Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/Fam6VH4MEq6zXCL40UkeriGAmek.roa
File: Fam6VH4MEq6zXCL40UkeriGAmek.roa (raw, json)
Hash identifier: /ugB12jL6AlBzsS7nDI1mtcJ34RI4VZMwjRrY8BY/E8=
Subject key identifier: 15:A9:BA:54:7E:0C:12:AE:B3:5C:22:F8:D1:49:1E:AE:21:80:99:E9
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A1271FC22E38D081DEB08663E35ECD9FE6
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/Fam6VH4MEq6zXCL40UkeriGAmek.roa
Signing time: Sat 10 Oct 2026 18:42:35 +0000
ROA not before: Sat 10 Oct 2026 18:42:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219471
IP address blocks: 178.214.98.0/24 maxlen: 24
178.214.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 18:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:1f:c2:2e:38:d0:81:de:b0:86:63:e3:5e:cd:9f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Oct 10 18:42:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15a9ba547e0c12aeb35c22f8d1491eae218099e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:8d:9a:43:9d:92:50:cf:c8:87:15:de:c1:
de:aa:d3:52:59:97:f3:07:1b:a2:65:9e:a1:9d:8d:
13:8c:16:24:19:9b:de:7b:55:da:68:03:c4:16:60:
cc:5d:57:8f:aa:81:b7:d0:68:f8:bc:fe:00:71:56:
02:d9:8a:4c:56:94:1a:1c:5b:a7:1d:f4:72:ef:5f:
6e:e1:71:5b:0a:56:d0:cf:80:cd:31:91:b6:cc:f9:
39:d9:ce:df:9b:04:58:fc:60:1c:23:9f:95:bd:c0:
f9:e6:c3:fb:70:02:28:13:08:17:d8:37:9f:50:19:
07:a6:7a:9f:52:bd:76:d6:13:74:cb:37:86:e5:88:
f2:f1:99:66:f8:a8:32:04:03:68:da:81:99:09:b7:
dc:7b:68:3d:18:40:64:bc:60:31:91:f3:df:46:a1:
83:75:fe:94:63:83:39:98:2c:48:43:35:6b:b1:a7:
33:f3:eb:fc:58:c8:62:5b:5c:bd:37:fa:22:22:b3:
ce:1f:7b:91:56:da:72:8d:04:58:38:8c:ef:95:16:
e8:21:c7:ec:f4:88:9f:f4:72:de:cd:db:cf:1d:cb:
90:6f:cb:ec:83:14:08:a7:51:0b:ce:0d:fb:ab:73:
83:f0:32:94:21:5b:d3:5a:f1:fc:a0:5b:04:36:13:
d6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:BA:54:7E:0C:12:AE:B3:5C:22:F8:D1:49:1E:AE:21:80:99:E9
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/Fam6VH4MEq6zXCL40UkeriGAmek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.98.0/24
178.214.120.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b1:56:60:cd:4d:af:62:be:1c:9f:49:46:c9:c4:34:97:a2:
5d:f6:c5:a2:38:9b:0e:80:e0:6e:68:c6:9a:e7:bb:3a:4a:ba:
c4:81:f2:09:88:fc:4c:a7:32:57:b8:9a:23:c8:7c:db:78:7d:
34:30:4c:f6:06:58:63:93:2a:3a:7e:74:8c:96:9f:29:b3:45:
b7:c8:c1:36:b4:a2:9d:20:fc:44:7d:6f:37:2a:d0:ef:1f:8c:
f8:80:4d:6f:84:8a:15:d6:04:81:1d:69:98:41:a9:6c:88:c2:
c5:81:38:0a:08:19:01:2f:f3:7d:54:70:86:0f:f8:21:c8:b9:
68:d9:04:87:91:cb:d5:2e:65:39:4b:68:74:a9:84:1d:f2:1b:
c8:be:6b:40:d6:84:5e:9e:09:8b:bb:49:3f:ca:53:e2:26:d0:
7a:ce:d5:ee:72:9e:ee:b1:74:5a:6f:2b:68:42:54:bf:3c:2d:
69:54:af:9c:f1:73:2c:97:f5:dc:7f:ad:c9:16:0c:aa:5c:77:
77:92:29:47:ff:66:1b:da:85:a7:3b:a9:f8:10:b4:b5:83:f7:
3d:01:a3:b2:be:57:f1:31:09:6c:ad:ce:91:a3:f6:76:53:86:
22:2e:3e:2c:6b:bf:aa:14:23:b1:43:49:e8:78:ec:32:6c:0b:
f2:e7:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:27:28 2026 by rpki-client