Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/1-FEDia9KPmTtEr21iWCvhwYHhVk.roa
File: 1-FEDia9KPmTtEr21iWCvhwYHhVk.roa (raw, json)
Hash identifier: jEtaz2YhBqDGYDRQVBpDWCENi4ymmQc1n/n6OrtAoG4=
Subject key identifier: F8:51:03:89:AF:4A:3E:64:ED:12:BD:B5:89:60:AF:87:06:07:85:59
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019FEA837448838DF0C21066D87AEFA422CD
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/1-FEDia9KPmTtEr21iWCvhwYHhVk.roa
Signing time: Mon 10 Aug 2026 07:11:51 +0000
ROA not before: Mon 10 Aug 2026 07:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153568
IP address blocks: 85.232.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:83:74:48:83:8d:f0:c2:10:66:d8:7a:ef:a4:22:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Aug 10 07:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8510389af4a3e64ed12bdb58960af8706078559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:f3:f5:42:1f:2c:a1:1a:65:40:b3:79:a7:
d3:4d:88:2d:c1:28:56:de:ec:0b:fa:84:e4:28:12:
b9:5f:8f:e2:d9:6c:bf:77:03:e4:99:b1:91:96:b3:
fd:7e:2d:60:9a:f5:d0:12:90:38:6e:16:ce:fd:9d:
0a:42:19:5a:1a:82:21:f3:ff:93:03:6c:73:f6:6f:
b8:40:12:78:c3:63:7c:5f:e8:40:ce:4d:c0:e2:9c:
7c:05:84:91:24:b4:66:13:97:ca:be:94:43:f9:fc:
5e:02:cb:d0:3a:10:a2:ce:88:98:90:62:01:10:a7:
1b:9f:2e:a0:86:41:d1:12:02:3a:9f:41:9b:03:ba:
bd:9c:63:c5:d9:bf:39:58:62:cc:8f:86:77:0a:6a:
99:13:87:d4:75:d8:73:8d:54:97:52:01:0d:bd:5d:
de:92:e0:02:50:78:d4:1d:8d:c1:bc:a3:0f:ed:6e:
3f:d3:88:1c:30:e8:2b:45:92:7b:eb:b8:98:6f:07:
89:a3:bf:15:14:24:42:84:8a:62:5a:78:b5:75:59:
a3:e5:a2:a3:87:8c:ee:37:59:c6:25:cb:a0:60:31:
aa:75:6b:94:81:51:9a:34:60:bd:59:b6:bd:66:38:
85:4b:4c:c3:9f:2f:2d:60:7f:13:a0:ef:ce:58:b1:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:51:03:89:AF:4A:3E:64:ED:12:BD:B5:89:60:AF:87:06:07:85:59
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/1-FEDia9KPmTtEr21iWCvhwYHhVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.181.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d2:c9:a5:43:62:8b:34:6c:07:ff:ac:1e:7c:c5:4a:c1:5c:
e9:73:aa:fc:f7:a6:37:00:06:7a:2b:20:97:ee:54:f6:0b:92:
6e:69:6a:3b:b1:0e:fe:ba:c1:4c:ea:e2:22:11:9b:3f:ae:8f:
6e:30:7d:35:ff:28:aa:96:2d:13:d2:b0:fd:0e:63:fc:25:2e:
84:75:ec:56:ad:54:b2:1b:5f:8b:da:aa:9d:f0:8d:93:4f:3c:
e1:22:cd:22:27:4f:7a:1d:6b:1d:1d:c4:c3:a8:7d:3d:b2:4d:
52:dd:90:23:7e:5d:9b:f9:48:0f:ac:25:e7:85:e8:53:16:de:
ad:d0:ba:50:e5:c7:c6:75:de:f2:f7:f2:2c:d0:ef:09:1f:b0:
ee:6c:05:0d:c8:d3:05:87:b8:7b:22:12:0f:f7:cf:07:53:5e:
5c:29:c3:f2:26:c9:b1:8c:60:d2:be:2c:17:89:38:6a:bb:b7:
9f:b7:b6:96:52:12:b7:aa:56:b9:00:a8:a0:8e:63:30:2b:73:
03:fc:12:86:a9:e0:d1:29:aa:16:c0:2e:57:5a:e0:b8:b6:cb:
76:86:95:92:0e:e8:a1:03:e5:eb:66:ee:3d:99:4c:55:22:df:
77:9e:cf:d6:06:6b:a4:9e:f9:36:86:4f:44:f6:69:f3:6e:29:
e4:c5:b1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:19:22 2026 by rpki-client