Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FwfEijP7R3uetXzOQf5ANEmD2Uc.roa
File: FwfEijP7R3uetXzOQf5ANEmD2Uc.roa (raw, json)
Hash identifier: soWOFp8N9jU/t4I8AfbTJChAWtm7ndcM7RTSp/x1fWs=
Subject key identifier: 17:07:C4:8A:33:FB:47:7B:9E:B5:7C:CE:41:FE:40:34:49:83:D9:47
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019FFB579573F587F07BDD0D471C6FF8E503
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FwfEijP7R3uetXzOQf5ANEmD2Uc.roa
Signing time: Thu 13 Aug 2026 13:37:28 +0000
ROA not before: Thu 13 Aug 2026 13:37:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207154
IP address blocks: 92.253.192.0/22 maxlen: 24
93.170.220.0/22 maxlen: 24
2a02:128:2000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:57:95:73:f5:87:f0:7b:dd:0d:47:1c:6f:f8:e5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 13 13:37:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1707c48a33fb477b9eb57cce41fe40344983d947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:f3:80:37:de:b8:94:e7:98:34:27:e6:b0:
a0:1f:cb:a8:e7:b7:12:ca:29:9e:63:0f:33:9c:d6:
07:81:82:e9:50:23:78:ec:d8:a1:ae:b2:39:5b:aa:
99:e3:1d:5c:86:a6:00:b4:06:42:14:b2:60:63:93:
61:67:fd:68:59:1b:47:73:6a:fa:0b:73:03:44:38:
eb:7e:17:42:53:61:5a:d3:d7:c4:57:aa:01:c0:f9:
c2:18:64:40:f7:33:c9:b3:1f:6c:3a:e4:0a:19:14:
5c:ef:c8:8a:57:63:d5:b3:02:83:3b:22:ed:1a:a2:
d2:f8:09:e0:95:1f:46:0e:20:9d:c0:f4:3f:a7:98:
43:20:b9:a8:c9:be:6d:8e:92:72:c1:6d:67:1c:0e:
3d:8f:11:25:97:3d:5d:0d:36:64:6e:72:69:2d:e1:
ca:55:f9:89:36:0d:48:35:d1:8c:eb:b7:f9:4c:c6:
36:a3:76:da:85:c7:01:4b:1a:19:23:18:fa:3b:cd:
8b:38:15:60:45:b6:8c:ca:13:47:52:0d:f9:21:cc:
46:72:ab:08:19:2a:ed:37:13:5f:c5:fb:89:8c:6a:
04:27:a9:7b:13:05:0b:c7:08:a4:34:b1:26:c9:43:
92:74:57:40:3b:6f:52:1f:a5:c6:ce:cd:b7:8d:8f:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:07:C4:8A:33:FB:47:7B:9E:B5:7C:CE:41:FE:40:34:49:83:D9:47
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FwfEijP7R3uetXzOQf5ANEmD2Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.192.0/22
93.170.220.0/22
IPv6:
2a02:128:2000::/44
Signature Algorithm: sha256WithRSAEncryption
78:bc:6c:5e:27:93:92:90:bf:73:39:80:c3:2e:53:c4:73:d9:
7c:12:e1:82:7c:2f:39:cb:6a:d7:ab:44:9f:c5:7b:a1:b5:ac:
ee:10:db:58:be:84:b7:8b:bc:49:a4:72:a4:35:14:11:f8:77:
70:53:f6:6e:94:29:de:38:57:3d:62:3c:da:32:47:7b:df:a3:
ed:36:8c:d1:9a:dc:91:f2:6c:2a:0e:67:a3:9d:7d:e3:01:76:
c4:d9:53:25:ca:37:fe:ee:b4:21:e7:e8:43:78:03:ef:01:22:
fd:48:56:a6:68:ce:31:6a:c5:6b:cc:9b:5f:e0:9c:29:48:56:
f5:2c:a3:a5:0e:54:02:7c:d6:34:6a:04:ab:8f:41:0f:9c:1d:
bc:59:52:b7:d7:a1:f2:f0:86:66:b0:49:7a:85:d6:8c:5e:89:
b6:31:5b:ac:97:16:15:0b:96:45:bf:f3:4a:03:a4:ee:31:9c:
b8:7c:2f:db:62:53:80:cb:89:3e:0d:27:09:6f:4f:c2:af:35:
ed:7c:ad:48:82:e6:7b:e6:79:22:59:09:d6:2f:83:c6:30:95:
5f:83:ee:81:25:e1:b0:98:a9:ef:58:d2:c9:1c:98:cd:29:11:
11:25:6d:d1:31:e8:42:cb:e2:23:4f:c1:0e:1e:fb:6f:e6:a0:
cd:65:8c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:15 2026 by rpki-client