Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/bqQbHCxttVzgxNcTF0tbCdJVJgI.roa
File: bqQbHCxttVzgxNcTF0tbCdJVJgI.roa (raw, json)
Hash identifier: 1MVaNJ/MdqSqtNMpFBgMNrwtevfOonhxXKKdjTutsOE=
Subject key identifier: 6E:A4:1B:1C:2C:6D:B5:5C:E0:C4:D7:13:17:4B:5B:09:D2:55:26:02
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 01A062787B0311B355E22FFF638AFAB9C50E
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/bqQbHCxttVzgxNcTF0tbCdJVJgI.roa
Signing time: Wed 02 Sep 2026 14:14:18 +0000
ROA not before: Wed 02 Sep 2026 14:14:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 62.112.207.0/24 maxlen: 24
89.222.88.0/24 maxlen: 24
89.222.89.0/24 maxlen: 24
89.222.90.0/24 maxlen: 24
89.222.91.0/24 maxlen: 24
89.222.92.0/24 maxlen: 24
89.222.93.0/24 maxlen: 24
89.222.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:78:7b:03:11:b3:55:e2:2f:ff:63:8a:fa:b9:c5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Sep 2 14:14:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ea41b1c2c6db55ce0c4d713174b5b09d2552602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:68:7d:bf:b7:cb:ed:08:c1:35:01:c6:c9:
ea:7d:2d:6f:20:84:9f:a8:f8:3d:09:48:90:13:b8:
c4:14:f6:ce:4d:ae:2d:d2:5d:50:10:6f:4d:f6:a6:
83:3e:0f:33:7e:da:a5:1d:16:09:45:61:8e:5f:8e:
7e:ce:33:17:61:2f:6d:a2:05:67:58:4e:7a:9c:57:
d6:24:5d:31:ad:ce:4b:f1:26:c9:b0:3f:53:3d:eb:
13:a0:86:7b:00:45:d4:82:1a:21:c6:e3:0f:5d:fe:
b9:41:1f:ed:23:6b:d4:94:4e:37:fd:30:e2:b9:fc:
a3:99:98:b5:ee:89:ae:f7:f1:c2:a3:f2:ce:86:58:
21:37:8a:01:96:bd:74:b8:43:62:e4:be:35:05:97:
9f:fd:ee:6b:a3:25:fe:92:7f:73:c5:25:07:bf:fe:
67:58:8b:1c:2f:ab:d4:e2:e1:59:41:a0:da:54:11:
c5:78:8a:2d:86:2e:92:3d:2c:aa:b1:0d:a3:84:52:
41:a5:21:d5:db:65:bd:33:19:17:71:08:a9:f6:4a:
d5:94:a6:8e:64:cf:9d:5a:01:34:ca:ae:75:0a:a5:
df:9e:e8:eb:43:97:7a:b6:dc:d5:5c:eb:f4:da:ce:
55:3d:2b:14:20:19:ca:3d:5b:b8:be:fe:83:38:bb:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A4:1B:1C:2C:6D:B5:5C:E0:C4:D7:13:17:4B:5B:09:D2:55:26:02
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/bqQbHCxttVzgxNcTF0tbCdJVJgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.207.0/24
89.222.88.0-89.222.94.255
Signature Algorithm: sha256WithRSAEncryption
7b:10:7b:80:d7:38:74:9d:aa:d0:26:34:d2:68:bd:ed:7a:3c:
c9:a1:90:8f:fb:1e:68:a7:2f:7d:00:cc:f1:e2:7f:94:fc:d5:
41:f4:b4:34:86:70:30:3b:da:34:12:e1:d8:70:0d:f2:e9:d1:
9a:f5:80:b7:98:8a:7f:5b:e0:82:92:d5:57:2c:aa:1c:c6:53:
50:3d:e9:1a:52:17:cf:b6:a4:ee:25:d5:d4:d4:db:5f:bc:e6:
50:99:b3:5b:c5:f3:20:6a:53:f3:ed:ef:33:2b:da:72:cf:7e:
87:dc:1a:4c:29:db:1c:11:c4:5a:98:5b:54:7b:72:80:ef:d9:
b8:bc:8e:95:c1:4e:84:9b:6f:a2:89:6a:ea:b8:22:8e:da:19:
c0:b5:5b:ce:6a:e7:1d:80:a2:c5:2a:a7:cb:db:62:30:fa:9c:
e7:cc:ba:d3:6a:0a:49:6f:74:3a:ef:f5:24:95:28:e5:4a:4e:
1c:3e:0e:7e:51:59:fe:9d:5f:1d:52:75:f7:4e:1b:52:12:d5:
43:d2:b7:00:6f:5b:79:56:f6:85:bd:4b:eb:61:5c:33:c1:6f:
77:a9:b5:a7:04:f7:fb:f6:fc:94:b4:45:c0:48:af:3a:a0:5e:
f6:50:86:be:45:40:d7:79:f2:7e:a1:39:5e:31:dd:7e:06:ec:
6d:fb:7e:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:55 2026 by rpki-client