Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/AWKG8CoI6MFAH08JzijufeAQBKY.roa
File: AWKG8CoI6MFAH08JzijufeAQBKY.roa (raw, json)
Hash identifier: 4Xvarm4TKax9w2S4fESgtztWG0bhqIGW6CoUc46Qh6Q=
Subject key identifier: 01:62:86:F0:2A:08:E8:C1:40:1F:4F:09:CE:28:EE:7D:E0:10:04:A6
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019C2793E9209694654AAB7480D83F352BAA
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/AWKG8CoI6MFAH08JzijufeAQBKY.roa
Signing time: Wed 04 Feb 2026 07:35:30 +0000
ROA not before: Wed 04 Feb 2026 07:35:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 195.2.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:27:93:e9:20:96:94:65:4a:ab:74:80:d8:3f:35:2b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Feb 4 07:35:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=016286f02a08e8c1401f4f09ce28ee7de01004a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:31:42:1c:66:f4:81:c0:3f:82:cc:ce:37:
64:22:97:2b:18:39:09:95:4e:ba:94:8e:dd:9c:ae:
2f:e2:00:fa:58:c1:a0:9d:d6:ad:32:0a:92:ae:cd:
9b:3a:a0:7c:2d:1e:46:51:5d:3b:2d:e4:f8:c5:e0:
97:bc:36:cd:bb:04:0c:4d:84:92:c6:0e:2a:5d:f8:
ea:fb:d0:69:6b:f2:19:eb:f7:d0:c5:6e:45:c2:57:
d7:a7:32:36:49:7d:1d:00:b9:6c:f2:22:f2:42:27:
11:95:4f:98:ba:2a:a9:d0:5a:a9:31:87:e0:15:64:
48:40:d2:84:ff:90:a4:3d:43:ce:88:74:cf:a0:af:
b1:dd:c0:64:d7:c3:3a:8a:5a:1a:e8:ae:41:61:8f:
a6:8c:6f:de:a3:83:87:4c:9b:bf:f7:4c:e3:d7:13:
1f:c7:4b:9d:5f:90:11:2e:f8:18:a8:11:5c:13:8d:
b2:34:42:47:82:fa:eb:49:32:21:bc:00:fd:1a:1e:
16:17:96:ff:aa:62:bf:8f:bc:f2:6b:01:10:73:70:
bd:47:39:e9:90:ce:d0:db:fb:fe:bc:ef:93:52:66:
64:a2:ab:b3:06:be:af:1f:80:91:fc:52:70:b3:1d:
ad:92:55:f2:45:6b:bf:8d:01:b1:ea:2d:fb:19:3d:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:62:86:F0:2A:08:E8:C1:40:1F:4F:09:CE:28:EE:7D:E0:10:04:A6
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/AWKG8CoI6MFAH08JzijufeAQBKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.248.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4f:c6:6a:3c:49:7e:7a:b0:c4:a2:22:80:93:40:f6:2c:53:
a6:54:85:a8:b9:d5:2f:75:09:b0:ca:26:98:ce:84:58:33:86:
73:aa:51:d7:08:de:d0:17:67:0d:8c:25:8d:95:a9:9a:69:4d:
01:42:4a:5a:49:1e:a5:56:09:3c:6a:01:b9:8e:90:42:e9:a9:
fe:cc:44:bd:21:49:d1:a8:88:15:ee:b2:a4:6b:c7:ee:0a:2d:
20:ce:2f:81:88:6e:11:93:a1:9a:d1:14:de:f1:b1:29:19:06:
5c:ce:98:02:8d:28:35:f4:2e:58:10:2c:46:e1:52:40:7d:c2:
32:e0:fa:1d:69:b4:c4:92:1e:8d:aa:78:fd:9e:45:32:86:30:
55:e9:c3:0d:8e:a3:72:41:b7:e1:de:b6:0f:94:06:fe:18:48:
a0:6c:ab:33:a2:14:f4:61:7a:00:82:0f:17:73:4e:a5:dc:e3:
02:4e:c7:12:fa:fc:9a:ac:48:a0:0a:2b:36:69:03:ba:9c:f9:
ba:72:bd:cf:76:5c:55:5c:f0:a9:d9:22:ed:bd:b9:95:d8:1a:
06:85:a0:80:00:f8:58:16:a3:1b:02:d8:22:1c:49:dc:fd:a5:
e6:59:ef:59:34:35:83:43:f3:a2:03:ff:c6:de:33:6d:b7:c5:
30:68:eb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 21:29:52 2026 by rpki-client