Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/dIFifHIk0Lkc-mT1IiovSFT6PuA.roa
File: dIFifHIk0Lkc-mT1IiovSFT6PuA.roa (raw, json)
Hash identifier: xtMRLSTJpN6lM/6ve4pJN0W4V22XOWWtF1zxk/1KKCo=
Subject key identifier: 74:81:62:7C:72:24:D0:B9:1C:FA:64:F5:22:2A:2F:48:54:FA:3E:E0
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01A1104D092C58B20AC79D4550F40048773D
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/dIFifHIk0Lkc-mT1IiovSFT6PuA.roa
Signing time: Tue 06 Oct 2026 08:20:46 +0000
ROA not before: Tue 06 Oct 2026 08:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5408
IP address blocks: 145.116.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:4d:09:2c:58:b2:0a:c7:9d:45:50:f4:00:48:77:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Oct 6 08:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7481627c7224d0b91cfa64f5222a2f4854fa3ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:30:2d:68:80:02:cc:45:d9:a6:b1:53:c2:
8a:b5:33:47:b5:a0:52:a2:0b:31:54:03:58:e6:6b:
c2:4d:4f:dc:23:45:82:1f:a4:2d:30:35:04:88:c1:
b3:94:23:3d:cf:03:a9:50:95:80:29:09:e5:66:8d:
99:05:ea:d0:51:14:20:9c:33:bf:8a:8a:58:e8:7a:
2c:0a:33:7a:3b:20:b1:e4:ba:5b:61:a0:9b:6a:2b:
8b:7d:b2:f5:08:cb:f7:9f:b4:7a:af:2d:00:f5:d0:
8f:17:96:37:4e:e1:58:64:95:b0:de:ea:b2:2d:4e:
33:51:44:8c:7f:aa:77:12:af:bf:a9:1f:90:ef:bf:
56:80:ca:9f:2f:cb:dc:c6:61:e5:c2:51:a7:5c:ca:
20:52:a2:1b:7e:f0:2f:0a:04:79:3d:6c:60:fe:63:
3c:94:27:e7:a5:2d:af:64:b2:26:83:43:59:08:8b:
03:85:84:42:77:28:6e:e4:5c:0f:c1:4b:43:b3:2b:
53:f8:5a:c8:d2:3e:2b:40:86:a4:03:db:8d:4c:2c:
3c:de:4a:2c:12:08:12:b7:76:bb:aa:15:9c:57:a4:
36:7e:56:7d:f1:91:06:db:78:ee:ae:5e:50:94:1d:
6c:19:68:a8:55:94:29:1b:0a:1b:e7:05:a2:d6:92:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:81:62:7C:72:24:D0:B9:1C:FA:64:F5:22:2A:2F:48:54:FA:3E:E0
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/dIFifHIk0Lkc-mT1IiovSFT6PuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.116.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8e:05:98:b9:ba:2d:5d:69:a2:ce:b5:ef:ea:08:ca:80:d3:
25:0f:13:87:a9:78:32:06:b7:71:4f:d9:1c:6f:65:05:2c:fd:
d2:8b:2b:ed:6e:2b:6f:31:01:b6:49:2c:43:e1:7c:6f:23:f5:
dd:74:79:a7:4f:ad:5e:b3:c2:b0:b1:95:bf:1a:bb:59:94:0e:
82:77:03:48:32:20:e6:c1:33:b0:dd:6d:3f:b5:93:01:90:89:
f0:85:49:27:0c:69:ba:19:e5:ed:9d:43:43:ce:4f:4d:88:ea:
0b:36:36:c8:b9:e6:af:50:ec:25:cd:05:f4:d6:fe:fa:a0:7c:
3a:b1:a8:b7:68:4c:05:b6:c8:9a:e9:d0:f0:33:f6:35:db:7c:
47:0f:44:89:de:a5:41:c9:00:5f:a9:85:0e:37:56:36:d6:0e:
fe:50:36:a4:f6:ab:d0:a1:27:e7:ef:bd:74:56:1f:0a:5b:74:
7b:21:18:9c:f3:8a:e3:18:f3:cb:5e:0e:33:3f:5e:09:2a:7f:
0f:c2:75:57:d3:57:b5:80:0c:81:9f:f9:23:b9:7a:93:98:18:
5d:60:cc:b5:1f:73:b9:22:58:74:6a:88:e1:00:c4:aa:71:85:
9c:5e:15:0c:47:6d:8a:7b:02:1b:dd:4b:19:e3:51:74:db:14:
41:cb:dc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:34 2026 by rpki-client