Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/f1FqNVHjRy75a44Ls5S6K_XKt-A.roa
File: f1FqNVHjRy75a44Ls5S6K_XKt-A.roa (raw, json)
Hash identifier: 6rknTr51RnO+GiHifjDGnflb1MYEKxjySjkDfErqiuE=
Subject key identifier: 7F:51:6A:35:51:E3:47:2E:F9:6B:8E:0B:B3:94:BA:2B:F5:CA:B7:E0
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A1441DEE312E7CA85C6E711F0EFF8D2308
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/f1FqNVHjRy75a44Ls5S6K_XKt-A.roa
Signing time: Fri 16 Oct 2026 09:49:34 +0000
ROA not before: Fri 16 Oct 2026 09:49:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 187.7.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:1d:ee:31:2e:7c:a8:5c:6e:71:1f:0e:ff:8d:23:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 16 09:49:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f516a3551e3472ef96b8e0bb394ba2bf5cab7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:91:4f:33:5f:6f:5a:89:6f:10:93:6d:42:
a5:17:f5:3c:65:50:1a:90:c8:13:06:70:d0:3c:79:
d1:3f:66:75:7b:10:45:79:29:c2:2c:d3:f3:32:4f:
55:26:bb:3c:56:ac:b9:f3:c8:89:46:04:e7:ad:dc:
c1:dd:a0:99:02:69:b9:91:88:1e:72:4e:04:2b:b8:
33:2c:f9:ea:08:7a:d3:3b:a3:23:cc:f9:7d:39:f4:
d4:8e:90:49:33:b0:11:d2:c3:7d:12:da:55:13:de:
67:f0:6a:e0:6a:cc:7b:dc:a1:01:05:27:de:c3:5c:
b4:0a:01:d7:01:65:5b:79:0a:7c:22:85:b2:8b:cd:
67:a9:cf:37:34:cf:d1:d2:bc:31:14:34:d8:dc:a9:
17:70:c1:9a:86:7a:dc:af:b2:8e:1a:a9:a5:7f:af:
61:c1:1c:34:a1:a9:22:7e:0a:ab:ce:08:77:9e:4b:
a4:6d:e6:34:a5:5a:e0:d2:5b:25:27:5a:8f:b9:e0:
40:a9:ac:8d:9a:99:65:cc:49:57:cd:68:36:5c:c7:
1c:70:52:fa:7c:6b:cf:15:4d:a3:c0:36:13:3e:e1:
e0:f0:df:b9:49:33:a3:b5:68:d0:5b:ca:f5:e3:f4:
72:25:64:28:42:62:bd:b2:82:bc:5e:0e:d9:f6:26:
5b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:6A:35:51:E3:47:2E:F9:6B:8E:0B:B3:94:BA:2B:F5:CA:B7:E0
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/f1FqNVHjRy75a44Ls5S6K_XKt-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.7.204.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ff:dd:7d:ef:92:b4:69:39:e9:cb:aa:35:4d:ab:e3:e8:14:
c0:00:10:45:a4:72:e9:c6:bc:19:94:4e:b8:6e:df:02:f0:a8:
0b:20:65:02:7c:2c:d7:c6:c3:fe:bc:ae:3c:59:45:39:5e:3f:
cb:13:71:97:55:f6:2a:0a:1c:3b:44:e8:25:85:66:61:3f:88:
8d:30:39:9a:ea:d0:a6:f2:b3:1d:f2:69:68:6c:1b:88:cc:ba:
5e:d3:1a:59:4b:18:b6:12:80:26:b9:9e:40:db:71:4a:98:b1:
53:b3:26:b6:4e:89:7a:ba:9c:86:e2:46:3e:c7:e8:cf:3e:de:
00:44:30:fe:65:c3:90:72:bb:b5:b7:69:14:0e:48:a9:35:69:
fd:b3:7b:64:d7:97:cf:56:01:be:e8:8e:b3:d0:33:84:7d:14:
03:96:ad:be:34:b2:64:8d:ad:9c:17:79:98:4f:06:0c:9b:2a:
01:0b:8d:aa:49:62:a2:92:bd:f2:b3:38:6b:32:db:22:bb:19:
ab:96:ef:a4:c7:a9:12:96:22:16:b3:c3:c8:35:a8:b3:fa:ff:
f3:89:15:84:24:99:67:46:28:7b:e1:1b:a0:d9:48:90:42:76:
1d:c5:7f:c8:44:9c:af:9a:76:78:95:05:8c:44:ec:70:ec:ed:
91:6a:1b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:11 2026 by rpki-client