Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/xxE9YOqM2T5Z8oPIhhWAvOgHJRI.roa
File: xxE9YOqM2T5Z8oPIhhWAvOgHJRI.roa (raw, json)
Hash identifier: x/fg91ruYPvZW0kS3ikMiSXNlEDEedcJET97frEjErg=
Subject key identifier: C7:11:3D:60:EA:8C:D9:3E:59:F2:83:C8:86:15:80:BC:E8:07:25:12
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 01A1640849D0A13B3119938565EF9F6B26DF
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/xxE9YOqM2T5Z8oPIhhWAvOgHJRI.roa
Signing time: Thu 22 Oct 2026 14:33:47 +0000
ROA not before: Thu 22 Oct 2026 14:33:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137627
IP address blocks: 62.112.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:08:49:d0:a1:3b:31:19:93:85:65:ef:9f:6b:26:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Oct 22 14:33:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7113d60ea8cd93e59f283c8861580bce8072512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:88:95:5b:b4:09:59:f1:4e:87:c5:be:bd:
c7:33:ce:2d:0e:ed:b5:64:73:f0:7e:fb:d4:13:20:
27:fe:59:ab:69:79:50:15:ca:68:b7:21:25:84:b4:
53:8c:fa:83:43:a6:60:ff:14:5f:0b:26:94:49:42:
0e:96:2f:2c:53:77:85:50:5b:4d:3e:aa:89:77:65:
a7:6b:20:b0:a5:65:51:df:96:b9:3a:96:38:31:27:
93:f5:88:80:a4:85:37:33:ec:b6:2a:22:d6:52:26:
cd:98:28:61:77:55:1f:46:b6:f2:f0:db:7f:ed:c9:
81:17:4d:f0:9b:2d:0b:3d:48:16:48:50:42:c2:17:
61:8e:d9:aa:bd:ff:d9:d3:79:b5:c2:f2:45:f8:11:
5e:70:bf:05:93:cc:f2:ee:41:ae:20:7a:fe:17:c0:
41:bf:32:ac:d1:60:e6:5e:22:65:2b:d3:32:d4:3c:
04:59:75:a6:7d:c8:08:e7:f7:50:45:c5:67:24:37:
1e:b9:4d:8c:40:ed:88:08:ce:4c:78:af:d2:7b:16:
d7:8e:5f:46:0e:97:67:6b:e5:62:3b:dc:a5:71:6f:
24:8b:0d:08:49:b1:25:62:4c:c3:74:1a:b8:30:dd:
a9:18:e1:b0:9e:80:ce:06:95:89:13:52:01:a0:de:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:11:3D:60:EA:8C:D9:3E:59:F2:83:C8:86:15:80:BC:E8:07:25:12
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/xxE9YOqM2T5Z8oPIhhWAvOgHJRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:22:c3:7a:cd:e7:c7:cc:3f:ea:fb:0f:bf:20:bd:f1:0f:a6:
3e:ad:dd:2a:82:46:f9:f5:2a:09:76:bc:58:7d:87:ca:f1:99:
fc:68:fe:82:82:54:56:15:bc:d8:4a:59:53:29:a0:6f:b5:87:
fb:8a:ad:e6:0e:8f:af:61:88:ef:d7:e3:12:cf:29:13:ef:a0:
d0:dd:6f:50:b7:00:0a:8b:cc:c4:01:94:e3:85:b3:6a:af:a4:
ab:34:75:2a:13:12:e4:4d:b2:d9:58:71:ef:5f:d9:09:dd:ba:
d9:94:d6:db:eb:e6:ec:1e:68:43:e0:4a:6e:cd:51:1f:0c:2a:
6e:81:9e:08:a2:aa:71:6f:ba:15:02:f6:05:5e:2b:54:67:08:
0c:09:a9:04:8f:0c:f0:5b:76:a2:d2:43:5a:b9:ea:5b:e8:81:
3e:67:84:18:8f:a3:47:86:55:3c:a1:ca:d0:49:fe:7c:0e:1a:
35:49:9a:1e:0c:b0:87:f6:f4:c4:0e:ca:48:05:35:53:1a:73:
4d:b8:13:95:73:30:65:ca:de:97:34:84:dd:2b:91:b9:ef:9f:
6f:d8:eb:bd:ba:8d:90:83:39:88:47:10:23:f8:3e:53:a5:04:
f5:40:bd:1a:b3:3a:46:b2:d7:d2:70:c8:73:55:c0:35:9a:bf:
d4:12:83:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFkCEnQoTsxGZOFZe+faybfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx
YTE2MWUwHhcNMjYxMDIyMTQzMzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzExM2Q2MGVhOGNkOTNlNTlmMjgzYzg4NjE1ODBiY2U4MDcyNTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4KIlVu0CVnxTofFvr3HM84tDu21
ZHPwfvvUEyAn/lmraXlQFcpotyElhLRTjPqDQ6Zg/xRfCyaUSUIOli8sU3eFUFtN
PqqJd2WnayCwpWVR35a5OpY4MSeT9YiApIU3M+y2KiLWUibNmChhd1UfRrby8Nt/
7cmBF03wmy0LPUgWSFBCwhdhjtmqvf/Z03m1wvJF+BFecL8Fk8zy7kGuIHr+F8BB
vzKs0WDmXiJlK9My1DwEWXWmfcgI5/dQRcVnJDceuU2MQO2ICM5MeK/SexbXjl9G
Dpdna+ViO9ylcW8kiw0ISbElYkzDdBq4MN2pGOGwnoDOBpWJE1IBoN793wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMcRPWDqjNk+WfKDyIYVgLzoByUSMB8GA1UdIwQY
MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt
MTNiOTExMGNlMjBjLzEveHhFOVlPcU0yVDVaOG9QSWhoV0F2T2dISlJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj
LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnDPMA0G
CSqGSIb3DQEBCwUAA4IBAQBPIsN6zefHzD/q+w+/IL3xD6Y+rd0qgkb59SoJdrxY
fYfK8Zn8aP6CglRWFbzYSllTKaBvtYf7iq3mDo+vYYjv1+MSzykT76DQ3W9QtwAK
i8zEAZTjhbNqr6SrNHUqExLkTbLZWHHvX9kJ3brZlNbb6+bsHmhD4EpuzVEfDCpu
gZ4Ioqpxb7oVAvYFXitUZwgMCakEjwzwW3ai0kNauepb6IE+Z4QYj6NHhlU8ocrQ
Sf58Dho1SZoeDLCH9vTEDspIBTVTGnNNuBOVczBlyt6XNITdK5G5759v2Ou9uo2Q
gzmIRxAj+D5TpQT1QL0aszpGstfScMhzVcA1mr/UEoP/
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:14 2026 by rpki-client