Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/FOM7SMCIdSk1sNYkrSzcC-NRc3I.roa
File: FOM7SMCIdSk1sNYkrSzcC-NRc3I.roa (raw, json)
Hash identifier: s5cCFx+CCrPJD1l6DvZG8zTpmiiq/2XngphfCt6cV2Y=
Subject key identifier: 14:E3:3B:48:C0:88:75:29:35:B0:D6:24:AD:2C:DC:0B:E3:51:73:72
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01A144F255560A55CE5356983236AEF69056
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/FOM7SMCIdSk1sNYkrSzcC-NRc3I.roa
Signing time: Fri 16 Oct 2026 13:41:34 +0000
ROA not before: Fri 16 Oct 2026 13:41:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 45.136.0.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:f2:55:56:0a:55:ce:53:56:98:32:36:ae:f6:90:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Oct 16 13:41:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14e33b48c088752935b0d624ad2cdc0be3517372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:2f:4c:42:ef:c0:80:75:fe:d2:06:bd:b4:
bc:90:2b:3f:f8:64:c8:15:7e:7d:18:1e:d5:ca:82:
44:84:93:d6:4a:e5:97:89:32:52:cc:b7:8b:e0:8d:
d2:75:ec:05:24:95:61:60:11:ae:87:50:2d:35:13:
89:c1:82:4c:8c:8b:35:57:5f:6c:ce:3e:8d:2e:7a:
3e:6b:aa:d7:10:d4:53:23:b4:19:ac:f3:9c:18:27:
b5:a9:35:87:6f:e4:82:ac:87:67:06:ec:8b:92:c7:
e7:07:3a:75:e4:8d:45:d6:fe:86:74:e1:c7:da:bf:
7e:4e:3b:9d:7c:10:72:e8:ec:4b:25:e9:7b:25:a5:
88:81:32:b0:a8:a5:9f:f7:f0:23:8c:9a:bb:41:58:
c4:3f:ca:99:79:6f:e7:c9:92:d3:7d:ef:03:6f:45:
1b:4c:20:b9:ac:5f:78:a0:54:37:36:d3:7f:f5:d9:
19:a8:c1:17:86:46:dc:e4:2d:df:11:29:0f:cd:07:
d6:7f:c6:3e:92:2a:7d:fd:99:c5:e2:01:ac:b8:0e:
dc:e8:4c:0b:41:3a:4b:db:d9:54:a1:b2:6a:9c:fe:
08:80:e2:6b:e4:8f:a3:bb:5a:b9:fb:fd:fb:ab:c9:
6b:8a:be:af:21:c5:7f:f8:47:58:d1:f6:0c:d9:b8:
d9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E3:3B:48:C0:88:75:29:35:B0:D6:24:AD:2C:DC:0B:E3:51:73:72
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/FOM7SMCIdSk1sNYkrSzcC-NRc3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/24
185.211.49.0/24
194.124.66.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:79:c3:a3:1d:ab:7e:6a:83:81:8f:f6:11:b6:a6:cb:a3:35:
c9:38:d5:75:a9:ab:e3:c0:74:03:7f:69:69:aa:41:d4:2d:29:
8f:93:e2:ba:00:32:f9:c9:e7:e6:0f:ca:b0:6b:e0:13:4e:ce:
24:f2:fa:a9:69:1d:ba:ed:9f:c5:7f:9a:1f:e1:44:97:da:96:
ba:0e:4c:95:2a:39:55:c7:64:40:29:cc:82:aa:4c:1f:c9:df:
1c:ee:f3:05:5d:89:b7:c2:da:fd:65:ba:0c:ea:b8:96:59:95:
22:3f:e6:06:d1:e2:56:c5:b2:da:d6:2b:84:9a:ae:d7:14:db:
a4:3c:c4:c5:d1:7e:9e:5f:13:19:74:29:50:76:fe:34:34:d3:
0c:27:5d:b2:9c:1a:a3:58:97:9f:bc:84:03:be:32:26:6d:57:
75:51:12:27:e8:ec:e8:5f:05:56:8a:af:7b:98:d5:de:08:95:
33:e4:27:4b:9d:6f:09:15:55:5b:6c:ff:cd:a3:f5:56:a4:de:
bc:fd:46:a3:d4:dc:9b:5a:f7:fe:c8:30:37:a6:15:75:ac:3b:
06:22:e0:8b:60:d5:83:67:d8:ac:46:73:83:ee:b9:7d:f1:05:
d2:54:38:00:25:33:5e:cd:b5:f4:b2:8d:e5:10:8d:b9:2e:2f:
3e:8f:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:14:36 2026 by rpki-client