Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/556f47-fd2e-4cd7-971c-034933e77d47/1/_L6FAAL46QraL_DLEy1V0OipZmo.roa
File: _L6FAAL46QraL_DLEy1V0OipZmo.roa (raw, json)
Hash identifier: CHdiP2Ws/xkYju/rGH5YqIsBpwRIzkIUVr51K4DmCrI=
Subject key identifier: FC:BE:85:00:02:F8:E9:0A:DA:2F:F0:CB:13:2D:55:D0:E8:A9:66:6A
Certificate issuer: /CN=069c876e6c180dae4a4625c813373a19c0d4ce54
Certificate serial: 01A1744E87AE3662765E1BE475D79DD12484
Authority key identifier: 06:9C:87:6E:6C:18:0D:AE:4A:46:25:C8:13:37:3A:19:C0:D4:CE:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpyHbmwYDa5KRiXIEzc6GcDUzlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/556f47-fd2e-4cd7-971c-034933e77d47/1/_L6FAAL46QraL_DLEy1V0OipZmo.roa
Signing time: Sun 25 Oct 2026 18:24:25 +0000
ROA not before: Sun 25 Oct 2026 18:24:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61421
IP address blocks: 149.245.254.0/23 maxlen: 23
149.245.254.0/24 maxlen: 24
149.245.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/556f47-fd2e-4cd7-971c-034933e77d47/1/BpyHbmwYDa5KRiXIEzc6GcDUzlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/556f47-fd2e-4cd7-971c-034933e77d47/1/BpyHbmwYDa5KRiXIEzc6GcDUzlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpyHbmwYDa5KRiXIEzc6GcDUzlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:4e:87:ae:36:62:76:5e:1b:e4:75:d7:9d:d1:24:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=069c876e6c180dae4a4625c813373a19c0d4ce54
Validity
Not Before: Oct 25 18:24:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcbe850002f8e90ada2ff0cb132d55d0e8a9666a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:85:b4:d7:ff:b7:ea:fd:b9:3d:a5:a8:c3:
f1:17:85:79:42:da:92:40:17:a5:ac:1b:c5:67:8e:
0f:f4:3e:4e:c0:bc:63:57:84:90:51:2e:3a:fe:9a:
e5:62:e9:82:20:57:a6:e7:14:8a:76:ea:31:67:6f:
c7:fe:39:bd:6a:99:b3:07:64:04:9f:21:91:27:3b:
17:f9:58:db:a7:b8:2f:22:97:14:9e:2a:41:24:96:
39:0e:7b:07:4d:8a:91:f1:a5:cb:06:d3:1d:3d:e6:
e3:34:93:fa:8c:99:96:11:f6:5d:55:9b:71:ac:5e:
3e:4c:58:9e:03:10:d5:91:9b:9d:d9:01:85:93:ea:
ef:6a:0c:96:72:29:15:a2:31:75:49:6d:a5:a0:26:
81:50:f9:f0:f7:54:b3:7a:c3:3f:ca:8d:ba:e3:41:
dc:e8:73:f5:45:f5:f9:4e:8a:f1:14:b9:9e:52:a2:
1e:69:bf:80:66:ec:f9:a6:c4:b5:a7:3a:52:91:27:
c0:de:b5:68:8e:51:02:c7:5a:ba:d8:3e:13:4f:48:
d3:ac:e2:84:d8:bf:ae:76:b1:2e:96:de:c5:25:ae:
44:f5:63:9c:05:f4:27:ba:b7:b3:bd:fb:fb:1c:82:
98:ba:40:7b:e6:32:e0:ee:8b:34:79:50:c9:1f:a0:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BE:85:00:02:F8:E9:0A:DA:2F:F0:CB:13:2D:55:D0:E8:A9:66:6A
X509v3 Authority Key Identifier:
keyid:06:9C:87:6E:6C:18:0D:AE:4A:46:25:C8:13:37:3A:19:C0:D4:CE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpyHbmwYDa5KRiXIEzc6GcDUzlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/556f47-fd2e-4cd7-971c-034933e77d47/1/_L6FAAL46QraL_DLEy1V0OipZmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/556f47-fd2e-4cd7-971c-034933e77d47/1/BpyHbmwYDa5KRiXIEzc6GcDUzlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.245.254.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:8b:86:dc:33:02:6a:1a:c2:62:fb:9a:9e:fe:9c:3f:0c:d3:
c2:db:ec:84:a1:3f:87:56:90:01:f7:f9:11:85:25:43:c1:68:
be:f5:e2:05:21:ff:a1:85:95:9b:e4:e4:d7:44:75:d2:35:67:
08:7d:35:bd:b9:d9:75:ef:a1:13:fa:62:d1:16:96:83:f5:1b:
4b:0c:07:aa:81:50:6e:1a:b6:fa:35:9d:3e:67:84:03:fb:86:
65:85:32:ef:ba:18:33:4a:7a:d4:08:c5:37:1c:5e:94:3f:29:
59:b3:d1:71:70:a0:9e:be:47:12:94:19:e3:99:ae:43:39:98:
b1:d9:32:9e:30:79:eb:50:aa:9c:94:78:83:0e:b7:22:ab:5f:
c8:b7:d1:fd:c1:dc:f8:a8:61:9d:d6:2c:e3:f9:b3:3f:80:88:
af:de:d8:30:5a:e1:32:a8:3d:3e:d5:42:b5:00:14:01:c3:98:
2c:9f:df:54:bf:70:36:47:2f:2f:73:e2:90:4d:5d:84:48:96:
66:35:11:9a:f9:be:a8:68:c1:09:6c:da:82:21:bf:b7:5b:32:
17:51:31:68:24:c7:b4:3f:70:b9:c2:2d:39:37:33:2b:f4:bb:
35:6a:36:bb:0b:37:1c:bc:4d:6c:5a:5a:88:da:11:f8:93:ea:
f5:44:7e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:16 2026 by rpki-client