Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/jVEF_UAaRYmedHKGuIyseg1gcbY.roa
File: jVEF_UAaRYmedHKGuIyseg1gcbY.roa (raw, json)
Hash identifier: tjDxlBVUYxs7z18gz8wlAFg0M0h3WVlIHdRrd9k9MOQ=
Subject key identifier: 8D:51:05:FD:40:1A:45:89:9E:74:72:86:B8:8C:AC:7A:0D:60:71:B6
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 019C5688838DC2960FB7E4DDFE03453C422B
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/jVEF_UAaRYmedHKGuIyseg1gcbY.roa
Signing time: Fri 13 Feb 2026 10:25:12 +0000
ROA not before: Fri 13 Feb 2026 10:25:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 62.112.207.0/24 maxlen: 24
89.222.88.0/24 maxlen: 24
89.222.89.0/24 maxlen: 24
89.222.90.0/24 maxlen: 24
89.222.91.0/24 maxlen: 24
89.222.92.0/24 maxlen: 24
89.222.93.0/24 maxlen: 24
89.222.94.0/24 maxlen: 24
89.222.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:88:83:8d:c2:96:0f:b7:e4:dd:fe:03:45:3c:42:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Feb 13 10:25:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d5105fd401a45899e747286b88cac7a0d6071b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:cc:f9:b0:87:d1:3e:2c:d0:3a:fe:8e:f6:
20:db:79:c0:7c:07:f3:8b:bf:27:54:c2:18:39:b0:
ce:e5:cd:29:f2:ae:6b:45:87:bf:0b:3d:3a:2a:19:
91:af:83:b6:e2:ce:2f:be:07:5d:33:d4:88:9c:22:
d9:fb:a2:cb:88:1e:6a:ff:25:64:8e:8b:11:30:42:
2e:e3:3a:8e:e3:ed:92:77:e0:f7:2c:b2:4c:32:95:
15:6f:02:0b:15:db:77:2e:2c:b7:2a:42:4a:0e:9f:
63:5f:54:8f:af:19:61:81:77:d4:61:72:ed:81:e2:
34:27:06:55:bf:3d:36:c3:3a:cf:1d:a3:83:6b:42:
86:fb:96:7c:78:65:da:fc:d3:f0:58:80:dd:86:49:
29:1f:09:b1:fe:cc:81:43:ac:41:54:62:6b:1b:ad:
3f:c0:42:78:40:28:72:f8:9a:63:b0:e3:45:d3:c7:
4d:16:9e:d6:92:ad:a4:86:6f:3f:d9:b9:d0:97:5f:
f9:0c:8d:13:8c:7c:2d:ad:51:ee:77:27:bb:ac:e0:
63:96:39:20:94:b9:03:ae:1f:51:1a:2d:bc:c7:15:
29:d4:3b:3a:bd:6c:05:56:b0:19:2b:a0:52:10:d6:
36:14:c0:88:64:37:04:71:b8:a3:66:bd:fa:37:63:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:51:05:FD:40:1A:45:89:9E:74:72:86:B8:8C:AC:7A:0D:60:71:B6
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/jVEF_UAaRYmedHKGuIyseg1gcbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.207.0/24
89.222.88.0/21
Signature Algorithm: sha256WithRSAEncryption
70:92:2d:62:e8:16:61:03:4c:0c:98:1b:e2:44:1a:c0:65:9e:
1f:90:9a:2e:06:c2:17:27:ef:b8:c7:3f:48:c2:c8:0b:3c:75:
7a:bd:e6:b9:7e:29:18:6a:5f:64:8b:40:4a:10:23:95:70:31:
24:b6:11:a5:da:db:6d:fb:82:81:b5:5e:d8:bc:d8:fe:d3:c3:
fc:81:8e:f4:98:78:81:61:ed:ff:8b:8b:b7:c3:8f:97:2f:40:
ac:14:2f:45:e4:50:65:08:b8:66:15:28:cf:df:27:0d:35:3a:
ef:e9:48:1d:56:c3:33:45:ce:37:d0:8b:8f:bb:73:13:c7:05:
c6:38:42:7f:55:83:b2:c5:81:9e:26:e5:17:8d:4d:86:e6:d8:
25:48:9e:75:71:65:2e:99:62:9a:d6:4b:85:83:50:59:6b:af:
fe:79:13:94:1f:3c:89:d2:9d:85:7a:48:bc:40:3f:78:f9:51:
d9:31:b0:cb:64:0a:95:89:33:53:3b:9a:d9:01:46:5c:82:b6:
92:d5:a0:88:50:01:0e:a3:5e:2c:0c:58:56:79:27:90:58:76:
d4:ba:3d:69:9b:8c:2b:27:ee:57:9c:43:ec:93:fb:5e:09:e6:
42:41:39:2b:67:6b:d7:ae:ea:83:b3:c5:3e:50:a0:2f:fe:9b:
0d:e8:b3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:14 2026 by rpki-client