rpki-client