Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/fwDF7NfWK5kjIj0MPYpEyXbfAVU.roa
File: fwDF7NfWK5kjIj0MPYpEyXbfAVU.roa (raw, json)
Hash identifier: P6ANF+yzdWqN3RNz/JiJIMnS1YuXeCaT7fjDPfFwX/w=
Subject key identifier: 7F:00:C5:EC:D7:D6:2B:99:23:22:3D:0C:3D:8A:44:C9:76:DF:01:55
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E3A6C5703C4170BA6920E955C6C9
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/fwDF7NfWK5kjIj0MPYpEyXbfAVU.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8839
IP address blocks: 213.245.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e3:a6:c5:70:3c:41:70:ba:69:20:e9:55:c6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f00c5ecd7d62b9923223d0c3d8a44c976df0155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:ca:1d:73:cb:c9:8c:e0:02:89:b0:1c:8b:
7e:f9:ef:da:eb:5f:bf:da:29:f0:2a:a7:96:9d:6f:
07:7e:cf:89:95:da:a0:a7:e5:4f:48:ac:a6:9b:97:
6e:f3:ff:5e:06:e8:03:b3:5c:39:a8:3a:07:06:54:
68:9e:ea:e4:e4:cd:07:45:96:e5:cf:d4:0e:de:a4:
ab:f6:7f:31:4e:76:86:c4:d0:62:2f:7b:0e:39:61:
3f:4b:4a:67:88:61:99:eb:b8:6e:66:25:e1:ba:4e:
af:a4:ad:21:da:1a:18:ff:95:64:fd:c9:34:42:ea:
1d:d0:b3:4b:91:45:c7:c1:b3:bf:0f:95:e8:c9:97:
66:5d:b5:b9:66:3d:b9:72:73:d9:32:ba:9b:d8:0c:
11:fb:26:c0:c5:8c:d2:2a:67:49:4a:5f:f1:f8:6b:
70:66:bd:20:0a:ee:cc:f1:3e:4d:ee:c3:36:e1:9d:
d3:2e:78:6e:da:51:9a:e2:01:7e:82:52:79:85:66:
17:62:9b:3e:8e:4f:62:3b:99:84:d1:36:36:24:e7:
8c:9a:9c:58:82:71:a7:fd:95:c9:75:8e:67:f2:9b:
42:12:07:a2:1d:93:60:89:f6:73:87:9f:3b:a5:78:
ac:76:07:88:f2:30:9f:0a:f2:af:d6:da:49:a2:67:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:00:C5:EC:D7:D6:2B:99:23:22:3D:0C:3D:8A:44:C9:76:DF:01:55
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/fwDF7NfWK5kjIj0MPYpEyXbfAVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.245.2.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1f:d3:07:70:2a:8c:8e:41:3d:9c:15:00:4b:a8:1e:2a:77:
41:b8:17:01:17:20:75:d2:5b:7a:84:fe:a1:8f:e1:63:14:c5:
46:86:4e:6e:c9:7d:4a:9f:c2:81:02:ff:3d:ee:f1:88:c3:7a:
5f:cf:44:3d:dc:85:ba:b5:09:52:20:c8:56:cc:5f:85:cf:f1:
ba:99:33:ee:8a:da:01:d3:13:77:cb:50:ec:dc:ca:87:81:e7:
e0:40:15:9e:51:45:66:57:57:8e:75:40:9f:b7:1d:4e:f5:2d:
15:8a:85:23:3e:25:46:10:a3:bf:2f:2a:58:94:f3:07:80:68:
04:76:19:d1:bb:83:af:62:51:45:f8:21:58:f1:b0:ad:43:58:
0a:01:9a:fe:93:90:8c:d0:ea:9a:99:a9:7b:71:df:24:b9:e9:
d0:d9:a3:18:59:82:61:30:3c:4b:7a:42:af:1d:01:d0:d3:72:
c1:77:21:e4:e1:81:f5:e2:7b:08:57:74:f2:f2:ea:87:dc:2d:
f3:29:10:82:b2:31:2a:58:55:8b:4e:c8:86:6e:0d:2c:ad:2e:
11:2a:52:63:e0:3e:0b:8d:5c:94:f7:b1:9f:a3:9e:a3:ae:2b:
42:2a:08:6f:90:49:53:27:ad:89:51:12:d6:b1:3e:13:27:de:
d7:f8:62:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:40 2026 by rpki-client