Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/F8lLLYWVSI74ivy60aPQofECQRA.roa
File: F8lLLYWVSI74ivy60aPQofECQRA.roa (raw, json)
Hash identifier: MJUJC5Z1+esxwlnP4FbTBUwmwGLHnrcmSj7KH127s0A=
Subject key identifier: 17:C9:4B:2D:85:95:48:8E:F8:8A:FC:BA:D1:A3:D0:A1:F1:02:41:10
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A1442716AD0E6B08BAD132F1C1930BA64A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/F8lLLYWVSI74ivy60aPQofECQRA.roa
Signing time: Fri 16 Oct 2026 09:59:34 +0000
ROA not before: Fri 16 Oct 2026 09:59:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 188.255.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:27:16:ad:0e:6b:08:ba:d1:32:f1:c1:93:0b:a6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 16 09:59:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17c94b2d8595488ef88afcbad1a3d0a1f1024110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:93:a3:fc:ec:a7:a9:f5:30:35:90:ac:31:
bc:4a:8e:f0:67:2d:16:fa:d8:05:38:94:0e:7b:d0:
9b:d4:b4:e8:b6:b6:2e:ba:52:d1:dc:6b:cb:10:3e:
0f:02:98:84:48:f7:6e:86:35:92:e6:1d:05:03:53:
e0:fa:aa:97:55:97:cf:70:da:5d:53:73:e5:99:09:
d1:e1:ad:f3:46:d5:a4:aa:da:20:09:0f:86:56:e2:
a4:ab:43:14:6c:1a:90:77:ba:6d:63:33:f9:b2:7f:
33:53:8f:3a:1a:6e:3b:22:6d:b3:ea:1d:2d:98:c9:
55:8a:0d:33:6f:a1:d6:a9:d1:cc:6b:60:05:ff:58:
3c:a3:5c:36:5e:eb:97:4d:29:99:08:f5:42:9c:27:
67:1b:ff:5f:27:cd:fa:ef:8b:2e:a6:0d:10:3c:31:
65:b1:40:7c:85:53:d0:c7:f5:06:09:e3:75:d2:e4:
2b:bf:c8:d3:b4:3b:fc:50:06:26:2f:cd:81:4a:a2:
ca:1e:94:4f:de:22:f2:f0:11:a9:33:a1:04:e5:c3:
31:73:72:f9:06:f1:2b:45:33:f9:03:33:8a:22:32:
e7:54:89:aa:ee:9a:d0:83:03:25:3b:cd:4f:31:c7:
c3:e8:c0:33:57:ec:5d:ed:ed:a8:56:1d:23:06:3d:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:4B:2D:85:95:48:8E:F8:8A:FC:BA:D1:A3:D0:A1:F1:02:41:10
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/F8lLLYWVSI74ivy60aPQofECQRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:dc:90:e1:0a:59:3b:2f:52:fc:3c:29:ca:9a:16:36:57:b6:
d0:2b:c2:57:15:5f:71:80:29:26:64:b6:5d:db:46:07:3f:c0:
36:24:b6:b0:b5:3c:ed:50:7e:1d:7a:d8:ee:72:5c:41:b3:ec:
d6:36:39:44:59:3c:76:83:1c:39:45:f8:c4:b2:81:fa:e9:05:
2c:d1:c2:bc:c3:98:ad:e2:21:b6:e2:cc:24:27:f7:7a:59:55:
71:ba:47:cb:2d:71:aa:41:7b:81:89:47:24:83:9e:f9:4c:4b:
3a:bf:a0:21:80:96:02:96:d2:86:26:70:d3:04:88:e5:11:ba:
03:34:6b:82:a3:f8:a2:fc:9e:97:b3:25:ba:0b:0d:db:19:39:
4f:ce:20:37:ff:c4:eb:ae:46:83:0a:cc:92:82:1d:f8:d2:2d:
97:ff:ab:32:e8:c1:77:0c:b3:81:0f:a8:d2:d3:d7:31:89:83:
43:03:10:f4:fa:55:20:d2:0f:ed:d4:c8:30:b3:08:93:15:86:
b2:44:8f:8a:4f:65:d6:0f:e3:0a:8b:21:b4:7a:8a:4c:18:b5:
9f:4a:95:47:67:9d:19:ad:cd:ff:51:7e:d6:ca:13:d6:93:4b:
b4:73:66:e4:77:56:e2:91:81:28:c5:7f:8d:24:90:cf:c1:a3:
66:cc:b4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:42 2026 by rpki-client