Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/fdaQXC9YTHiY6cwpC_WH5RqTESo.roa
File: fdaQXC9YTHiY6cwpC_WH5RqTESo.roa (raw, json)
Hash identifier: C4XzlLxg0BNyMddYVg3sfthfeguEVR84TPotbdJtqGg=
Subject key identifier: 7D:D6:90:5C:2F:58:4C:78:98:E9:CC:29:0B:F5:87:E5:1A:93:11:2A
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 01A105F0D174C71C7956F137D762AE7A46AB
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/fdaQXC9YTHiY6cwpC_WH5RqTESo.roa
Signing time: Sun 04 Oct 2026 08:03:50 +0000
ROA not before: Sun 04 Oct 2026 08:03:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197170
IP address blocks: 94.26.106.0/24 maxlen: 24
192.109.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:f0:d1:74:c7:1c:79:56:f1:37:d7:62:ae:7a:46:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Oct 4 08:03:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dd6905c2f584c7898e9cc290bf587e51a93112a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:30:d5:86:fa:4d:01:59:33:21:c8:0d:1c:
76:b8:36:39:99:e7:51:56:f6:63:42:f4:b2:85:c1:
e8:00:8d:10:f9:cd:21:47:9a:de:9e:dd:9a:0b:14:
fc:55:cd:64:0a:0f:20:1b:c0:ef:05:16:ff:7c:79:
3d:e0:26:1e:92:8d:30:c8:2c:94:77:b3:a9:a4:b2:
7d:68:29:72:fb:65:20:02:ee:6b:bd:d3:14:c2:45:
bf:2b:9c:40:8d:88:03:7e:f8:7e:8e:41:37:60:b2:
cd:91:a2:34:ca:38:5a:71:ea:f7:cf:5a:6d:be:91:
ce:d6:3b:4a:e8:98:a0:b1:72:04:bf:06:f5:9b:61:
0c:7d:e1:5f:ff:52:71:dd:04:ee:9e:f6:d8:b4:44:
50:52:23:ab:02:e9:21:71:f7:d6:e7:c1:d4:b2:23:
6d:6f:49:68:3b:72:d7:7d:f7:fc:0b:3d:e7:65:2a:
9a:b4:b9:53:da:1a:6d:e4:a4:18:a5:d8:e0:c5:6d:
e3:07:9c:24:78:82:86:51:04:51:22:b8:47:30:c2:
ab:b5:c4:09:9f:34:68:a4:f0:1f:20:87:3c:52:53:
33:b1:8e:27:a1:0c:df:14:fe:7a:84:9d:ba:ff:34:
4d:67:4d:06:91:ba:5f:c2:79:bd:b4:9e:3c:a5:80:
60:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D6:90:5C:2F:58:4C:78:98:E9:CC:29:0B:F5:87:E5:1A:93:11:2A
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/fdaQXC9YTHiY6cwpC_WH5RqTESo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.106.0/24
192.109.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:62:5d:33:94:71:8f:4e:7a:f2:1d:fa:3f:3c:d8:a4:e6:34:
b0:de:61:3a:7d:98:65:09:0a:6a:c5:4e:08:30:df:e7:6a:79:
33:42:bc:a5:94:96:09:15:da:6b:ef:55:2c:ec:8c:e2:20:55:
39:80:24:c7:38:19:54:8a:12:c0:bb:0a:1a:fe:1a:f2:37:25:
c4:d3:1c:79:b4:4b:f5:20:2b:0c:7d:e9:37:ec:20:f7:d1:6b:
f0:25:f6:f8:8f:49:57:6e:bb:34:57:3b:d5:18:02:e6:28:1d:
49:55:5a:45:2c:20:00:bd:93:d0:20:51:97:9a:76:01:d8:07:
b0:79:96:5f:d9:fe:61:c2:4c:39:6a:43:51:03:0b:8d:92:6a:
f1:f1:38:c1:0b:df:98:c9:cd:c2:27:0d:79:82:28:43:b6:5b:
3f:f5:ac:57:c0:db:aa:3a:0d:e2:b4:e3:f9:74:66:0a:e5:72:
d0:74:61:e7:b0:67:d0:64:8f:ab:c0:97:9e:92:b0:b2:57:5f:
7c:16:f8:fa:92:47:77:4e:fd:5a:bb:c3:19:0c:ee:1d:04:04:
96:be:c4:e0:4a:17:a9:a7:98:c7:65:58:82:f3:88:44:27:8e:
97:b9:39:46:ba:bb:b8:d6:a0:67:c6:59:de:82:e6:3b:03:7e:
59:98:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:56 2026 by rpki-client