Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Csd6m9ejO1JJZR6uqcgzHjzMB0s.roa
File: Csd6m9ejO1JJZR6uqcgzHjzMB0s.roa (raw, json)
Hash identifier: 4OoKitHUM2Cxcji9pDEeODDzqXWMR+bJbVbOObsHghk=
Subject key identifier: 0A:C7:7A:9B:D7:A3:3B:52:49:65:1E:AE:A9:C8:33:1E:3C:CC:07:4B
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 019F3B8ED3870996E24D46C8AD44AB559D54
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Csd6m9ejO1JJZR6uqcgzHjzMB0s.roa
Signing time: Tue 07 Jul 2026 07:50:43 +0000
ROA not before: Tue 07 Jul 2026 07:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 62.112.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:8e:d3:87:09:96:e2:4d:46:c8:ad:44:ab:55:9d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Jul 7 07:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ac77a9bd7a33b5249651eaea9c8331e3ccc074b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:ee:4c:a6:d1:b5:40:6c:ba:7e:b7:90:8d:
d8:b8:b7:89:f7:9b:34:1e:ec:81:67:5d:0a:31:88:
af:93:cc:4e:90:4c:98:58:97:a3:3f:56:1c:93:7f:
98:f8:39:7d:07:d7:d2:bb:83:fd:d5:00:fa:c4:45:
70:8c:70:3e:a3:4b:8e:40:98:e7:77:9a:ef:51:c2:
62:ce:ab:50:c8:bf:d7:23:bd:bc:a8:1b:42:ae:b8:
49:e5:64:63:d1:16:b6:ba:65:30:8e:f5:93:2e:f6:
93:93:94:01:4c:91:42:b7:17:e5:c8:67:dd:b8:1c:
52:1b:c1:ab:98:db:b8:af:25:3b:95:3f:6a:9c:73:
00:7b:d9:61:8e:e3:e8:01:53:59:5d:c6:7d:9f:8c:
00:a4:e5:43:1d:d2:0f:d8:0d:5e:46:0d:51:d4:2b:
a0:11:1d:79:15:b3:ec:e9:77:e0:5d:86:38:54:91:
83:ff:55:75:2d:8c:4c:d2:f7:4b:f8:65:c9:40:8a:
52:86:56:92:4f:61:a1:2e:c1:8b:a9:ae:00:4c:14:
82:ff:2b:9a:39:d6:a3:c8:1e:5b:b9:4c:4f:b2:8e:
96:cd:37:e7:60:56:67:40:fa:67:26:5b:00:b3:1c:
cc:94:8f:43:3f:fa:15:41:2e:af:52:41:a9:f0:81:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C7:7A:9B:D7:A3:3B:52:49:65:1E:AE:A9:C8:33:1E:3C:CC:07:4B
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Csd6m9ejO1JJZR6uqcgzHjzMB0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d5:06:20:27:00:d7:8e:5b:d7:24:8d:b6:fe:de:7a:a8:fd:
bf:fe:21:5c:02:47:b3:3f:0b:b3:fb:fc:4e:d0:f8:f2:58:61:
f9:8d:e1:74:54:d8:e7:5d:35:4f:43:f5:da:64:12:ac:21:b4:
12:ed:f8:ed:84:ef:d6:9f:3a:20:a6:44:68:80:e0:fe:86:3b:
c5:d7:05:12:b5:77:ca:1b:c4:12:d3:41:09:08:d9:ab:dd:bd:
03:c7:b4:65:76:2f:d7:ea:38:b2:d4:c0:91:be:3a:1f:d3:23:
08:ca:df:83:20:46:12:a4:5e:47:6b:d0:df:87:12:96:ad:df:
cc:53:da:d1:9d:8e:cf:a3:e7:0d:01:41:05:b7:bb:f8:b1:d2:
00:67:9d:b3:aa:d9:97:8c:e5:dd:48:63:25:4e:fe:e4:17:52:
61:0e:9d:8f:fe:17:23:b6:f4:d8:b9:da:1f:a3:b1:bf:57:a9:
2e:0f:79:fd:6a:c3:9b:78:57:e8:bd:27:b4:00:13:b0:a5:23:
ad:cf:23:a4:4a:12:61:0a:e5:2e:bb:f8:7f:e3:d6:35:5b:b3:
60:a2:44:fb:41:40:e7:42:04:30:ab:89:e5:09:8d:ee:ed:2a:
6d:f8:a2:48:d8:47:38:f9:0f:48:8f:36:b5:5b:6b:f3:1b:fe:
77:70:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:06 2026 by rpki-client