Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/HA6dWYIAIrLhHc3ZlMS0mNXwzj4.roa
File: HA6dWYIAIrLhHc3ZlMS0mNXwzj4.roa (raw, json)
Hash identifier: XvISgt0pWE+2sLOF5BQxSPwWN9GZTCyY6++CM98GOTc=
Subject key identifier: 1C:0E:9D:59:82:00:22:B2:E1:1D:CD:D9:94:C4:B4:98:D5:F0:CE:3E
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019EFF39C51DA5F73A88AE427F3041CB2952
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/HA6dWYIAIrLhHc3ZlMS0mNXwzj4.roa
Signing time: Thu 25 Jun 2026 14:40:36 +0000
ROA not before: Thu 25 Jun 2026 14:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209183
IP address blocks: 72.56.42.0/23 maxlen: 24
72.56.44.0/23 maxlen: 24
72.56.46.0/24 maxlen: 24
72.56.47.0/24 maxlen: 24
72.56.48.0/24 maxlen: 24
72.56.50.0/24 maxlen: 24
72.56.51.0/24 maxlen: 24
72.56.56.0/24 maxlen: 24
72.56.57.0/24 maxlen: 24
72.56.59.0/24 maxlen: 24
72.56.60.0/24 maxlen: 24
72.56.61.0/24 maxlen: 24
72.56.216.0/24 maxlen: 24
72.56.217.0/24 maxlen: 24
72.56.222.0/24 maxlen: 24
72.56.223.0/24 maxlen: 24
72.56.227.0/24 maxlen: 24
72.56.228.0/24 maxlen: 24
72.56.230.0/24 maxlen: 24
72.56.231.0/24 maxlen: 24
72.56.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:39:c5:1d:a5:f7:3a:88:ae:42:7f:30:41:cb:29:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Jun 25 14:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c0e9d59820022b2e11dcdd994c4b498d5f0ce3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:58:9b:03:bd:34:d7:11:f4:10:06:d4:53:
9d:ee:9b:24:1f:66:31:2c:f7:83:fe:66:9a:b6:af:
d3:0f:fa:49:37:82:88:e2:33:88:2b:ae:07:87:4b:
35:e9:ff:41:59:89:77:87:8f:e1:1b:e7:fb:c9:2f:
78:0d:88:8d:e7:1b:1a:47:f6:83:09:ad:71:91:e4:
5b:f2:aa:e9:84:ab:6e:a3:6e:40:a7:75:4c:af:f9:
19:89:da:31:5d:21:d4:eb:98:ad:f8:87:e1:9b:f0:
72:23:63:8f:0f:f2:f9:45:fa:7f:ce:64:0d:88:a3:
62:90:b1:22:b2:f9:d7:6e:6f:3b:31:13:56:1c:e8:
a6:ae:31:f3:e5:60:53:91:da:95:c5:06:fe:81:82:
8a:c4:2b:cb:c3:ee:81:17:2f:74:a7:e5:39:c7:fc:
19:4d:16:9d:bb:51:1d:bb:15:c1:0b:6c:e5:12:a3:
df:38:b4:2d:64:9b:53:ea:35:46:6f:58:7b:57:6f:
8b:71:ce:b0:ef:26:1e:74:80:47:b5:9b:80:2a:81:
b3:f8:d8:d9:00:ff:fd:3c:11:02:5c:38:ae:2f:84:
8b:9a:54:f3:6f:fa:4f:d5:1d:c2:ad:c9:1a:d0:14:
89:24:83:63:ac:dc:40:66:0d:4f:60:31:9a:ff:79:
3a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0E:9D:59:82:00:22:B2:E1:1D:CD:D9:94:C4:B4:98:D5:F0:CE:3E
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/HA6dWYIAIrLhHc3ZlMS0mNXwzj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.42.0-72.56.48.255
72.56.50.0/23
72.56.56.0/23
72.56.59.0-72.56.61.255
72.56.216.0/23
72.56.222.0/23
72.56.227.0-72.56.228.255
72.56.230.0/23
72.56.254.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:54:6b:75:e7:1a:71:8c:e8:19:75:6c:59:f4:31:31:01:7c:
3c:da:52:24:02:dd:be:d9:d5:2a:61:e6:9f:af:a3:ee:af:d9:
30:ba:23:11:b3:88:39:61:ba:88:f6:e1:9b:5e:57:fc:cf:c9:
2e:e5:a4:c9:0f:14:42:d6:93:81:ee:5f:2b:e3:58:58:7e:89:
49:b9:8b:30:89:5f:a5:76:a5:58:a6:43:ba:3b:26:0d:45:a1:
34:9c:d4:eb:1a:36:aa:61:3e:f5:c0:ed:7a:83:cb:07:64:72:
d5:2b:3e:62:26:61:a9:ef:66:2c:ca:91:5f:da:7d:59:a2:09:
18:9a:33:61:41:8b:f5:45:d3:55:55:3d:66:7d:3b:b5:cc:5f:
15:67:5e:ef:c0:4f:01:0d:71:1a:d0:c9:dd:e1:c8:74:0d:90:
dc:e2:f7:4f:dc:ad:a3:de:e5:44:91:ac:c5:64:cd:85:4e:43:
a5:be:2b:22:72:80:74:94:d7:4a:48:57:2e:ff:b5:8a:a6:1e:
fe:9e:8f:b4:19:cd:80:2d:e0:26:71:e9:04:fb:69:c7:56:67:
53:f1:c6:60:67:f3:48:b6:29:fd:29:70:70:a9:41:03:e2:70:
f9:79:d6:1a:ce:57:ed:43:9e:62:bd:bb:89:98:71:ae:8b:28:
ae:2b:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 01:58:13 2026 by rpki-client