Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/F18hS-AxZ30cjD1UqNy6exhRjHA.roa
File: F18hS-AxZ30cjD1UqNy6exhRjHA.roa (raw, json)
Hash identifier: FOiYDMEDwKJ4QI7pMVza9WaGBzrroPhtrcOFSWifdVk=
Subject key identifier: 17:5F:21:4B:E0:31:67:7D:1C:8C:3D:54:A8:DC:BA:7B:18:51:8C:70
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019F98EC0C68B200E8FC81E7B252524745CE
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/F18hS-AxZ30cjD1UqNy6exhRjHA.roa
Signing time: Sat 25 Jul 2026 10:57:14 +0000
ROA not before: Sat 25 Jul 2026 10:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219153
IP address blocks: 212.87.160.0/23 maxlen: 24
212.87.162.0/23 maxlen: 24
212.87.164.0/23 maxlen: 24
212.87.166.0/23 maxlen: 24
212.87.176.0/23 maxlen: 24
212.87.180.0/23 maxlen: 24
212.87.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:ec:0c:68:b2:00:e8:fc:81:e7:b2:52:52:47:45:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 25 10:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=175f214be031677d1c8c3d54a8dcba7b18518c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b1:8b:3a:12:28:28:8e:a3:b5:d4:c7:20:d3:
ba:d3:04:42:fa:03:a5:dc:16:19:15:c9:22:56:02:
1d:75:bf:61:31:a6:07:10:86:d1:9c:4b:99:9f:0b:
5f:c9:00:15:93:2b:fd:51:bd:d0:67:06:ea:5e:cc:
b1:b0:99:ff:a2:61:55:7c:93:62:8b:56:22:3b:84:
3f:d6:93:0b:81:cb:11:45:d8:db:d1:29:68:e6:86:
d1:c4:4c:68:05:6a:0b:98:7b:07:14:93:8d:27:3c:
82:8f:c8:4e:fa:33:ff:9b:e1:5c:a2:fd:0a:fd:03:
fd:ae:8a:3c:78:8e:61:e2:e5:f1:75:ab:24:49:c9:
4b:ce:ad:cd:b9:a3:2a:1b:0f:7d:b2:50:9f:ac:98:
c5:46:ad:ff:57:ea:38:a6:45:9d:41:89:88:cb:17:
f5:da:e4:67:2c:70:3d:d6:3f:6f:64:1e:2f:55:2e:
6c:4d:c7:6f:99:2b:b9:a3:a8:66:79:1d:2c:2e:9e:
b8:27:fc:d1:db:cc:55:90:1f:17:9c:9b:ae:6c:ec:
12:76:89:fe:40:83:1c:a1:f1:eb:59:d3:fd:bd:0b:
5d:13:7a:b8:88:42:d2:dc:c6:e1:85:0a:d4:9b:72:
cd:bb:d0:52:19:10:7a:ed:d1:b7:ab:b7:ec:5c:b2:
b7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5F:21:4B:E0:31:67:7D:1C:8C:3D:54:A8:DC:BA:7B:18:51:8C:70
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/F18hS-AxZ30cjD1UqNy6exhRjHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.160.0/21
212.87.176.0/23
212.87.180.0/23
212.87.184.0/23
Signature Algorithm: sha256WithRSAEncryption
71:30:d7:2c:34:18:84:35:c7:7c:6d:b4:59:32:5b:7f:dd:18:
97:cb:8d:b2:13:39:15:1b:84:c5:6f:09:d5:98:9a:de:24:f7:
3e:d5:a2:0f:dd:22:8b:5b:86:49:e4:08:47:c4:25:82:3b:04:
a9:f3:ab:3f:b5:81:38:ab:68:7f:6c:63:50:ed:45:e5:44:fa:
d1:67:9e:d5:59:57:49:1b:a7:00:c3:5d:06:b0:02:9c:8a:38:
ec:20:cb:ab:c2:82:8b:b2:81:f5:76:a8:99:5d:ce:a8:48:b4:
2d:e5:1f:d9:db:c2:2f:15:20:15:c1:40:c1:9a:df:ed:72:95:
97:03:f9:34:45:4a:6c:58:05:56:77:10:d3:0f:bf:a7:a1:42:
ae:b8:eb:5d:23:14:b7:58:22:eb:87:5f:2b:d4:05:c8:c9:5e:
55:bb:85:b5:95:8a:ff:e3:5d:2d:24:92:8e:7f:68:c9:51:3e:
8f:84:5e:4a:60:c2:c2:ee:5d:5c:2c:aa:fe:ac:25:31:39:45:
0f:38:08:4c:5c:3c:4f:25:1c:7e:31:20:3e:d6:8f:4f:ca:a9:
73:1d:a6:c2:37:7e:1c:f8:3b:cb:92:ce:a2:76:6e:46:cf:db:
65:6f:48:b0:d1:fe:1a:b2:9f:29:cb:35:a2:45:16:b2:2a:76:
9c:1a:9e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:52:50 2026 by rpki-client