Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-hNwQr6CGVGSbx2516sJ_kvth3g.roa
File: 1-hNwQr6CGVGSbx2516sJ_kvth3g.roa (raw, json)
Hash identifier: I5L8Pw2ysc0UkaSScR+qmLC42XIeDaqf0CB7ya0zpzY=
Subject key identifier: FA:13:70:42:BE:82:19:51:92:6F:1D:B9:D7:AB:09:FE:4B:ED:87:78
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A10C1F3E801FF510958AE3B3C12678328D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-hNwQr6CGVGSbx2516sJ_kvth3g.roa
Signing time: Mon 05 Oct 2026 12:52:16 +0000
ROA not before: Mon 05 Oct 2026 12:52:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151576
IP address blocks: 89.47.115.0/24 maxlen: 24
93.113.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:1f:3e:80:1f:f5:10:95:8a:e3:b3:c1:26:78:32:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 5 12:52:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa137042be821951926f1db9d7ab09fe4bed8778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:15:57:c6:fd:00:66:11:ff:b0:1a:ea:08:
46:8d:f8:84:d5:43:0b:7b:80:1b:d2:f2:9b:f1:d5:
45:c3:f3:78:bc:74:07:2e:eb:2d:ef:7f:f9:84:75:
4f:1d:0f:2f:12:76:14:03:bd:9c:bd:11:a0:db:ea:
58:8a:4c:b2:c7:e3:d0:af:a4:41:05:1f:08:ba:4f:
c9:03:c5:91:59:8e:26:86:79:c0:85:76:04:6f:03:
af:2b:e8:ac:28:2d:ae:12:7a:01:8b:cc:c9:ae:a0:
bb:7e:c0:3a:2b:11:d5:60:7c:8c:a3:d8:e0:26:3e:
be:a6:d7:c3:1f:5c:64:21:b2:3f:36:00:db:ae:30:
73:24:5d:64:02:38:c1:1a:3e:26:19:50:67:5b:a2:
bf:3c:fc:d1:6c:21:52:12:39:80:3e:d4:88:b5:41:
3f:7a:52:73:5f:5d:dc:be:dc:3a:4c:05:fd:ba:90:
e3:be:5a:13:08:21:18:80:22:81:f4:83:48:2e:8b:
e0:36:d9:b9:5f:02:70:28:60:a5:e0:f5:5e:e2:1a:
e0:a6:fc:fd:b6:b0:4e:a7:a4:50:75:1a:1e:f0:84:
2d:c1:06:08:d5:61:25:3b:d5:04:46:e9:07:c4:83:
30:e6:12:7a:21:57:94:10:d3:2f:78:3a:08:66:6c:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:13:70:42:BE:82:19:51:92:6F:1D:B9:D7:AB:09:FE:4B:ED:87:78
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-hNwQr6CGVGSbx2516sJ_kvth3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.115.0/24
93.113.179.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:12:33:b4:e2:cc:c7:6b:1c:88:e9:38:0b:4e:15:e8:3b:f8:
53:e5:03:ad:e8:55:ce:38:ed:bb:5d:7c:d4:2a:24:cf:68:99:
f0:1a:74:a4:73:06:77:e2:0f:69:b5:8e:cd:09:5e:e5:46:71:
14:74:39:b4:21:43:72:cc:01:f5:8a:ef:fb:f0:5a:ff:7d:7e:
ba:58:a6:2c:11:51:5b:c1:05:e3:f4:f2:f2:9a:29:4b:a0:88:
74:43:a9:13:fb:bf:84:b4:cb:25:25:56:e2:19:a4:cd:12:b2:
3f:11:7d:10:7b:2e:b9:38:44:b0:ae:66:c3:12:47:5f:eb:14:
97:40:42:fa:24:19:15:4d:30:1b:d7:08:d5:08:b8:7a:5e:68:
36:b0:9a:4a:c5:eb:e4:a6:a2:a1:e0:33:cf:c0:95:0b:37:38:
21:1f:34:ee:94:eb:af:77:fd:81:2a:f3:de:f4:4b:34:c0:01:
ba:a4:23:bd:4c:61:71:c9:a7:6d:f9:36:1c:45:3e:ef:38:20:
14:53:c5:37:0b:3f:f6:86:8e:9c:76:ad:9e:c9:26:f4:4e:1d:
2d:69:d3:af:31:35:61:45:b8:dd:4b:28:ab:d1:6b:f4:4c:aa:
ca:46:77:f5:04:b7:7a:ab:e7:9e:ce:a4:a8:8a:3f:85:ed:ad:
c1:0c:9f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 18:29:11 2026 by rpki-client