Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fweim_sRFAKny3hyXfy3wfXsJ4M.roa
File: Fweim_sRFAKny3hyXfy3wfXsJ4M.roa (raw, json)
Hash identifier: MkCaUThiYG6XLrGX9Rys2SYB1u9t7D/J2UlhC64Zwno=
Subject key identifier: 17:07:A2:9B:FB:11:14:02:A7:CB:78:72:5D:FC:B7:C1:F5:EC:27:83
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F405F252170B4C80871A1402093C3677C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fweim_sRFAKny3hyXfy3wfXsJ4M.roa
Signing time: Wed 08 Jul 2026 06:16:45 +0000
ROA not before: Wed 08 Jul 2026 06:16:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213893
IP address blocks: 185.218.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:5f:25:21:70:b4:c8:08:71:a1:40:20:93:c3:67:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 8 06:16:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1707a29bfb111402a7cb78725dfcb7c1f5ec2783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:08:81:ea:81:95:8c:d5:2a:40:de:63:d2:
aa:31:a5:80:b7:a6:ee:15:72:96:51:2f:57:25:83:
18:3e:e1:4f:f3:da:e4:8f:c9:e3:bb:b3:73:30:ef:
de:bc:38:e4:ac:c9:16:44:eb:b6:77:89:cc:7c:96:
6e:51:1f:7d:14:2a:46:ce:05:d3:c1:c3:c1:d7:ac:
20:84:9c:3c:2a:9a:ce:0e:2d:d0:da:e5:45:7e:bf:
e5:3d:87:80:19:60:6b:13:9a:af:be:0f:f1:e4:73:
42:da:e3:00:9b:f9:8b:48:00:72:f1:8a:25:02:f5:
28:92:14:47:1d:58:98:a4:51:50:46:7b:08:13:67:
4d:6b:e3:57:9c:91:56:a9:bc:24:99:b6:69:92:a3:
f1:a1:7c:9f:75:e0:df:41:c2:9e:48:2e:a9:0d:a7:
f0:85:cd:4a:c8:65:b6:c6:49:e8:a7:88:d9:8b:39:
a8:3d:3e:17:80:8d:b2:ca:06:c7:a7:b2:14:7d:22:
12:bc:4a:f7:a4:18:15:6d:7a:26:33:b7:50:07:fe:
b0:2e:80:97:e5:5b:26:d9:7b:d1:ec:51:44:c7:f2:
2c:f7:2b:2e:c0:17:ad:08:b8:01:eb:d9:f3:d6:ce:
71:65:d1:5b:00:00:f0:33:3c:b8:50:73:bc:56:c2:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:07:A2:9B:FB:11:14:02:A7:CB:78:72:5D:FC:B7:C1:F5:EC:27:83
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fweim_sRFAKny3hyXfy3wfXsJ4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.137.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b5:a5:96:f1:bf:b0:3d:70:87:90:d2:91:bb:6c:a9:1e:67:
a6:fc:4b:6e:84:1a:ee:60:6a:57:d3:b9:71:c4:eb:81:18:18:
ac:ef:be:c2:19:db:12:7d:22:95:96:92:c2:2a:96:1c:6e:56:
ec:4d:45:1a:62:c3:1a:4a:14:62:1f:2c:83:04:c5:fe:51:8d:
96:ea:bd:9c:c8:00:5a:86:59:9a:56:8a:cb:db:db:47:a9:06:
61:3c:f2:0d:6c:53:48:08:38:fe:87:05:9f:a7:24:26:cd:0e:
ce:ce:b4:5f:2b:cf:61:59:9a:8f:3f:9a:75:11:3e:81:51:a0:
09:7e:03:40:7e:e7:18:0d:86:4a:0f:de:7a:34:4f:b5:a0:a4:
c0:2c:78:ab:eb:88:35:dc:11:ed:3f:0b:25:96:e0:3a:2b:37:
03:79:dd:d0:93:36:ae:5b:2c:a6:8f:db:6b:95:9d:3d:f9:4e:
10:f5:0e:ae:8b:42:6e:44:a7:71:5b:6a:1c:0e:33:0f:e1:75:
63:2a:25:d1:9c:c3:98:c8:01:8c:70:14:1b:99:6d:1a:03:8b:
8c:13:e4:be:27:c6:d5:aa:f8:08:54:09:27:f8:be:85:a0:92:
33:68:70:d2:86:ce:81:bb:60:ee:d4:89:98:ab:93:69:96:b5:
5c:30:2b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:14:08 2026 by rpki-client