Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FuK8KAPprwot2chqgyzv0UDkH5c.roa
File: FuK8KAPprwot2chqgyzv0UDkH5c.roa (raw, json)
Hash identifier: Q3wedNppzJrb/WzpciPq5sSLo1vXCvXixDNoWgraflU=
Subject key identifier: 16:E2:BC:28:03:E9:AF:0A:2D:D9:C8:6A:83:2C:EF:D1:40:E4:1F:97
Certificate issuer: /CN=f6426577ffc0e9ca960e3a2afbcd077687baeed0
Certificate serial: 019F23688D5239D78429DF68D027F86F7867
Authority key identifier: F6:42:65:77:FF:C0:E9:CA:96:0E:3A:2A:FB:CD:07:76:87:BA:EE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kJld__A6cqWDjoq-80Hdoe67tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FuK8KAPprwot2chqgyzv0UDkH5c.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207097
IP address blocks: 185.166.24.0/22 maxlen: 24
185.166.24.0/24 maxlen: 24
185.166.25.0/24 maxlen: 24
185.166.26.0/24 maxlen: 24
185.166.27.0/24 maxlen: 24
2a0a:6a00::/32 maxlen: 32
2a0a:6a01::/32 maxlen: 32
2a0a:6a02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/9kJld__A6cqWDjoq-80Hdoe67tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/9kJld__A6cqWDjoq-80Hdoe67tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kJld__A6cqWDjoq-80Hdoe67tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8d:52:39:d7:84:29:df:68:d0:27:f8:6f:78:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6426577ffc0e9ca960e3a2afbcd077687baeed0
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16e2bc2803e9af0a2dd9c86a832cefd140e41f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:c8:f3:fc:bb:34:b1:ca:a4:be:b1:f6:23:
7f:c5:e9:36:fb:9d:e8:fb:af:9b:ba:62:a5:ff:66:
5d:ae:d5:6a:ad:68:89:84:94:51:fa:8d:19:b0:b7:
84:62:74:d6:ba:ef:ce:b1:42:cb:b5:fe:96:3b:3a:
16:f9:46:f8:27:27:7f:7b:30:3c:e3:e9:d5:fb:cd:
b9:0b:77:07:1b:d3:1c:90:92:1b:2b:1b:49:b8:ae:
3a:41:9d:b1:88:18:28:74:bf:a3:0c:ad:1e:95:6b:
2a:21:95:d4:19:aa:d4:4a:3b:02:27:91:0e:48:02:
28:5a:08:c2:f6:e7:34:03:76:ff:8f:e4:c4:d8:ba:
e1:75:53:10:bd:e8:db:2f:01:59:1f:cc:88:fe:c8:
07:bd:1d:f3:5c:10:06:da:34:e6:a8:9c:7f:54:4e:
f5:89:90:75:43:2f:fd:24:ac:76:bd:31:6b:1d:10:
37:6b:8e:4d:c5:7c:4c:12:df:fe:ee:30:c2:59:d6:
af:17:e7:66:17:8a:11:04:01:ca:1c:d2:85:a1:cc:
a3:9c:10:c7:c9:48:7d:1e:92:dd:11:44:ce:92:51:
70:07:63:95:2c:d9:08:6b:79:7a:b2:f2:6c:1f:bd:
00:f4:08:5f:35:13:fe:87:89:65:d5:78:35:87:04:
38:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E2:BC:28:03:E9:AF:0A:2D:D9:C8:6A:83:2C:EF:D1:40:E4:1F:97
X509v3 Authority Key Identifier:
keyid:F6:42:65:77:FF:C0:E9:CA:96:0E:3A:2A:FB:CD:07:76:87:BA:EE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kJld__A6cqWDjoq-80Hdoe67tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FuK8KAPprwot2chqgyzv0UDkH5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/9kJld__A6cqWDjoq-80Hdoe67tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.24.0/22
IPv6:
2a0a:6a00::-2a0a:6a02:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:6b:b6:5d:02:89:a2:53:86:dc:04:d2:1f:05:1c:a1:6c:48:
d9:48:14:e8:5f:d8:a6:c0:48:ae:2a:4e:22:74:53:d1:f2:e2:
5d:bb:2e:92:77:1e:ff:11:79:17:70:f2:e8:e9:9a:fe:ff:0e:
61:6e:c2:20:d6:16:6f:92:99:6d:30:79:e4:77:b0:15:ad:c2:
42:29:77:45:de:67:84:95:ec:48:d2:2b:9d:80:b9:59:1f:1a:
c5:2a:73:6e:e7:97:3b:c9:2a:d4:77:99:11:8f:cd:81:f3:51:
a0:c5:48:95:0f:0e:87:f5:62:ee:20:1e:42:51:25:a0:f4:6d:
1a:3c:ab:93:06:60:d5:3b:40:59:84:c2:72:3c:55:de:9d:63:
e3:85:3a:86:ce:23:9b:af:76:99:51:a4:28:9a:37:dd:de:5e:
83:99:b6:7f:b7:be:2d:1d:51:5f:c6:4b:8d:d2:8a:07:ca:7a:
2d:70:9b:93:8c:72:56:9c:f0:74:68:88:38:f0:45:6e:c2:a8:
bb:1e:73:8b:c1:ab:77:78:02:6a:c1:a7:11:09:10:d6:82:87:
93:5b:fd:e0:17:12:9e:14:15:f2:47:2d:60:65:1f:90:d8:fd:
a0:84:bc:40:87:42:a7:e2:d2:bf:b5:30:c9:b4:94:f9:bb:20:
56:36:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:27 2026 by rpki-client