Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ySc4DnCxLI5JdvxrV9JDuZIj7eA.roa
File: ySc4DnCxLI5JdvxrV9JDuZIj7eA.roa (raw, json)
Hash identifier: XLHqAnDkuXHaPgmxAfCQCJFWfzPqs9OndrjVRU9ghIc=
Subject key identifier: C9:27:38:0E:70:B1:2C:8E:49:76:FC:6B:57:D2:43:B9:92:23:ED:E0
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A06128D3AAFAA6B38DF96FC9DA3615C704
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ySc4DnCxLI5JdvxrV9JDuZIj7eA.roa
Signing time: Wed 02 Sep 2026 08:07:40 +0000
ROA not before: Wed 02 Sep 2026 08:07:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219182
IP address blocks: 62.72.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:28:d3:aa:fa:a6:b3:8d:f9:6f:c9:da:36:15:c7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 2 08:07:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c927380e70b12c8e4976fc6b57d243b99223ede0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:da:e8:c5:d4:38:07:1a:ae:d9:02:ad:31:
98:46:69:e1:2f:c0:d0:41:4d:51:8a:05:dd:cc:20:
29:3d:ee:bc:6b:fe:fe:e8:fc:ac:85:77:0a:0a:98:
9e:7f:3c:1c:cd:c0:46:eb:68:71:87:92:ba:a6:e7:
4b:09:86:65:7a:3d:a0:47:90:21:d2:c4:62:b8:36:
90:1b:cc:9d:c8:b4:44:6e:e7:14:36:9f:1e:54:ba:
f4:c1:5c:e3:53:d4:85:9a:67:e4:1a:00:e9:61:58:
2e:2e:34:44:03:09:ec:cc:3e:95:f2:12:47:5c:90:
1d:d0:d5:fb:65:e4:3e:ea:1e:b8:cf:2f:d2:3c:74:
b1:dd:fa:c3:f9:b9:9a:e3:a9:6c:7e:b3:ab:29:5a:
c5:5f:23:98:5a:32:33:28:3d:82:27:96:ac:cd:28:
3e:7d:94:0f:21:7c:cd:7d:18:ad:e3:fc:b9:40:04:
41:a1:ba:9f:d5:24:c1:14:56:b3:36:01:55:1b:74:
b8:df:6f:d3:7d:e3:60:f2:c0:a8:29:d7:1a:98:f5:
f6:ef:44:72:c4:cd:b2:35:59:a4:d9:ec:b8:68:d0:
df:66:d0:dc:13:f2:da:0a:9c:b2:aa:f7:da:81:5d:
bf:1d:ff:ba:7b:e1:c5:a8:0c:16:4a:7b:69:d4:b1:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:27:38:0E:70:B1:2C:8E:49:76:FC:6B:57:D2:43:B9:92:23:ED:E0
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ySc4DnCxLI5JdvxrV9JDuZIj7eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/24
Signature Algorithm: sha256WithRSAEncryption
77:24:6a:eb:35:67:28:1e:d0:22:4b:6e:12:0b:30:5f:49:64:
17:77:93:76:e4:3a:b7:6f:a9:38:b4:2d:28:de:52:d2:8d:bb:
77:ac:e9:4d:d8:5d:35:5a:22:01:b2:6e:94:79:11:2f:0b:5b:
13:33:d0:f7:b3:05:ab:4a:93:92:f5:d0:d3:6e:eb:e6:ab:d5:
7f:73:d2:1f:27:dd:91:61:6b:c5:45:65:47:53:c3:83:82:6b:
a8:02:94:9e:1f:06:1e:4a:c7:a7:71:94:fb:b8:10:44:78:42:
68:27:2e:1f:2f:e9:f5:f1:cb:f4:67:4a:63:28:72:c9:80:a8:
20:cb:c2:b0:1f:ee:64:33:2d:a3:a3:d9:ee:07:ce:0d:45:f2:
d3:75:6d:00:9f:a5:48:9c:ca:83:24:7b:73:88:7d:ae:1a:87:
25:74:15:68:6f:c7:35:c4:ed:69:a4:be:fc:15:ea:bf:93:e4:
fe:ee:9d:6e:cd:7e:b5:39:d6:c3:89:4c:cc:58:7e:1e:7a:6f:
93:2e:0c:14:42:9c:4e:fb:06:e5:66:a7:c4:ba:d4:e9:58:4b:
fe:24:8b:53:88:46:6d:8e:ac:0f:97:e2:75:72:85:a5:2a:14:
27:10:46:35:1e:6d:7c:e9:82:02:62:79:fc:13:f9:18:db:bf:
ce:1d:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 11:03:56 2026 by rpki-client