Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F0telostDiFabb_7TMz60QLXjx8.roa
File: F0telostDiFabb_7TMz60QLXjx8.roa (raw, json)
Hash identifier: +7B+orfnoB/xubUv0ro5K4WsXxe7nR90L4rWG14Qonk=
Subject key identifier: 17:4B:5E:96:8B:2D:0E:21:5A:6D:BF:FB:4C:CC:FA:D1:02:D7:8F:1F
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A038473C95AEEDE77E5609931A8090BF47
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F0telostDiFabb_7TMz60QLXjx8.roa
Signing time: Tue 25 Aug 2026 09:36:27 +0000
ROA not before: Tue 25 Aug 2026 09:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201398
IP address blocks: 91.226.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:47:3c:95:ae:ed:e7:7e:56:09:93:1a:80:90:bf:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 25 09:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=174b5e968b2d0e215a6dbffb4cccfad102d78f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:4a:18:01:cc:72:a3:71:3d:2b:b7:19:42:
b1:c2:09:ba:1a:97:7b:79:fd:00:aa:84:24:e5:c6:
60:e2:f6:0e:3d:1c:01:81:42:4c:78:2d:98:fd:01:
53:4d:47:d2:f3:91:0b:9c:8b:5b:9f:fe:8a:64:00:
e4:bd:da:be:04:77:26:e7:ff:9b:66:12:d2:19:42:
63:61:76:df:b4:71:17:de:eb:58:5e:9e:32:39:49:
14:e7:6a:56:5b:ec:a7:eb:57:bd:99:64:20:6e:50:
a7:72:ea:92:23:fd:bd:2b:fa:c8:54:d7:76:2e:1d:
d6:22:c2:02:fd:2f:92:78:71:a7:dd:01:92:a1:f1:
16:73:14:86:b3:b6:f4:92:47:13:b4:1f:58:c2:d3:
ac:36:4f:75:4f:74:46:8f:65:ad:e9:e2:07:92:04:
6e:98:a0:26:2d:53:aa:f7:b6:0e:80:81:fc:84:3b:
1e:23:78:00:43:cf:cd:e5:b1:ee:3c:3f:b2:9d:e1:
e5:97:cf:3e:b8:50:20:6b:ee:8b:47:9a:a5:a0:81:
f8:af:6b:6c:0f:83:c3:9a:0b:6f:fb:9e:0a:8a:c5:
08:4f:10:bd:93:a5:70:98:d0:c9:62:a7:d5:dd:84:
29:2b:3b:1a:6d:35:d9:d3:d5:a8:00:8c:9e:35:0d:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4B:5E:96:8B:2D:0E:21:5A:6D:BF:FB:4C:CC:FA:D1:02:D7:8F:1F
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F0telostDiFabb_7TMz60QLXjx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:4b:9a:42:33:a8:e2:4f:4f:ee:92:19:9d:ed:5d:69:f0:17:
af:54:15:dc:08:b5:4e:47:6e:23:f8:bc:11:dd:fe:9d:56:03:
98:b5:c5:2a:73:65:81:ea:b3:09:2d:4c:69:59:58:c2:32:b7:
a6:4c:84:b6:83:71:ad:a1:7e:6b:2a:ac:45:f5:ab:07:01:a2:
67:b0:80:5e:cc:90:75:5d:91:73:94:ee:6f:ff:ae:1a:f8:41:
44:10:7c:cf:c2:49:43:71:c2:df:f2:4c:a0:54:cc:f4:03:97:
15:32:8d:03:66:ce:23:1b:21:d0:79:fc:09:4e:f6:6c:78:06:
2b:d6:3f:78:d3:30:75:e4:69:68:aa:88:1a:66:be:56:a6:7d:
43:2d:0b:f0:e9:75:76:f0:57:b3:1d:1a:97:f8:9e:7e:80:b6:
56:78:0e:cb:9c:13:86:5c:e0:06:8e:c5:6c:4f:2b:b1:cb:d6:
d0:21:06:44:c5:23:8c:85:ee:0b:d3:7f:1a:37:42:00:f7:78:
f7:18:a3:8d:43:a1:6c:97:97:bc:4b:03:c5:03:a3:eb:d6:b6:
1a:26:51:f1:3d:2c:06:41:f0:00:39:34:56:52:f0:d5:b4:2d:
62:d6:69:bd:85:7d:f8:66:2f:61:19:cd:06:c7:8a:fe:8c:51:
b9:11:d5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:59 2026 by rpki-client