Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/1-fikA3vP0ommG_EBltaoHNIpgDs.roa
File: 1-fikA3vP0ommG_EBltaoHNIpgDs.roa (raw, json)
Hash identifier: oh7oM3CxqgMh9gljvtXl1kCIjC7xs5pXDtFcd5GBFnA=
Subject key identifier: F9:F8:A4:03:7B:CF:D2:89:A6:1B:F1:01:96:D6:A8:1C:D2:29:80:3B
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F6990800A0F379FF3612BA17F2B43320
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/1-fikA3vP0ommG_EBltaoHNIpgDs.roa
Signing time: Thu 01 Oct 2026 08:33:39 +0000
ROA not before: Thu 01 Oct 2026 08:33:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200900
IP address blocks: 195.184.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:99:08:00:a0:f3:79:ff:36:12:ba:17:f2:b4:33:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:33:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9f8a4037bcfd289a61bf10196d6a81cd229803b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:e5:64:5e:57:0f:56:7b:39:bf:eb:7e:42:
32:b8:c3:9f:91:3a:5c:33:6f:fd:c6:9d:95:fb:ea:
1a:1c:c4:de:94:0c:58:c2:fd:fe:48:8b:17:90:29:
f7:40:0a:bd:fa:81:05:4c:1b:77:66:fa:0b:dc:65:
ca:0e:c7:7b:b1:2f:26:ff:bb:07:1c:52:45:66:6f:
64:49:b1:d9:30:e5:1f:cf:14:a0:4d:b9:5c:6c:eb:
5c:c3:cb:5d:7e:ce:d3:b8:61:34:68:d7:15:92:42:
66:d6:61:91:93:09:2b:45:b3:3e:a9:2c:3e:7f:45:
2e:24:da:d6:e8:d4:73:ec:c6:6c:83:96:34:99:28:
10:6a:0e:0a:cb:55:bb:78:e0:c1:d8:47:b5:e1:9f:
be:07:a8:46:31:81:41:b9:44:55:b4:ea:a0:36:31:
a8:73:26:1e:bc:31:a0:75:24:61:d9:a5:8d:87:7c:
51:d7:9a:37:87:ff:7c:4d:85:4a:4a:98:ec:43:f4:
74:b1:63:92:1e:82:87:b5:08:76:fe:a0:d3:1b:bb:
7d:f9:49:6d:f9:6a:23:d3:d5:2a:3b:43:e1:66:6f:
37:f4:b3:03:50:cf:1e:83:25:93:3e:26:85:37:32:
23:bd:29:6f:85:1f:09:5d:8a:09:44:37:cc:75:6c:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F8:A4:03:7B:CF:D2:89:A6:1B:F1:01:96:D6:A8:1C:D2:29:80:3B
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/1-fikA3vP0ommG_EBltaoHNIpgDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.27.0/24
Signature Algorithm: sha256WithRSAEncryption
47:96:75:a5:04:26:1e:1f:e9:52:1e:bd:b4:be:88:08:c3:05:
d8:f8:18:df:e2:18:98:eb:d9:63:9f:bc:64:dd:29:a7:db:49:
1c:7c:40:18:eb:06:92:76:59:94:a3:10:a3:1b:7f:eb:44:c2:
ba:68:24:4d:7f:b2:c9:21:bd:f7:99:64:49:8c:68:e1:cb:bd:
68:3c:5c:46:7e:09:2c:3f:33:d9:43:1a:54:aa:26:c0:8d:1c:
6f:ea:99:83:bc:6d:bc:d9:5c:66:be:4e:b9:54:ae:26:93:bb:
21:67:3d:77:b7:8b:c2:21:14:90:86:51:7f:9a:ea:b6:9b:2e:
1f:a7:2d:9e:54:eb:33:a0:dd:67:34:3b:d9:40:ca:57:5c:62:
2e:30:c7:8b:9a:c8:23:d7:4f:9d:e0:14:d7:c2:44:fa:fd:82:
a2:df:06:e9:43:45:29:48:1b:27:36:39:e8:fb:7a:9c:be:c8:
5c:e3:15:a0:6e:1e:dd:3e:fb:cf:c6:55:0e:a3:a3:56:34:98:
84:bf:9c:f7:e7:fe:38:3e:47:f1:fe:b2:4e:89:b6:54:9a:73:
63:22:a4:35:7b:f4:47:72:64:e8:39:40:1f:6c:c2:13:4a:b0:
5b:2d:08:f4:49:ab:5e:c8:de:3c:02:49:42:7a:33:85:c5:93:
5e:9f:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:29 2026 by rpki-client