Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/FhaAmTxNxvfg7uLF_qvQFZnI3eY.roa
File: FhaAmTxNxvfg7uLF_qvQFZnI3eY.roa (raw, json)
Hash identifier: EONECIGAG9QO/N1cfJgxGxGKqkc6LeItNLGhwdmxjqw=
Subject key identifier: 16:16:80:99:3C:4D:C6:F7:E0:EE:E2:C5:FE:AB:D0:15:99:C8:DD:E6
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01A18FB377967C807693D7433CC19F87869E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/FhaAmTxNxvfg7uLF_qvQFZnI3eY.roa
Signing time: Sat 31 Oct 2026 02:04:25 +0000
ROA not before: Sat 31 Oct 2026 02:04:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200708
IP address blocks: 185.166.239.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:b3:77:96:7c:80:76:93:d7:43:3c:c1:9f:87:86:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Oct 31 02:04:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=161680993c4dc6f7e0eee2c5feabd01599c8dde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:89:e9:ed:fe:14:a2:ad:5d:51:eb:42:7a:
68:47:e3:eb:d2:80:fc:11:29:b5:60:01:2d:b6:c2:
a0:bd:aa:0d:ba:2f:bd:66:d1:51:17:96:a3:77:d1:
b3:37:61:85:a4:83:6d:b4:1d:49:6d:2b:28:db:39:
d7:16:15:a9:3b:e6:f3:7e:f3:c2:f0:3b:59:0a:4a:
c4:46:f5:fc:0e:29:47:94:16:a5:52:86:8e:d8:48:
a8:a0:8a:9e:55:4d:b3:43:0a:f6:16:46:9d:35:3f:
6b:4e:e4:88:2a:28:c3:f1:d1:92:e0:7c:db:94:62:
62:d6:42:a5:4b:ec:bf:ca:61:29:14:d2:b7:19:6f:
53:a8:cd:95:78:87:0a:32:13:8e:bd:8c:85:5a:a6:
5b:d0:eb:f5:df:53:01:07:db:59:e6:af:ea:1e:42:
22:bf:2c:0a:39:b6:1e:fb:13:ec:ef:e1:11:49:a5:
54:9a:0f:86:5f:98:a2:4a:aa:5a:b5:15:9e:8a:e2:
ae:50:10:42:70:28:ee:2f:a6:cb:59:f3:2e:18:8d:
91:43:5a:19:29:3f:e5:5b:6b:ef:ae:16:6f:a9:08:
b1:9a:b3:ea:76:1d:25:76:5f:ca:e4:8a:14:71:b1:
91:27:f8:7c:d1:10:e0:d0:ed:f7:23:0a:e4:24:c1:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:16:80:99:3C:4D:C6:F7:E0:EE:E2:C5:FE:AB:D0:15:99:C8:DD:E6
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/FhaAmTxNxvfg7uLF_qvQFZnI3eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.239.0/24
Signature Algorithm: sha256WithRSAEncryption
51:69:18:90:66:11:23:56:a6:12:c6:c8:ea:47:0f:d8:1f:2a:
8c:cc:77:97:d5:99:8c:66:3f:f3:b4:7b:84:50:1b:66:b4:bc:
10:a9:b5:88:f8:af:35:91:7f:50:1d:40:a9:15:09:60:3f:2b:
41:8c:bd:9e:19:5a:a8:1a:a9:bf:94:8a:f0:21:5a:47:03:56:
ba:01:6b:72:b5:15:2a:3a:33:f4:9b:f2:d5:b0:15:17:35:1d:
7f:c6:3b:9e:0b:92:21:97:f7:0c:21:d4:c4:d6:53:5a:42:9f:
65:57:57:cc:74:db:e7:81:1d:8a:4a:21:0f:9e:e5:58:0d:32:
7a:ba:c1:6f:79:b5:07:8c:12:48:37:ec:5a:98:d1:90:13:35:
de:a6:35:00:18:89:98:f5:3c:9b:5a:11:bd:14:62:a8:44:2c:
04:0f:a7:cf:76:6b:7b:8b:c4:40:41:17:09:9c:fa:a6:2a:47:
d2:0b:83:40:34:a0:8f:4c:7f:4f:76:48:9f:5e:39:3b:44:54:
d7:53:33:24:80:f4:67:ad:12:5b:fb:45:5e:75:01:65:b0:b2:
e6:b5:21:a2:c9:d2:b0:4a:20:93:5c:d6:a9:3e:13:df:06:a1:
31:f8:a5:e2:06:bd:a9:e3:b1:89:8d:7e:b1:b7:3c:48:a9:04:
b0:3a:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:39:04 2026 by rpki-client