Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/Fl0sNH3OORw-VR9ttX4m0BaKcrw.roa
File: Fl0sNH3OORw-VR9ttX4m0BaKcrw.roa (raw, json)
Hash identifier: mc5182/UPitQpfsKkGF8tcMhifQg/OqAIM7NRsA0uY8=
Subject key identifier: 16:5D:2C:34:7D:CE:39:1C:3E:55:1F:6D:B5:7E:26:D0:16:8A:72:BC
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A03E134E36FE981BB1718D33074FD97109
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/Fl0sNH3OORw-VR9ttX4m0BaKcrw.roa
Signing time: Wed 26 Aug 2026 12:37:27 +0000
ROA not before: Wed 26 Aug 2026 12:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 178.214.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:13:4e:36:fe:98:1b:b1:71:8d:33:07:4f:d9:71:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Aug 26 12:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=165d2c347dce391c3e551f6db57e26d0168a72bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:04:5a:48:6e:5f:3c:f6:02:00:7e:a2:7f:
76:56:8d:88:59:90:57:a7:d5:25:cc:a4:6e:20:cf:
7e:79:09:f3:51:fa:61:d1:a3:14:f1:f0:2d:38:66:
94:d0:a1:84:97:3d:96:99:aa:49:3d:3a:c8:ba:32:
3d:cb:05:72:0b:9b:48:35:4c:e6:90:26:91:30:a7:
dd:34:06:63:38:9b:fe:36:42:48:91:a2:c4:44:95:
c0:9e:bd:f1:29:57:a2:1e:9b:55:8c:ad:b7:88:be:
98:43:3a:ba:f7:47:2d:21:d3:50:49:f7:49:09:3c:
98:65:fe:86:99:a7:04:3e:a7:9e:c9:e5:e8:a8:c8:
fe:a5:da:3a:a2:33:35:35:7b:f1:f0:9b:91:21:c1:
8a:9b:fa:53:21:82:1b:6b:df:af:01:db:c6:3d:95:
44:97:6b:41:81:40:93:c0:95:9b:38:d6:98:7b:d8:
fd:0e:d6:f1:21:93:47:85:00:d5:db:ea:6e:15:0e:
d8:86:28:a7:e8:32:57:df:8f:07:bb:d2:ee:fe:c6:
14:cf:55:d7:dd:41:60:5b:4b:f3:e1:cd:8d:40:6f:
c3:b3:6b:6b:82:75:12:8a:f9:73:c0:5d:6a:18:2c:
fc:e3:fc:ff:dd:fa:f8:43:0b:b1:40:3b:83:a8:66:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5D:2C:34:7D:CE:39:1C:3E:55:1F:6D:B5:7E:26:D0:16:8A:72:BC
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/Fl0sNH3OORw-VR9ttX4m0BaKcrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.106.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d9:6d:e7:16:c9:f0:90:a4:82:39:bb:b1:ac:10:0f:42:5d:
28:ce:44:3b:94:a8:a7:04:56:43:35:3f:1f:8a:25:3c:86:c2:
c5:94:6a:33:2d:8c:c3:ae:c2:4e:8b:14:5e:be:68:81:5e:40:
9b:c4:4e:80:e8:86:dc:d6:75:b3:f6:79:1b:f4:89:3d:b8:89:
25:63:9c:f6:34:8e:26:2b:68:6c:fa:96:06:00:e9:77:2c:99:
04:2e:ee:97:a0:1a:04:cb:b8:ae:66:0b:17:ee:5b:27:db:d1:
db:92:60:50:05:65:e9:ac:e5:6f:f1:5c:6f:ea:bf:42:94:2a:
f9:31:a4:29:88:5d:bf:ea:4b:f0:df:f8:68:f2:02:ee:ae:45:
0d:96:23:dd:70:74:8f:c4:91:30:b2:55:18:7f:ca:d9:b7:15:
46:dc:db:ce:fa:df:fd:4e:86:69:9c:a0:03:2f:24:9f:38:b5:
6a:66:87:8d:14:21:da:b1:9c:e8:a0:38:3c:5f:02:99:67:85:
83:f7:c6:f7:d8:ad:c1:03:c3:64:bc:b7:1c:70:b8:a8:df:08:
0c:a9:1e:e5:af:53:cf:77:d5:94:1f:fa:30:08:0e:62:e1:34:
47:93:d1:45:64:6f:69:61:5f:3d:03:11:9b:c0:95:a8:af:8d:
22:cd:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:27:07 2026 by rpki-client