Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/jL2Cco2FhTEdkX2dyIW4ommNU-g.roa
File: jL2Cco2FhTEdkX2dyIW4ommNU-g.roa (raw, json)
Hash identifier: Z0uR325Ovg4ut7Z9R8ItzLbMbDWE0aFp1hccy/9+bTg=
Subject key identifier: 8C:BD:82:72:8D:85:85:31:1D:91:7D:9D:C8:85:B8:A2:69:8D:53:E8
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 01A181E5BE730F9601602D21ED6A5DB61AF7
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/jL2Cco2FhTEdkX2dyIW4ommNU-g.roa
Signing time: Wed 28 Oct 2026 09:44:39 +0000
ROA not before: Wed 28 Oct 2026 09:44:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 62.112.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:e5:be:73:0f:96:01:60:2d:21:ed:6a:5d:b6:1a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Oct 28 09:44:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cbd82728d8585311d917d9dc885b8a2698d53e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:b3:b3:45:7a:e7:fc:94:fc:ec:71:9f:60:
52:6c:8e:7a:57:f0:32:3a:ac:33:8e:6b:08:c8:aa:
0f:8f:2a:18:02:dd:40:40:74:6e:a0:74:17:80:b6:
2f:e5:d2:91:08:01:de:a9:3f:a2:eb:47:7e:b3:7c:
9d:75:ed:66:27:64:cf:38:e9:a0:dc:16:2c:56:b9:
4a:ed:0e:58:b1:b6:16:3e:a9:64:58:1e:e7:f7:41:
8c:5c:a6:e9:51:65:e2:20:1c:5d:18:c4:05:ff:74:
68:ea:d6:30:48:cf:8a:81:7b:9a:66:6d:38:dc:d6:
29:0d:74:6d:41:71:09:2f:42:b6:48:9a:50:34:f3:
93:af:80:ae:0d:f7:f8:e8:ab:d0:85:d4:04:94:f5:
a6:d3:09:9c:e3:bd:4e:f4:1f:09:f4:0d:73:aa:b0:
82:d2:08:6e:b2:0c:25:ad:2c:71:b9:3b:9e:5b:38:
cf:1c:73:fb:ea:85:55:15:23:9c:40:1c:5d:98:de:
70:38:28:1a:28:13:b5:c4:d9:dc:ee:63:11:02:f1:
f5:38:73:e5:bb:71:d8:04:4a:8a:27:cc:f7:d0:b9:
93:69:a7:7b:3c:5d:ff:f4:25:3a:a0:77:41:ee:70:
64:a5:9e:dd:b1:40:d2:b3:b5:c1:70:19:26:9d:84:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BD:82:72:8D:85:85:31:1D:91:7D:9D:C8:85:B8:A2:69:8D:53:E8
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/jL2Cco2FhTEdkX2dyIW4ommNU-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.207.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:63:e4:04:27:80:fe:48:2d:60:12:57:47:d4:21:ab:75:0c:
86:24:30:68:21:65:91:4f:46:2f:0b:b5:3c:0b:34:bb:fb:e4:
1f:d8:b9:fd:3e:cb:b5:c3:69:9e:85:52:5c:08:a7:54:58:e8:
fa:cc:ca:97:44:04:ec:32:ff:96:cf:c1:df:99:ca:50:4f:a0:
44:3e:13:26:e1:f1:5d:cd:d3:fc:f8:11:41:35:fd:ba:09:a4:
2d:53:4a:7d:67:6a:59:92:99:88:98:2a:2f:c7:90:6b:e9:12:
26:87:e9:46:0a:fe:6f:4c:ff:ca:fd:b2:10:87:e9:ab:01:f6:
b4:02:49:78:36:29:7e:7a:57:f7:33:32:7f:26:9f:ba:b4:df:
80:83:64:6c:d4:55:69:c6:36:4d:1a:eb:7c:06:91:61:b3:1b:
dc:4b:01:49:79:b6:6a:c4:a6:ef:07:38:ef:88:b9:05:fe:61:
40:b7:ed:08:e2:e5:6e:ee:65:17:d2:cf:b9:dc:58:36:f8:86:
7b:28:26:a4:5b:77:0a:e4:f5:f2:fe:03:e0:11:e7:c3:ab:45:
bc:33:51:5f:7c:d2:65:ea:75:f6:43:ef:c1:7e:3a:c4:3d:19:
2a:a3:ce:b1:a8:97:33:82:81:ee:46:4d:7a:09:c0:ce:db:a6:
9f:23:07:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:40:41 2026 by rpki-client