Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-onQGixB2ID0zZH3Jlbml_kDIyY.roa
File: 1-onQGixB2ID0zZH3Jlbml_kDIyY.roa (raw, json)
Hash identifier: r47ThS/0uVKe7ELonOZe5vqizPadvGyXE4rQjMAIc6M=
Subject key identifier: FA:89:D0:1A:2C:41:D8:80:F4:CD:91:F7:26:56:E6:97:F9:03:23:26
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019FC11D60A232B0BAC84AF6D6F420E72148
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-onQGixB2ID0zZH3Jlbml_kDIyY.roa
Signing time: Sun 02 Aug 2026 06:15:55 +0000
ROA not before: Sun 02 Aug 2026 06:15:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32002
IP address blocks: 155.2.214.0/24 maxlen: 24
158.173.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c1:1d:60:a2:32:b0:ba:c8:4a:f6:d6:f4:20:e7:21:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 2 06:15:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa89d01a2c41d880f4cd91f72656e697f9032326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:e0:fc:1f:fc:cd:b1:78:a8:c1:d8:ac:26:
af:eb:7b:38:48:4d:7c:fc:29:c6:07:db:32:29:50:
38:a9:49:1a:cf:57:30:22:b1:26:68:f2:bd:2e:29:
6b:87:ad:6f:2b:51:ce:11:9b:00:29:05:dd:61:24:
6a:41:37:09:e5:e7:d8:af:3c:26:07:6e:3f:20:e0:
9b:f2:af:8a:02:d4:43:ac:a7:91:61:59:f3:10:cb:
96:32:99:eb:7e:50:f8:64:43:89:06:50:69:43:e0:
f3:6e:bd:67:91:22:a3:af:e0:8d:9c:c1:d8:64:a3:
89:cd:52:49:2d:c2:63:f3:c2:39:3c:d3:0c:ca:84:
f6:fc:be:2e:70:e3:bf:81:46:94:b4:31:9b:55:3e:
80:7d:ea:b0:c6:63:bc:4b:1f:19:12:51:fd:b8:82:
ed:fa:87:cb:4b:33:5f:65:f5:db:3b:79:83:44:38:
46:b3:bf:6f:94:1d:50:d9:1e:07:51:b8:bb:c5:b4:
da:66:e0:17:69:df:c3:d4:e7:41:26:60:e2:84:82:
fa:03:9c:05:ce:d4:8d:e5:b6:9a:58:7d:89:cd:d8:
de:83:b0:65:fb:45:08:89:f2:e2:25:40:7f:9e:bd:
66:18:d5:0c:a5:58:62:10:25:3a:b7:d8:8b:4e:9a:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:89:D0:1A:2C:41:D8:80:F4:CD:91:F7:26:56:E6:97:F9:03:23:26
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-onQGixB2ID0zZH3Jlbml_kDIyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.2.214.0/24
158.173.218.0/24
Signature Algorithm: sha256WithRSAEncryption
32:cc:27:ca:aa:7c:f2:a0:25:f7:b9:12:1e:2c:e8:7e:7f:0a:
12:ed:6e:ed:37:7f:be:dd:c6:99:ae:f5:32:28:47:1d:97:9b:
38:62:59:d5:5b:0c:4a:0a:84:d3:4b:dc:c8:a2:3e:25:4a:f3:
bd:25:a3:60:0f:c3:45:a7:37:4f:39:4d:b0:cf:e6:16:a8:29:
87:14:36:1a:e5:9b:41:ee:e1:e4:a1:80:c2:55:18:68:d4:ce:
7f:d7:f6:ba:94:ed:0d:6b:e2:92:c8:60:a8:53:39:da:cc:a2:
8b:44:0b:9a:ed:57:90:d2:bc:2d:98:9b:3e:c5:a8:09:d7:cc:
e5:84:58:c9:e3:ca:05:d6:23:6c:18:be:a1:14:39:c3:1b:e5:
c7:f0:f9:2c:5b:c4:54:ae:92:ec:3c:f2:b1:e8:45:8e:21:40:
93:5c:e9:05:8f:0d:87:58:d2:d2:37:8c:f3:3c:c3:4e:d1:44:
3a:7c:1d:b6:5d:e5:c7:f7:66:c9:bb:4a:48:31:62:13:98:04:
a0:3a:77:9a:12:15:ab:d3:85:ae:f3:59:57:6e:0b:cf:94:18:
d6:90:88:c3:7a:af:8e:4c:84:d0:ea:90:e6:bb:49:82:b4:15:
19:d3:78:b9:57:cd:52:87:0a:36:e8:42:e7:d0:ba:44:68:65:
e7:15:c2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:23 2026 by rpki-client