Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/RQ5ZjaJSOfaaITGoN1KrfVPadlE.roa
File: RQ5ZjaJSOfaaITGoN1KrfVPadlE.roa (raw, json)
Hash identifier: 93bXY1gV04a9X6VmySGfU84Z5bHvnZpT3inPO5OwKXI=
Subject key identifier: 45:0E:59:8D:A2:52:39:F6:9A:21:31:A8:37:52:AB:7D:53:DA:76:51
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019C93BEE4E5A68A0DFB290F7368AAD2A712
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/RQ5ZjaJSOfaaITGoN1KrfVPadlE.roa
Signing time: Wed 25 Feb 2026 07:41:26 +0000
ROA not before: Wed 25 Feb 2026 07:41:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.4.0/24 maxlen: 24
81.21.7.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:be:e4:e5:a6:8a:0d:fb:29:0f:73:68:aa:d2:a7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 25 07:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=450e598da25239f69a2131a83752ab7d53da7651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b1:4e:42:50:c2:ab:c9:05:77:58:71:5a:c1:
47:79:8c:84:9a:a2:81:e3:dd:8a:39:be:20:d7:33:
aa:a7:d3:0a:86:72:f2:1d:5c:bb:b9:bc:c1:e5:b1:
3c:20:22:30:62:81:3d:c8:5b:a2:d2:6c:8b:71:7c:
9c:6b:e2:ac:f2:c3:fc:80:aa:95:8c:21:bc:77:de:
03:16:ac:c7:d5:ca:02:50:b1:ea:3f:e1:4f:37:e5:
18:07:42:29:aa:e6:75:64:86:c9:c3:c0:7e:57:6d:
9a:85:31:23:db:e7:5b:5c:87:4c:15:ec:97:cd:ae:
c7:a1:7b:8c:5d:49:18:bc:b6:bc:e0:a0:e1:ba:0d:
18:94:1a:7f:d6:a8:21:79:9a:00:e5:c3:da:da:2e:
a8:29:11:e8:af:fa:74:6b:46:f0:68:8a:69:be:4e:
b1:30:cc:38:b6:18:27:06:87:74:d3:e2:ac:d3:c1:
89:96:cb:28:fc:11:61:8b:66:a0:1e:49:77:3c:4b:
cf:a9:d9:ff:1b:04:ca:ef:9a:f0:03:ef:16:01:41:
4d:43:88:b6:e6:ca:fa:91:70:cd:49:c6:53:02:8e:
d3:9b:74:6c:64:23:fe:59:32:78:8a:7e:c9:da:64:
be:26:99:44:cf:ae:0e:5c:bc:fa:c4:83:2f:85:4c:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0E:59:8D:A2:52:39:F6:9A:21:31:A8:37:52:AB:7D:53:DA:76:51
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/RQ5ZjaJSOfaaITGoN1KrfVPadlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.174.0/24
62.72.191.0/24
81.21.1.0-81.21.7.255
176.57.56.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:61:81:a4:10:80:52:96:5e:9b:7c:b2:d7:2b:69:ae:3d:48:
0a:89:de:00:08:4f:9e:1a:12:21:1f:fb:33:9e:9f:2d:7e:48:
56:b1:ac:75:8d:5f:0f:81:ff:21:c7:34:e9:a3:04:4f:7f:e1:
d4:9b:c5:b8:f6:92:57:17:ba:a3:ce:41:da:a7:8d:31:dd:93:
94:b9:be:dc:e2:34:22:08:29:e1:65:91:18:1b:6e:d8:53:20:
45:eb:36:39:81:0e:96:79:01:55:35:06:cd:99:9c:85:d2:b3:
5b:e4:3b:c6:27:72:5a:ef:d3:19:e2:d7:0f:ab:f2:b1:d9:5e:
e0:47:b3:22:5a:4e:07:93:5a:91:92:3c:67:52:0b:d8:ee:db:
e4:6c:55:67:73:fb:3c:6b:ec:07:0d:2b:ce:db:2f:96:18:1d:
0d:6c:3f:16:40:c6:f1:e2:eb:ff:4d:e8:a4:8d:85:0c:8d:f6:
93:7c:2f:9d:19:66:c4:6a:c1:15:b3:73:42:2f:ee:f2:1b:7e:
dc:61:dd:d0:0a:d5:5c:78:d3:6f:be:7d:2f:57:1d:54:05:4c:
71:43:db:7a:e6:c9:6d:65:b0:d9:9b:7a:ee:c5:93:9f:da:72:
4b:f7:57:93:93:e8:b1:94:74:5f:bd:73:e2:8b:3b:e2:35:7e:
ff:29:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:08:53 2026 by rpki-client