Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Yio6-fDlSisc_gRRGWO27wmYyRI.roa
File: Yio6-fDlSisc_gRRGWO27wmYyRI.roa (raw, json)
Hash identifier: lsdHQdOGys/QzFcpPJo3FjLjL6R2YLZ8zrLnaLByrQw=
Subject key identifier: 62:2A:3A:F9:F0:E5:4A:2B:1C:FE:04:51:19:63:B6:EF:09:98:C9:12
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 01A115BCF19AF6FC3037BA9048F51B3EE84B
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Yio6-fDlSisc_gRRGWO27wmYyRI.roa
Signing time: Wed 07 Oct 2026 09:41:06 +0000
ROA not before: Wed 07 Oct 2026 09:41:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.112.207.0/24 maxlen: 24
89.222.92.0/22 maxlen: 24
178.210.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:bc:f1:9a:f6:fc:30:37:ba:90:48:f5:1b:3e:e8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Oct 7 09:41:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=622a3af9f0e54a2b1cfe04511963b6ef0998c912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:cd:30:c9:f0:2e:c1:aa:76:70:93:e4:28:
52:b0:1c:89:92:7d:9b:0c:fd:59:17:74:04:d2:72:
a4:dc:5e:1e:0a:60:36:7b:0e:84:02:2e:1a:a6:e6:
bf:cd:86:9f:84:d2:24:f2:e8:ba:c7:48:45:e2:f0:
f4:0c:d3:3c:57:e0:e4:31:50:be:13:6a:19:ae:46:
42:29:df:fd:35:be:9a:69:38:1d:8a:a4:75:fb:60:
42:6c:b2:e5:e1:de:62:2b:00:94:b9:f8:63:73:65:
6d:a5:8d:a9:c8:e4:0d:8c:7d:27:e2:46:14:da:a5:
ff:4a:1c:85:d6:bf:2f:a5:61:6a:97:31:a3:f9:7f:
8e:4f:2d:af:30:a8:9f:97:55:64:a4:9a:85:a0:92:
d2:38:f7:26:1b:21:ae:52:7a:c8:f8:bd:c6:11:3b:
df:61:7e:52:03:eb:1c:fe:5b:07:31:ba:0f:e7:38:
9b:37:92:82:f9:4e:ee:48:9c:d6:3a:c1:9b:ac:63:
bc:f5:2e:45:68:e9:5b:a3:1d:c9:8e:a4:ff:43:95:
5e:be:84:e8:c1:ad:85:cc:f4:17:ed:a3:81:67:c2:
6f:62:43:8e:bd:76:c1:c1:7e:76:c4:7a:25:57:33:
35:10:4a:d2:18:21:35:74:70:6c:17:c7:ce:77:ac:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2A:3A:F9:F0:E5:4A:2B:1C:FE:04:51:19:63:B6:EF:09:98:C9:12
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Yio6-fDlSisc_gRRGWO27wmYyRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.207.0/24
89.222.92.0/22
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:3f:b9:9d:20:19:0e:5f:2d:25:03:6e:32:42:79:a7:f6:02:
f6:0a:1f:19:48:d9:39:75:85:f7:4d:c7:a3:64:0d:f2:4d:9d:
db:b4:96:b7:85:f3:7e:6e:d8:4c:64:44:bf:e7:f9:e0:29:e9:
b8:2b:8a:b9:3c:07:d2:d2:32:2a:b0:23:d0:61:79:9e:c2:e9:
77:8b:0e:db:48:7b:ba:4e:be:0e:c7:fc:5b:44:8d:99:fc:06:
26:46:2c:ba:91:4a:da:1f:3e:0c:61:14:7e:6a:c3:df:f5:14:
e0:49:35:b8:0e:7a:70:bb:13:f2:47:45:23:92:0f:a7:8a:08:
af:ca:03:78:3e:10:52:f1:d7:87:c1:f0:60:b8:32:05:b4:f8:
59:f9:14:9f:75:8b:8e:05:58:62:53:33:62:1b:ce:59:7a:06:
8b:b1:b3:3d:49:b3:25:04:12:c1:10:04:71:b0:ba:65:6f:4c:
41:2f:17:e0:21:1f:d8:53:78:7e:4f:87:86:02:b4:db:b2:d6:
4e:16:55:42:6b:c5:b2:83:5b:0e:51:6f:4b:67:4c:6f:19:f8:
6e:01:c0:f6:e9:37:d6:47:8d:05:cb:a5:9d:7d:b5:62:7d:58:
ee:4e:2f:77:05:cc:4e:b0:6d:bb:3b:fc:76:cb:cf:9d:0f:90:
0a:d5:da:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:11:12 2026 by rpki-client