Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/_PWI4Pg_xtU3q9ndOYXBdr6ITtg.roa
File: _PWI4Pg_xtU3q9ndOYXBdr6ITtg.roa (raw, json)
Hash identifier: UoG6A/7sJnnLJpmYHSSquZFUnlzXcAk+Jue/1QWwS4U=
Subject key identifier: FC:F5:88:E0:F8:3F:C6:D5:37:AB:D9:DD:39:85:C1:76:BE:88:4E:D8
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 01A15ED86997FD8CCB013ED6233B1AEC8D65
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/_PWI4Pg_xtU3q9ndOYXBdr6ITtg.roa
Signing time: Wed 21 Oct 2026 14:23:23 +0000
ROA not before: Wed 21 Oct 2026 14:23:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 144.249.64.0/24 maxlen: 24
144.249.65.0/24 maxlen: 24
144.249.66.0/24 maxlen: 24
144.249.67.0/24 maxlen: 24
217.149.108.0/24 maxlen: 24
217.149.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:d8:69:97:fd:8c:cb:01:3e:d6:23:3b:1a:ec:8d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Oct 21 14:23:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcf588e0f83fc6d537abd9dd3985c176be884ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:5f:2f:8f:22:9e:93:38:ee:5c:dd:5f:00:
b3:80:69:06:e8:5a:f1:c7:a5:eb:59:ad:b0:fa:f4:
d4:81:e6:4b:01:76:9f:92:4e:f9:6d:2c:0b:aa:2d:
0d:3c:0e:89:4c:b2:64:03:15:64:10:e8:a5:0a:8d:
22:db:4a:e2:b4:b6:9f:28:b2:cc:02:7a:60:a4:4a:
f6:fb:98:d9:1c:85:34:8a:9e:b4:15:00:1e:71:c2:
e1:22:fb:33:b6:35:06:c7:d4:44:dd:20:3d:de:95:
96:af:0c:ba:89:da:81:49:6d:a0:78:3f:f7:8c:af:
42:22:63:12:65:64:83:2f:0e:75:b8:b8:0a:a1:9d:
ff:5e:54:89:32:e2:5f:3f:10:10:49:39:2f:45:e5:
58:69:42:24:9c:9b:cb:e1:59:44:3d:b7:d8:36:a7:
a3:6b:2e:b1:ea:36:95:98:31:8c:be:93:50:31:23:
b3:da:c2:f0:9c:31:6a:43:a5:55:61:4d:98:53:b4:
9c:ba:bf:e6:8c:72:17:93:8d:46:45:f7:80:78:79:
15:59:c7:96:6e:03:ba:f3:a5:51:88:96:43:ad:94:
48:69:7c:30:e8:f1:89:56:8e:77:82:80:0f:3b:e7:
10:8b:72:ba:6e:10:31:96:14:88:90:f4:85:ba:3b:
83:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F5:88:E0:F8:3F:C6:D5:37:AB:D9:DD:39:85:C1:76:BE:88:4E:D8
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/_PWI4Pg_xtU3q9ndOYXBdr6ITtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.249.64.0/22
217.149.108.0/23
Signature Algorithm: sha256WithRSAEncryption
52:24:8c:d6:5c:d5:b5:ce:2e:17:ae:9c:42:42:02:37:49:2e:
a7:b9:75:41:22:07:f7:4b:ad:aa:e6:01:bf:96:a1:e8:b9:dd:
87:6b:12:5a:62:99:1d:37:c2:81:7f:a7:fc:a1:05:d1:f6:6f:
64:06:13:17:40:ba:af:86:b9:c4:08:a4:d7:64:57:47:90:5f:
9c:8e:d7:8c:ca:3e:93:a7:c0:16:80:e2:33:29:06:f6:c1:c2:
af:50:78:d0:27:50:64:7c:6e:9b:f3:6a:98:f6:45:0b:4f:6c:
2f:4d:96:ed:92:83:cf:b9:dc:c4:1c:35:a6:22:f1:d1:05:1e:
29:35:b0:82:b3:23:cb:2c:b2:66:0b:66:5c:34:2e:3a:da:54:
65:00:b7:85:66:8d:54:e7:ce:88:b7:26:14:d5:a2:84:02:a7:
43:53:79:76:7b:75:05:b2:dc:f1:9e:0e:d1:fa:4d:ed:1f:85:
b9:7a:f8:db:20:5d:a7:64:45:e7:b6:08:01:4f:7a:db:a5:9a:
4c:9c:23:f0:bb:b0:28:d2:f7:2b:16:50:57:c3:4d:30:c7:80:
81:b3:fc:8f:1d:cd:6b:12:e7:d0:65:77:64:f0:eb:6b:5f:78:
19:a5:88:7f:90:bc:09:9e:b0:35:0e:f3:24:e4:53:42:fe:15:
50:79:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:26:24 2026 by rpki-client