Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/m9zjHR2IwuP6M_EqtRtBLVSg0D4.roa
File: m9zjHR2IwuP6M_EqtRtBLVSg0D4.roa (raw, json)
Hash identifier: yMwu/UQ3rPUyOJCc3eCtP2GKyWlV3Y6SloIA/fcgLfc=
Subject key identifier: 9B:DC:E3:1D:1D:88:C2:E3:FA:33:F1:2A:B5:1B:41:2D:54:A0:D0:3E
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019DA4A97204F0CFEB44811453F505895CA9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/m9zjHR2IwuP6M_EqtRtBLVSg0D4.roa
Signing time: Sun 19 Apr 2026 07:34:21 +0000
ROA not before: Sun 19 Apr 2026 07:34:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398465
IP address blocks: 62.72.172.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:a9:72:04:f0:cf:eb:44:81:14:53:f5:05:89:5c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 19 07:34:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bdce31d1d88c2e3fa33f12ab51b412d54a0d03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:3a:9e:86:92:17:ae:5c:00:7c:8e:48:93:
4e:1b:9f:8d:29:61:de:88:e2:87:73:19:38:9a:b3:
98:2a:ab:ae:d1:9b:6c:72:bf:18:35:af:12:23:5d:
59:14:01:13:5f:69:c0:1c:80:8d:e4:c8:7f:13:26:
52:64:a3:38:ce:b8:00:4b:5e:ea:ef:9d:d6:55:e2:
13:40:f2:3d:3d:c8:d8:5d:6a:0d:a6:c3:df:c9:7f:
24:a9:c2:a9:25:5c:f5:c6:42:11:a0:46:1e:f1:76:
8f:f6:72:c1:31:f8:de:9d:78:e6:c5:cc:11:65:ab:
45:f2:31:6d:00:e2:58:d6:b5:c2:d8:82:72:41:2d:
51:a9:80:5d:f3:fe:7f:87:b3:37:68:23:66:b6:28:
5c:05:38:09:8a:11:d9:ed:09:a6:3b:bd:c9:9b:67:
48:4f:e2:f5:50:68:e1:2a:a9:37:03:b4:92:02:81:
90:02:6f:1c:02:88:fd:9c:f8:6a:0d:0c:52:21:a7:
d1:68:b9:ff:78:c1:26:56:5f:21:90:fa:25:75:9a:
16:82:95:42:c3:61:56:dc:84:a4:b9:a3:3e:8f:a5:
69:35:b8:94:12:15:0f:8b:19:da:94:5b:d6:bd:4d:
ef:5d:94:4f:fb:5d:30:ce:3f:5a:4f:a7:87:1b:94:
34:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DC:E3:1D:1D:88:C2:E3:FA:33:F1:2A:B5:1B:41:2D:54:A0:D0:3E
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/m9zjHR2IwuP6M_EqtRtBLVSg0D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.172.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:43:19:cf:84:13:be:66:50:ce:31:b3:8f:e6:d9:3e:50:51:
20:0e:d5:4f:bb:98:c4:5d:56:3d:40:0f:09:37:f0:bf:2e:ac:
18:23:5d:c5:9b:2b:32:7c:12:7e:42:c2:7c:1c:cc:f1:47:d2:
78:e0:7f:ff:81:80:85:cd:ce:03:d4:c1:39:85:12:5c:b5:5b:
32:2a:53:30:f0:17:34:a3:fa:3c:47:53:8f:9c:16:fd:aa:6b:
e4:8c:e5:7d:ed:22:ac:9a:75:24:53:ba:23:9c:fc:09:6a:2f:
04:33:3a:16:a3:b4:6f:fc:a1:7a:0e:94:fc:56:b3:d6:22:61:
be:d6:1e:90:a2:8d:30:d5:e8:26:80:81:37:4a:d1:3b:17:b0:
88:ef:38:81:eb:af:a8:ff:80:29:94:f8:9e:41:b6:63:81:05:
b1:67:18:2c:01:b8:d0:1e:6a:ae:b7:21:19:7c:d5:eb:ff:21:
e1:56:23:11:e4:e5:1c:70:8e:15:39:db:fb:7a:6f:8c:85:b9:
5b:91:17:85:a4:6d:a6:bd:37:35:24:2a:91:a7:00:93:3a:e3:
d7:80:7e:41:13:d7:da:51:21:0d:b4:22:6c:e8:de:2f:6b:f1:
e3:7a:f8:3c:68:74:66:84:da:33:ed:ad:72:4f:88:e3:35:5f:
49:7b:71:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:17 2026 by rpki-client