Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/aFGocHElaMjlAKj_s9X0AGQIDK4.roa
File: aFGocHElaMjlAKj_s9X0AGQIDK4.roa (raw, json)
Hash identifier: 39qCRlygHYd/7jND+sswYuDowpmtu5zTOOVVyh15i5U=
Subject key identifier: 68:51:A8:70:71:25:68:C8:E5:00:A8:FF:B3:D5:F4:00:64:08:0C:AE
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019FCC221DAB2305EACB6141E95EDDF43624
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/aFGocHElaMjlAKj_s9X0AGQIDK4.roa
Signing time: Tue 04 Aug 2026 09:36:55 +0000
ROA not before: Tue 04 Aug 2026 09:36:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206621
IP address blocks: 212.87.170.0/23 maxlen: 24
212.87.172.0/23 maxlen: 24
212.87.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:22:1d:ab:23:05:ea:cb:61:41:e9:5e:dd:f4:36:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 4 09:36:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6851a870712568c8e500a8ffb3d5f40064080cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bd:48:bd:ed:99:cc:aa:71:e3:ad:04:eb:1b:
d3:e6:66:f4:d8:51:a5:0d:1b:58:d0:bd:d6:27:38:
5b:ff:e2:fb:9e:63:25:15:11:64:8f:24:69:f4:aa:
46:6f:47:6b:0d:a2:46:3a:62:01:b4:a6:42:c9:3a:
da:ee:96:30:33:69:f8:a0:90:5b:bc:d1:72:b3:23:
2d:6a:45:a3:b9:03:63:d1:0d:d7:93:78:95:11:fc:
5e:4a:b9:e0:49:fc:73:b1:c8:b5:4a:30:32:e5:58:
b3:3f:bc:10:11:a6:63:fc:43:ca:06:87:00:31:59:
d7:63:81:63:2c:d0:90:e7:6a:7a:72:b9:92:47:82:
70:dc:8c:c1:a5:4c:1e:3e:67:ad:a6:7c:4e:ae:70:
6e:ed:a9:7d:42:24:13:d2:10:55:6a:bc:0d:55:b8:
5a:b3:0c:50:d4:38:77:77:36:bc:34:38:d9:37:3a:
4c:60:db:e6:47:63:56:2a:ea:a0:1d:6a:b8:c9:19:
dd:24:e5:82:7a:b8:ae:0b:bd:8e:dd:ff:db:07:71:
4b:8d:40:a8:0f:28:f4:4f:dc:f6:63:b6:fd:e7:5c:
ae:b9:f5:c3:a4:47:38:61:33:95:fa:0a:70:a1:ca:
e4:d7:65:2c:0d:1c:0c:2a:40:45:6c:7a:60:95:f9:
46:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:51:A8:70:71:25:68:C8:E5:00:A8:FF:B3:D5:F4:00:64:08:0C:AE
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/aFGocHElaMjlAKj_s9X0AGQIDK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.170.0-212.87.173.255
Signature Algorithm: sha256WithRSAEncryption
a6:bc:7c:93:86:4e:39:4a:52:5c:0a:79:cd:02:c7:db:8f:a3:
9b:63:79:46:04:2e:e7:29:98:2b:6b:04:11:68:03:91:d6:ae:
94:ce:ba:fa:84:3f:c4:2c:07:1f:94:10:17:91:01:79:2f:5f:
00:9f:82:1a:2b:97:a1:84:17:65:e1:6b:51:5a:ec:74:86:e6:
75:39:b1:7f:97:b0:02:9d:c3:a1:a1:dd:65:36:33:5c:7b:e9:
b5:82:b3:c0:ed:5b:83:55:b5:28:ee:42:96:8b:a9:fd:fe:e6:
ff:f2:d7:f4:78:a0:fa:2a:ce:30:40:19:40:8d:c0:a1:46:70:
32:af:18:0c:09:f5:53:d2:04:ad:6e:1f:7b:52:c0:95:4d:15:
93:f9:8c:39:1c:09:02:d5:88:e4:65:d4:a2:44:80:9b:97:1d:
92:82:60:c7:57:c1:5c:41:ba:79:4b:e6:29:6d:4e:1b:eb:c9:
6e:7f:bf:1f:a9:bd:10:e7:12:33:fc:87:17:20:fa:8b:d6:f6:
c3:15:25:14:1a:39:46:e8:2d:d0:41:de:0f:53:c1:38:a7:ee:
8f:2b:1d:35:89:55:58:08:e6:59:5b:d7:96:3c:05:a4:26:74:
12:83:2d:9d:69:de:85:8a:fa:b2:80:9e:85:2f:cf:e8:11:c1:
97:d8:61:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:33 2026 by rpki-client