Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/F6EMaJAsvXfpKWSDput6yonAJDQ.roa
File: F6EMaJAsvXfpKWSDput6yonAJDQ.roa (raw, json)
Hash identifier: SVC7/24X5eSE0RD13i8grgAGkd7Umg4zn4tsAMAMd4U=
Subject key identifier: 17:A1:0C:68:90:2C:BD:77:E9:29:64:83:A6:EB:7A:CA:89:C0:24:34
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A186E9BDF622B8E409AE4801D47704F7C3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/F6EMaJAsvXfpKWSDput6yonAJDQ.roa
Signing time: Thu 29 Oct 2026 09:07:07 +0000
ROA not before: Thu 29 Oct 2026 09:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218253
IP address blocks: 153.76.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e9:bd:f6:22:b8:e4:09:ae:48:01:d4:77:04:f7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 29 09:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17a10c68902cbd77e9296483a6eb7aca89c02434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:39:4f:d9:51:0b:7c:c5:27:6c:fe:f4:d7:
1f:e9:70:87:d6:9f:3a:16:89:ba:c1:db:d0:94:06:
fa:fc:64:fe:23:88:d1:b8:3e:98:82:a2:f8:c4:f2:
0f:45:10:7b:2c:87:cc:bc:97:a5:fa:1a:88:52:04:
ad:85:77:3a:70:04:93:01:40:cc:b7:3c:27:71:62:
44:75:5a:9a:be:fa:81:a1:94:4d:78:7a:44:2e:21:
d8:09:ba:8a:d8:08:b5:38:87:f2:8f:33:09:70:e3:
53:e0:fe:94:53:64:7b:a7:c8:30:5d:fa:fb:5c:85:
52:fe:cf:dc:23:c8:ec:53:ee:65:ca:97:65:14:53:
72:29:8f:2a:c9:35:49:3c:4d:87:84:9f:34:f7:f2:
dd:b8:d6:e7:e9:7c:a4:d0:6f:07:9e:c6:e2:26:a6:
ab:67:a0:a5:02:3f:a1:8a:5f:34:78:4b:96:bb:dd:
68:78:2e:80:2d:2a:c1:4c:e9:dc:b0:89:06:78:20:
23:12:27:37:e7:ec:97:95:0a:0c:97:a6:10:56:f7:
60:b1:18:5d:9d:f7:b7:c1:4c:2f:8d:08:1c:4f:af:
af:55:21:f3:38:a4:49:c2:75:7e:6f:71:0c:cf:e9:
32:46:48:c9:9b:45:14:18:e2:9b:6a:51:f8:06:49:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A1:0C:68:90:2C:BD:77:E9:29:64:83:A6:EB:7A:CA:89:C0:24:34
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/F6EMaJAsvXfpKWSDput6yonAJDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e5:3e:ea:82:51:2b:4d:2c:33:a4:9f:bf:ab:d4:30:b7:be:
92:02:c2:f4:ed:e7:9d:22:f9:5d:44:57:fe:30:1a:39:50:a9:
18:fb:da:3b:0e:b2:86:ec:30:99:f7:71:c7:6d:19:5a:ac:c8:
6b:00:74:ac:af:ec:22:3d:1b:0a:44:ab:8c:32:16:87:d1:5b:
58:cc:f8:77:6e:cc:bb:3f:bf:9d:39:f7:ed:22:cf:e6:73:a1:
17:55:cc:44:e9:0e:fb:d0:0c:f1:21:19:c4:2b:2c:69:e0:4e:
2f:00:c2:46:bc:0b:cf:b1:62:34:0f:9d:88:e4:32:9d:27:34:
ae:b2:72:12:46:a0:a0:3e:7c:1d:6c:a6:74:7e:dd:19:6b:08:
14:07:3c:94:e4:df:88:9d:db:90:ff:80:13:8c:b3:28:6d:af:
61:92:88:05:dc:28:5d:d9:42:2d:f9:43:00:2d:e5:3b:0c:32:
97:6e:47:b0:6d:e7:94:88:b7:97:6c:0e:04:11:7c:04:2f:8f:
72:55:e9:0a:4a:51:3e:4d:bc:d2:6f:5c:ea:6d:53:6a:1c:54:
1b:42:85:05:1e:ce:f6:a4:7e:e4:26:75:45:63:ab:50:72:92:
c1:3f:84:3b:78:43:50:72:99:b7:ea:c6:e3:99:6c:b2:fb:c7:
90:c9:37:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGG6b32IrjkCa5IAdR3BPfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMDI5MDkwNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2ExMGM2ODkwMmNiZDc3ZTkyOTY0ODNhNmViN2FjYTg5YzAyNDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QM5T9lRC3zFJ2z+9Ncf6XCH1p86
Fom6wdvQlAb6/GT+I4jRuD6YgqL4xPIPRRB7LIfMvJel+hqIUgSthXc6cASTAUDM
tzwncWJEdVqavvqBoZRNeHpELiHYCbqK2Ai1OIfyjzMJcONT4P6UU2R7p8gwXfr7
XIVS/s/cI8jsU+5lypdlFFNyKY8qyTVJPE2HhJ809/LduNbn6Xyk0G8HnsbiJqar
Z6ClAj+hil80eEuWu91oeC6ALSrBTOncsIkGeCAjEic35+yXlQoMl6YQVvdgsRhd
nfe3wUwvjQgcT6+vVSHzOKRJwnV+b3EMz+kyRkjJm0UUGOKbalH4Bkm28wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBehDGiQLL136Slkg6bresqJwCQ0MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRjZFTWFKQXN2WGZwS1dTRHB1dDZ5b25BSkRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUzHMA0G
CSqGSIb3DQEBCwUAA4IBAQBt5T7qglErTSwzpJ+/q9Qwt76SAsL07eedIvldRFf+
MBo5UKkY+9o7DrKG7DCZ93HHbRlarMhrAHSsr+wiPRsKRKuMMhaH0VtYzPh3bsy7
P7+dOfftIs/mc6EXVcxE6Q770AzxIRnEKyxp4E4vAMJGvAvPsWI0D52I5DKdJzSu
snISRqCgPnwdbKZ0ft0ZawgUBzyU5N+InduQ/4ATjLMoba9hkogF3Chd2UIt+UMA
LeU7DDKXbkewbeeUiLeXbA4EEXwEL49yVekKSlE+TbzSb1zqbVNqHFQbQoUFHs72
pH7kJnVFY6tQcpLBP4Q7eENQcpm36sbjmWyy+8eQyTcj
-----END CERTIFICATE-----
Generated at Thu Nov 5 08:55:48 2026 by rpki-client