Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/AFpQFfTAHlmZfOVY9qbWTcZq2L8.roa
File: AFpQFfTAHlmZfOVY9qbWTcZq2L8.roa (raw, json)
Hash identifier: zFAV0APoGao6Qz2j8CZVjqIS3Qqv3huMjGC4uE2iMHQ=
Subject key identifier: 00:5A:50:15:F4:C0:1E:59:99:7C:E5:58:F6:A6:D6:4D:C6:6A:D8:BF
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01A124BC30B02875339B0EA6AA0C6EC70AD9
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/AFpQFfTAHlmZfOVY9qbWTcZq2L8.roa
Signing time: Sat 10 Oct 2026 07:34:35 +0000
ROA not before: Sat 10 Oct 2026 07:34:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 45.88.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:bc:30:b0:28:75:33:9b:0e:a6:aa:0c:6e:c7:0a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Oct 10 07:34:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=005a5015f4c01e59997ce558f6a6d64dc66ad8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d8:df:81:12:ae:8d:22:e1:fe:10:fe:0d:1c:
5e:45:7d:c6:97:94:51:ab:da:6c:d8:24:73:48:c5:
ed:0a:d5:24:60:a7:9f:7e:c3:56:ce:4a:38:c8:16:
a3:5f:20:8e:c1:ed:54:08:6a:9b:f2:ee:0a:60:17:
86:c9:3d:2e:e0:49:5c:69:24:7a:3c:9b:f1:65:a7:
22:51:0e:bd:f6:73:49:48:ed:60:ac:ab:92:33:ad:
72:72:a1:9d:9f:fb:f5:85:5e:8e:b0:43:c5:3c:f5:
5e:10:57:4c:0b:f2:8b:2b:cc:47:60:b8:f3:26:ec:
7c:27:82:6c:cf:93:76:28:19:f8:bd:b8:10:1e:96:
7d:d5:27:61:4d:16:42:3c:0c:34:1b:ad:42:fb:87:
d3:63:22:f9:9c:2b:ae:31:a2:f4:e3:79:db:35:09:
25:37:f2:f4:32:d0:1a:ce:c2:12:70:fd:cc:71:38:
30:d0:4c:a6:07:28:9a:85:e3:66:43:f5:4b:63:f5:
fa:2e:4f:e4:0a:d3:a6:64:4e:ae:cd:f4:78:cd:c9:
73:2b:15:10:a1:d1:05:1a:0a:45:26:dd:17:70:ee:
76:a3:b1:27:23:a3:58:28:92:83:99:98:20:dd:e8:
d0:a1:c9:bd:97:39:f0:b1:13:16:dd:b2:8b:44:0d:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:50:15:F4:C0:1E:59:99:7C:E5:58:F6:A6:D6:4D:C6:6A:D8:BF
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/AFpQFfTAHlmZfOVY9qbWTcZq2L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:82:05:72:d3:df:40:52:8c:8b:9b:09:ba:3f:19:ff:79:15:
2d:48:45:25:0f:eb:12:a4:97:c2:56:b0:3f:1e:b5:09:26:a1:
5a:d0:5f:e8:48:50:ff:1b:be:ad:5a:08:69:28:e8:63:02:de:
df:12:86:1d:46:67:f2:6e:bc:96:eb:d9:09:dd:da:b1:0d:9f:
15:49:d7:bb:8f:5a:40:14:c3:62:55:f5:a6:07:57:b9:f6:de:
81:97:d9:1f:17:de:df:9f:f4:ca:a2:79:ae:c9:b7:c3:d1:11:
ae:be:70:62:df:3c:09:ac:ec:40:39:e1:d9:80:75:4c:55:dd:
12:71:4e:be:2f:05:b3:ef:47:f9:e8:61:aa:41:c0:dc:d4:5a:
d3:ba:66:d9:cc:c6:d1:03:25:f8:40:e0:d8:4d:9e:77:7b:9f:
02:a8:04:2a:c5:19:98:aa:34:7b:0b:28:c2:50:e5:0c:e6:d0:
ed:fa:fa:58:20:43:b9:c6:10:2d:a6:6e:34:f7:a5:ae:d3:06:
7e:82:5e:10:4d:82:81:d9:e9:a0:ee:9c:99:ea:b2:44:06:26:
6b:87:57:72:16:28:23:2f:a9:65:9c:da:6e:8f:b9:56:d4:4c:
17:d9:4e:37:65:42:00:b1:bc:7b:bc:a6:92:4b:09:1e:d1:db:
98:2a:c5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:09:09 2026 by rpki-client