Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/F5GVfwwk4OV71rU3tmtkEBSDYF4.roa
File: F5GVfwwk4OV71rU3tmtkEBSDYF4.roa (raw, json)
Hash identifier: FT0BdUz07a4A5aMlPBVSiNY16s2gCOW9Y4KEp4Ng2G0=
Subject key identifier: 17:91:95:7F:0C:24:E0:E5:7B:D6:B5:37:B6:6B:64:10:14:83:60:5E
Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial: 01A16F84A2B0E5E05AB635758575A3B69204
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/F5GVfwwk4OV71rU3tmtkEBSDYF4.roa
Signing time: Sat 24 Oct 2026 20:05:25 +0000
ROA not before: Sat 24 Oct 2026 20:05:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58007
IP address blocks: 95.141.249.0/24 maxlen: 24
194.8.28.0/24 maxlen: 24
2a13:4380:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:84:a2:b0:e5:e0:5a:b6:35:75:85:75:a3:b6:92:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Validity
Not Before: Oct 24 20:05:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1791957f0c24e0e57bd6b537b66b64101483605e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:28:9e:4b:fc:d4:62:99:f5:88:40:61:1f:
35:ac:de:2d:f4:02:95:17:3b:0b:d8:23:c0:d6:f6:
47:75:5f:1d:c9:d6:e7:ad:96:35:1c:f9:d6:a4:fd:
0e:76:17:15:65:05:ce:f1:95:8f:75:d4:eb:39:61:
f1:78:c2:34:b6:77:bf:4e:17:23:0b:1f:44:c5:ad:
70:7c:8e:9a:22:f6:6e:55:79:a6:3c:df:da:c1:6c:
5f:81:37:17:a0:4b:9f:cb:a1:1e:b5:4f:ee:eb:3f:
9b:80:c0:5a:41:86:af:2d:11:c8:ae:f8:76:5b:2a:
c2:7d:7b:83:8c:e8:1c:0e:94:27:57:ab:b6:ae:f4:
47:41:fc:65:90:a5:26:b3:6c:97:94:b5:05:3d:74:
05:1f:f6:a9:ba:b4:fe:69:b2:01:51:45:7e:50:2f:
48:55:cb:5d:37:f3:ba:1e:05:d9:f4:cf:67:ba:2b:
80:df:03:4d:2b:36:93:90:20:08:c5:cc:24:85:4e:
76:9e:4d:a9:39:ff:8a:39:3e:2a:20:80:8d:4d:3d:
43:1a:f7:a9:16:2b:35:5e:e0:52:fe:66:d8:8d:a0:
24:1c:de:67:a4:0b:fe:14:b0:d8:dc:fe:9d:a1:0c:
5b:77:7e:ca:d4:90:da:d5:a8:6b:ee:17:ab:c3:42:
58:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:91:95:7F:0C:24:E0:E5:7B:D6:B5:37:B6:6B:64:10:14:83:60:5E
X509v3 Authority Key Identifier:
keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/F5GVfwwk4OV71rU3tmtkEBSDYF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.249.0/24
194.8.28.0/24
IPv6:
2a13:4380:10::/48
Signature Algorithm: sha256WithRSAEncryption
a1:99:07:c6:04:ae:b0:24:5f:99:f6:d4:09:e6:c3:84:cf:08:
bc:00:f6:70:e1:23:c6:2d:06:41:12:5d:c7:5a:ff:5e:d6:98:
2c:e6:cc:e2:90:68:c9:d2:c7:3e:5b:49:79:6a:6a:13:c6:00:
59:35:c7:01:d3:94:30:e7:b1:4a:3f:93:98:c5:43:3f:46:57:
97:8c:37:40:ee:e5:f6:87:13:8c:e0:63:24:2b:90:9c:60:12:
fd:43:81:67:53:31:aa:ac:25:e3:98:73:0f:a0:fe:f9:b0:06:
88:eb:fd:16:dd:55:2b:48:1b:9b:3f:87:45:f2:1b:f6:08:51:
18:af:53:45:c2:92:d2:9e:4d:18:42:d7:c3:34:4c:85:86:2d:
13:0f:5a:cd:c6:d1:2e:88:b1:5c:70:8b:a1:c0:cb:7e:06:1b:
4e:a1:b9:ba:9c:d1:3a:21:fa:0e:fa:e4:a7:fd:05:8d:6e:c1:
a3:50:30:3f:e7:c9:00:ca:52:4f:e5:e8:e3:e7:86:40:3a:59:
af:79:2a:49:9f:c0:61:fc:91:2b:ad:98:72:dd:48:cb:77:1b:
e4:77:3c:66:28:63:b1:32:30:28:20:b3:af:b7:b3:fb:63:c8:
0e:6e:09:4c:6c:67:e0:f1:a3:15:3e:e3:de:9a:95:11:11:da:
06:84:7e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:50 2026 by rpki-client