Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/fhwkrEIM0kPjWHsINAEPV7_mUjo.roa
File: fhwkrEIM0kPjWHsINAEPV7_mUjo.roa (raw, json)
Hash identifier: G9A29C7TS3c9CMWZgBAcGd7GrRdztq9N/K/kquW1McI=
Subject key identifier: 7E:1C:24:AC:42:0C:D2:43:E3:58:7B:08:34:01:0F:57:BF:E6:52:3A
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A145BDFCB6FC691D85F70DD47FCA1A4770
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/fhwkrEIM0kPjWHsINAEPV7_mUjo.roa
Signing time: Fri 16 Oct 2026 17:24:01 +0000
ROA not before: Fri 16 Oct 2026 17:24:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206787
IP address blocks: 45.140.4.0/24 maxlen: 24
194.28.156.0/24 maxlen: 24
194.53.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:bd:fc:b6:fc:69:1d:85:f7:0d:d4:7f:ca:1a:47:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 16 17:24:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e1c24ac420cd243e3587b0834010f57bfe6523a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:1e:14:98:1d:59:af:bc:a8:07:e7:1e:cf:
bb:2c:7f:64:40:4e:5c:ba:4a:4a:12:3c:25:ab:55:
b2:47:a9:b6:2c:ea:c6:3e:68:c1:11:3b:8e:fb:27:
54:94:16:7d:55:47:21:cb:d3:11:b5:1c:22:7c:e7:
52:72:b1:37:3b:42:97:ca:8d:37:12:ea:3c:42:9c:
6e:fb:28:1c:cb:be:17:4e:ce:70:19:67:c1:64:3e:
6a:a3:d8:ab:b7:40:9f:43:ca:ec:dc:90:92:06:b2:
b8:33:53:43:86:68:54:53:06:75:da:45:ce:5c:1c:
20:76:47:4b:54:fa:1a:b3:a3:15:18:b3:62:94:0f:
ce:59:ed:f3:71:eb:d5:06:e2:21:99:c1:16:68:0c:
6c:7c:d2:05:fd:7c:28:ac:20:13:97:9a:84:41:b7:
f4:89:b8:2c:03:1e:3d:fa:27:c8:b0:e5:92:48:e5:
d1:d4:aa:43:b5:bc:78:96:ef:9c:86:7a:14:f0:5a:
1e:e7:1c:5d:b1:32:57:d6:d3:e4:d4:22:eb:b9:5d:
b8:15:89:38:eb:5a:6b:75:a3:f7:65:50:cc:a4:ae:
d9:a3:41:d1:2e:64:8b:95:1a:d4:12:f9:fd:52:f6:
be:0d:7a:c0:3c:64:f8:c9:e8:43:33:9f:28:f9:20:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1C:24:AC:42:0C:D2:43:E3:58:7B:08:34:01:0F:57:BF:E6:52:3A
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/fhwkrEIM0kPjWHsINAEPV7_mUjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.4.0/24
194.28.156.0/24
194.53.190.0/24
Signature Algorithm: sha256WithRSAEncryption
86:8e:23:49:8d:05:79:c9:68:cf:f5:d6:2f:09:14:2a:86:59:
0f:b1:4a:1b:55:a7:39:0e:32:5b:03:86:41:70:ce:18:c3:3f:
4f:c6:b6:c3:7f:4b:10:54:a4:ad:a8:56:47:d2:f6:4b:b4:19:
98:4c:d6:de:35:fb:f6:66:e5:c1:05:23:d7:5e:68:6d:d7:47:
3b:cb:da:ea:ee:06:84:bd:a4:31:7b:5f:3f:3e:bd:90:f9:c2:
aa:ac:61:7a:b6:17:5e:a5:9c:7f:00:94:93:4d:e8:da:1b:8e:
2a:f7:80:17:22:d8:bb:94:6a:c8:a9:f1:08:dc:ce:e9:19:8e:
0d:83:70:c1:e8:72:62:b4:5c:26:b4:9b:00:2b:05:39:a1:4d:
91:be:52:5d:81:a0:fd:b4:2e:98:1f:c8:c5:c7:16:77:5d:0d:
90:fb:d8:fe:91:ff:16:8e:5b:40:40:0e:51:76:32:1c:f9:7a:
d3:f3:14:36:1a:68:3f:86:74:b0:79:d9:9d:cc:6b:91:e7:64:
e3:49:05:6c:26:c1:92:db:55:61:11:7c:ff:5c:c2:77:04:15:
ef:54:e6:3d:bd:43:11:c9:21:cb:9a:a0:a9:9f:83:7a:72:2d:
52:e3:e7:b8:86:09:fb:62:97:9d:4d:fe:65:10:88:b9:fa:4c:
7a:ed:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:44:28 2026 by rpki-client