Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Flxeo-QZjgUNsEkPLw65-vxR_vg.roa
File: Flxeo-QZjgUNsEkPLw65-vxR_vg.roa (raw, json)
Hash identifier: OTzRclbffj5mGeuN5eDYGrb5RqTQ6bHopwT8kLrzmhk=
Subject key identifier: 16:5C:5E:A3:E4:19:8E:05:0D:B0:49:0F:2F:0E:B9:FA:FC:51:FE:F8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A143588F72611C63A0790D17E6DAD77597
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Flxeo-QZjgUNsEkPLw65-vxR_vg.roa
Signing time: Fri 16 Oct 2026 06:13:59 +0000
ROA not before: Fri 16 Oct 2026 06:13:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218568
IP address blocks: 45.154.247.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:58:8f:72:61:1c:63:a0:79:0d:17:e6:da:d7:75:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 16 06:13:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=165c5ea3e4198e050db0490f2f0eb9fafc51fef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:ea:fd:25:41:05:b7:6f:54:c6:03:58:ab:
65:20:49:32:6d:15:fd:5d:27:ac:d7:89:a5:a3:b2:
01:2a:31:64:19:53:61:22:b2:41:09:db:d1:3d:ff:
00:3b:c2:f1:16:1d:43:58:50:d1:6c:95:00:b0:ba:
56:30:2c:65:c7:7f:f3:ce:5c:1a:d2:ef:ee:51:8f:
e6:a9:0d:b0:a9:82:3c:1b:2b:79:69:d8:65:ff:a3:
61:cd:63:b0:32:ab:ab:79:21:0a:3b:73:cc:41:38:
89:a5:7c:f9:88:1d:41:3b:29:9e:90:fe:20:16:4e:
56:8a:7f:f8:d6:74:8b:97:11:b1:87:2e:b4:71:a8:
5f:8e:0b:72:16:fb:5e:a9:ad:0f:97:c0:59:4b:73:
69:26:1b:40:ff:2b:72:8b:10:68:b4:30:31:bb:18:
4a:7c:96:fd:6b:c9:23:9c:7b:67:71:98:c5:05:77:
f0:b2:e6:ee:14:b2:df:7e:f9:87:aa:97:ca:9d:a5:
9b:1f:0d:9a:e0:14:eb:77:bd:ba:71:ff:e3:45:ea:
ee:5a:39:ac:99:a5:39:c1:64:c9:8e:ce:a6:94:95:
6c:0c:0e:6c:02:59:40:ca:8a:13:88:88:8a:de:ea:
54:dc:c0:1b:db:3b:2a:07:00:a8:20:02:3c:87:ed:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:5E:A3:E4:19:8E:05:0D:B0:49:0F:2F:0E:B9:FA:FC:51:FE:F8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Flxeo-QZjgUNsEkPLw65-vxR_vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.247.0/24
45.158.197.0-45.158.198.255
Signature Algorithm: sha256WithRSAEncryption
27:a5:59:7c:ad:38:a8:ba:12:38:91:fb:d6:54:cf:3b:c6:e6:
95:dd:30:21:8e:c0:97:79:fb:4b:6b:56:40:6b:36:f6:b4:6b:
58:96:c4:af:a7:af:36:4e:27:e5:81:9e:e9:e6:ac:19:e1:59:
0b:e2:75:46:18:30:b5:e1:52:f2:af:42:08:dd:31:40:34:47:
30:2a:a3:54:e1:b9:02:c4:dd:82:af:e3:94:9c:b4:55:78:c4:
4b:f7:40:71:fc:41:8c:5f:f2:53:a7:4c:ca:0d:21:2f:2f:cc:
62:00:23:24:10:03:f4:6b:56:64:88:35:60:d5:93:90:a8:2d:
f5:a4:6a:84:69:47:90:7f:b0:04:88:0c:65:db:a0:42:5f:dc:
e4:3f:c1:aa:fb:c1:a2:45:f7:30:70:2e:bd:6b:21:43:f5:3f:
66:5a:60:06:e3:86:62:31:c1:d4:1a:01:2c:4c:eb:89:88:74:
93:ed:f1:e6:8d:f0:86:aa:c4:05:ca:67:73:67:ba:89:38:1d:
b0:77:87:7b:0f:84:13:5a:ce:5b:6a:09:cb:8e:25:89:d5:5f:
71:3b:7b:01:a5:db:80:8a:64:8d:1a:2e:84:0c:a9:ed:c5:8e:
d0:a7:5b:35:99:3a:bc:42:a6:dc:86:cd:6a:d1:12:b2:79:ff:
98:0a:1d:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:32:08 2026 by rpki-client