Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/FAAYpnv0apJm1WMjsv3PVyWYHW8.roa
File: FAAYpnv0apJm1WMjsv3PVyWYHW8.roa (raw, json)
Hash identifier: cRkV53u9HMf3IlgE7VmUP+PB8n6IJtBSTpmDwitbqpg=
Subject key identifier: 14:00:18:A6:7B:F4:6A:92:66:D5:63:23:B2:FD:CF:57:25:98:1D:6F
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 019F3B8ED2A396A6550C3E11E1A08AE19B35
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/FAAYpnv0apJm1WMjsv3PVyWYHW8.roa
Signing time: Tue 07 Jul 2026 07:50:43 +0000
ROA not before: Tue 07 Jul 2026 07:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 62.112.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:8e:d2:a3:96:a6:55:0c:3e:11:e1:a0:8a:e1:9b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Jul 7 07:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=140018a67bf46a9266d56323b2fdcf5725981d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:dd:fe:03:d5:21:9e:f6:1a:a9:25:be:d4:
74:9d:5d:28:f6:c1:3c:22:97:50:a2:56:52:1d:d1:
b2:3d:3a:3b:3a:44:be:89:4e:26:43:3a:9f:d8:a5:
41:75:52:f2:24:45:66:d0:8d:61:3a:8c:be:86:7f:
7e:f2:1a:8b:cb:dc:b3:44:cc:71:23:e5:a1:a6:77:
32:36:94:8f:7e:91:1f:77:15:2a:ff:15:04:f8:32:
56:37:ee:69:d8:1f:f3:8e:95:12:e1:07:61:50:d7:
60:ec:dd:de:4a:94:b6:66:8b:fc:a7:37:b4:4f:51:
17:37:a6:75:e3:c0:75:9a:d8:17:cb:68:8e:11:57:
b2:5d:ad:44:a0:93:81:16:e9:6d:ad:d0:57:54:ab:
02:ec:98:0a:fe:31:c6:f3:ff:f8:f0:5f:39:d0:11:
20:d7:08:62:86:4b:93:8e:90:01:5b:58:95:e2:9e:
be:7c:1a:23:d0:32:90:ef:71:99:62:c9:ea:ef:47:
5e:d9:aa:0c:a4:d1:47:11:9d:72:bb:85:0a:61:62:
d5:00:47:e7:9e:55:a9:7a:15:07:8a:3a:31:4d:bb:
5e:e3:bf:dc:40:13:5f:e7:b0:97:3f:42:c2:cf:6b:
90:04:ae:73:8e:dc:57:78:36:0d:7a:39:c3:4d:b2:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:00:18:A6:7B:F4:6A:92:66:D5:63:23:B2:FD:CF:57:25:98:1D:6F
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/FAAYpnv0apJm1WMjsv3PVyWYHW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.206.0/24
Signature Algorithm: sha256WithRSAEncryption
82:04:f9:58:ad:c1:e3:54:a5:9c:bb:eb:80:f7:32:f3:77:7c:
bb:c5:e0:e7:f7:bd:ed:e2:4f:c4:c9:86:46:9f:49:33:ef:ce:
a3:4c:5b:c5:61:c5:f0:a8:d2:28:db:fe:80:d9:4f:a2:6a:60:
4d:d1:10:20:15:fc:a9:45:51:d7:2c:d4:d0:c4:c4:81:18:b6:
d2:71:bb:21:20:d0:71:ab:33:b8:87:e5:9f:51:ab:83:16:5b:
38:0d:53:02:f8:a5:2b:df:5e:b1:fc:79:03:c8:88:07:6b:5e:
83:9a:4c:69:ec:84:90:8e:4d:49:3f:56:8d:07:e1:26:54:e8:
30:e4:9d:27:93:30:34:21:12:a9:2e:70:13:72:7d:43:be:8d:
29:a9:ff:63:0d:19:7c:00:76:69:36:41:84:9f:7d:9c:8e:f6:
9e:52:c4:1a:27:5c:56:19:f7:58:12:51:a2:31:06:98:d1:1d:
13:f3:85:22:78:22:d4:6a:26:b3:7f:65:96:62:e0:e5:ad:24:
55:da:ef:eb:d4:ca:d2:f1:57:56:19:fe:ee:71:ac:36:47:5a:
43:a3:0d:29:b9:63:fa:ef:86:60:14:3a:82:5e:3f:f1:1e:9e:
85:81:12:da:0f:6f:9e:55:57:e9:0c:d8:89:ed:40:69:b9:0d:
53:34:3b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:10 2026 by rpki-client