Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/fFgZemyhh_AiPY0iXhjYmnhEl78.roa
File: fFgZemyhh_AiPY0iXhjYmnhEl78.roa (raw, json)
Hash identifier: WGQhj1ApNXYIyxumsZRTAceHbGa4s2W/MAwe73vl1lg=
Subject key identifier: 7C:58:19:7A:6C:A1:87:F0:22:3D:8D:22:5E:18:D8:9A:78:44:97:BF
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A14A08AA17AB9D1F771878178071DE6E8E
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/fFgZemyhh_AiPY0iXhjYmnhEl78.roa
Signing time: Sat 17 Oct 2026 13:24:04 +0000
ROA not before: Sat 17 Oct 2026 13:24:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203804
IP address blocks: 185.81.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:08:aa:17:ab:9d:1f:77:18:78:17:80:71:de:6e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Oct 17 13:24:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c58197a6ca187f0223d8d225e18d89a784497bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:24:8d:1e:81:0a:d8:2c:f0:4c:a3:fe:c3:
32:b1:e8:a6:74:bc:f5:de:76:85:d1:7a:44:fc:3a:
e9:fd:9a:44:d6:d6:b5:4d:7c:7d:84:f1:44:96:44:
c2:7b:e3:91:d5:30:dd:32:ac:58:1d:54:d6:25:f2:
92:a3:f1:62:e4:93:4b:da:ea:2c:f5:86:f3:1c:29:
61:aa:28:9c:0c:c4:8a:0f:b1:8f:f6:49:f8:a3:d7:
7f:bf:6c:21:38:0d:b7:71:3b:3a:85:bf:00:4c:0f:
cd:26:2d:2b:e7:e5:59:6d:ed:53:11:32:f0:b1:93:
67:26:71:f5:e8:36:07:64:9b:c0:ea:2a:32:36:af:
fb:c3:51:55:df:7d:fb:5c:07:2a:0e:c7:af:8a:01:
f3:86:f8:59:41:7a:c1:54:10:9f:bc:79:8d:8c:3c:
b7:3c:ba:6f:ec:1d:43:5e:3a:c6:d0:37:b2:52:7b:
f0:10:17:fc:da:96:5d:da:05:7e:fb:99:f7:9b:47:
93:ec:da:cb:19:7b:01:cc:dc:61:19:9b:eb:44:55:
31:af:dc:ae:3a:42:1a:be:95:ae:8e:ed:d8:43:6a:
14:37:47:e4:11:43:6c:21:7b:8d:3d:db:e4:ff:0b:
3f:a5:bb:8d:62:6b:f1:e4:8e:75:6d:90:a5:8b:31:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:58:19:7A:6C:A1:87:F0:22:3D:8D:22:5E:18:D8:9A:78:44:97:BF
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/fFgZemyhh_AiPY0iXhjYmnhEl78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.153.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f2:a9:50:7b:a0:b2:8f:92:ad:11:34:a0:2a:61:87:41:20:
53:5b:64:2f:8e:4f:fb:b1:b4:fa:66:56:61:2a:9c:ec:5f:df:
9e:62:48:11:8d:b9:2a:ab:62:ea:00:77:fe:77:04:8f:5d:9f:
e6:8b:f9:30:75:70:bc:c9:93:b5:be:85:75:3d:6b:85:a7:d7:
76:4d:50:27:e1:3c:ae:37:5c:6e:77:73:90:fe:27:7b:26:1f:
99:27:c4:75:81:97:93:5d:a4:7d:e5:12:d0:91:ca:3b:a3:e5:
9e:96:eb:cf:26:e2:c3:2b:d1:64:b6:36:2a:7f:bd:33:4e:64:
5b:e1:fe:bb:24:93:19:39:e1:30:b9:b2:93:53:86:c3:ac:77:
69:8b:9f:f0:b9:11:f5:15:63:0f:37:4c:ec:ec:64:46:d2:ea:
e0:c0:1e:e2:bf:1c:d7:c6:9e:98:09:be:58:56:37:cb:ad:68:
65:f5:b1:57:90:fe:a8:d2:f6:88:b0:54:f8:ae:8a:d1:31:25:
f6:d1:69:30:1b:d6:93:d0:65:64:72:fe:ee:af:74:0d:e3:95:
0b:f4:aa:ab:49:05:1d:ea:29:e2:18:06:de:dc:04:f0:c3:e3:
43:22:26:66:5b:cf:cb:30:0b:8a:b6:aa:4f:5a:c8:e2:4d:57:
de:89:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:04:31 2026 by rpki-client