Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Fsc30oWbegYiElZZxeRSa33-4Ao.roa
File: Fsc30oWbegYiElZZxeRSa33-4Ao.roa (raw, json)
Hash identifier: Ep/4eVlRIwMqtpOjNrgf7L7pZi7N/O4F5KL4W1bmD8Y=
Subject key identifier: 16:C7:37:D2:85:9B:7A:06:22:12:56:59:C5:E4:52:6B:7D:FE:E0:0A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0581D085B98F275AA24E84497C3CEEF39
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Fsc30oWbegYiElZZxeRSa33-4Ao.roa
Signing time: Mon 31 Aug 2026 13:58:12 +0000
ROA not before: Mon 31 Aug 2026 13:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 78.142.238.0/24 maxlen: 24
213.166.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:1d:08:5b:98:f2:75:aa:24:e8:44:97:c3:ce:ef:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 31 13:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16c737d2859b7a0622125659c5e4526b7dfee00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:b6:68:01:16:d1:7d:e1:e5:01:50:cc:dd:
0a:41:f3:4e:25:06:17:5d:e7:e3:ba:a6:75:df:ee:
f4:2d:6e:33:48:83:17:7a:a4:91:6d:43:33:5a:b7:
37:27:00:80:70:fb:53:48:9a:55:30:e7:59:0c:a5:
46:ad:99:05:2a:42:a2:b3:d2:2c:83:00:63:e3:f8:
48:a8:95:81:fb:ff:c5:0f:3d:a6:7f:5e:95:ca:e8:
7c:fc:a6:fa:e5:81:7e:ed:4a:e4:fb:76:65:a2:62:
f5:92:d4:f5:db:ab:1c:fa:32:47:ce:a0:d0:7d:2f:
8f:de:64:5b:7e:11:14:c3:83:d2:84:ca:ba:8a:1c:
88:f6:90:b0:ba:c0:0f:d9:6a:8b:b1:2b:d6:f1:82:
68:10:e0:88:dd:cc:c8:9a:9a:50:74:6b:f6:a4:ce:
6c:4a:16:72:33:aa:32:33:03:e1:36:b2:dc:75:d8:
98:73:37:bb:12:ca:5f:20:00:75:60:2b:c4:b2:3d:
09:23:97:7f:e1:b4:5a:6d:de:12:bf:0f:35:ee:f4:
af:95:ff:9b:2f:f8:00:29:61:56:e0:88:bb:da:b0:
88:bf:c3:dc:04:1d:bf:71:01:86:62:7b:e0:d0:72:
6c:fa:ff:c5:e2:b7:e1:dd:6d:d9:92:21:f4:75:75:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:37:D2:85:9B:7A:06:22:12:56:59:C5:E4:52:6B:7D:FE:E0:0A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Fsc30oWbegYiElZZxeRSa33-4Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.238.0/24
213.166.94.0/24
Signature Algorithm: sha256WithRSAEncryption
04:a4:c7:1f:6c:6c:2e:ac:65:a5:51:0e:d1:bd:aa:43:88:23:
de:e7:61:a5:02:52:d8:e9:64:f1:94:7b:ec:05:e4:c6:4e:f8:
f3:85:d0:f5:f7:ba:8c:fa:60:df:80:6b:26:63:35:6d:a0:d3:
f7:e1:19:35:c0:eb:50:4a:e1:31:af:dc:e9:83:7c:ad:e6:98:
3d:ea:2f:ef:c6:6a:92:dc:03:4f:74:f4:84:0e:b6:f3:52:18:
e5:f4:e0:2e:00:92:48:fb:6e:29:00:b7:ba:c3:1a:5e:f2:2e:
7c:c6:42:a9:31:b5:cf:07:12:f8:76:5a:70:cc:78:9c:4b:f2:
12:c7:fc:1f:56:09:6e:63:f1:37:5a:63:0f:bb:b4:ae:6e:1e:
01:62:e0:26:ad:e2:34:97:9b:e4:98:c3:d0:5b:f1:91:e7:4d:
e4:25:a5:3f:36:83:ca:1a:91:82:b9:50:5a:bd:5b:0d:af:9c:
69:df:f3:d5:ec:95:65:94:e4:ed:db:d3:d2:3c:0c:3b:63:29:
cb:b4:55:c6:09:17:fa:3a:c0:87:0a:ca:8c:5b:c9:93:6d:4d:
a6:e8:a1:ee:83:69:10:9d:4d:9a:89:9c:33:96:f5:e4:08:01:
ba:2d:ca:ff:09:72:2a:37:df:ac:b0:5a:01:42:8d:0b:1f:7c:
c0:ce:02:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:03 2026 by rpki-client