Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/fwKQV1qDoScUWvD8w3jY6Y1H424.roa
File: fwKQV1qDoScUWvD8w3jY6Y1H424.roa (raw, json)
Hash identifier: pwTRaa+fWbiaEpdC6Ep6GUm5pSF124Ac2gXqDdETHHU=
Subject key identifier: 7F:02:90:57:5A:83:A1:27:14:5A:F0:FC:C3:78:D8:E9:8D:47:E3:6E
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019F5EA152D62E433C40987CEE3A761DAFA4
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/fwKQV1qDoScUWvD8w3jY6Y1H424.roa
Signing time: Tue 14 Jul 2026 03:17:38 +0000
ROA not before: Tue 14 Jul 2026 03:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206499
IP address blocks: 45.14.68.0/24 maxlen: 32
45.14.69.0/24 maxlen: 24
193.177.223.0/24 maxlen: 32
194.36.26.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5e:a1:52:d6:2e:43:3c:40:98:7c:ee:3a:76:1d:af:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jul 14 03:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f0290575a83a127145af0fcc378d8e98d47e36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:96:ac:1c:07:eb:93:0f:56:f7:7d:80:db:
e2:e5:b0:40:4f:50:69:88:60:7d:95:23:e1:cb:3e:
67:6c:95:87:3e:9f:0f:f2:65:4e:ee:50:5a:60:54:
13:c2:5d:5c:28:df:3f:50:7f:cb:b6:5e:0e:65:f2:
d7:86:67:5f:c4:73:29:97:6b:7c:07:5d:7a:03:0b:
d9:a6:20:cc:c6:de:d3:8b:99:41:b7:b6:4b:73:82:
0c:c8:92:95:5a:a0:db:9f:24:a4:9a:1b:1f:69:0b:
a6:0c:9b:bb:97:c2:84:00:32:95:c8:59:d5:b8:33:
44:03:8e:fa:21:d8:4d:e3:db:1e:e4:72:3b:16:c0:
8c:78:73:32:f2:ab:91:d7:6f:04:a9:d8:f5:28:02:
8f:49:32:72:f1:45:cd:01:58:03:c5:d3:b8:d9:05:
88:c4:e7:fb:30:16:3c:0b:14:94:37:05:3d:a0:3c:
26:7c:de:a1:35:2d:1f:8f:e0:a0:f5:d4:76:1a:f7:
f4:b0:14:24:ef:76:b0:77:44:a6:3d:7b:53:6c:39:
d3:c2:75:5f:5a:fe:3c:69:4b:69:35:0f:0c:35:f8:
fb:72:ae:d4:75:c6:23:e1:80:79:9c:bc:40:ac:f2:
54:79:51:d9:51:77:fb:d4:f0:2c:5a:c8:65:bd:08:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:02:90:57:5A:83:A1:27:14:5A:F0:FC:C3:78:D8:E9:8D:47:E3:6E
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/fwKQV1qDoScUWvD8w3jY6Y1H424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.68.0/23
193.177.223.0/24
194.36.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:77:f7:1a:9c:7c:ce:25:1d:15:c2:e2:cc:4d:68:54:bf:46:
32:4a:a5:ff:5b:65:d4:a1:73:48:44:06:ba:88:87:d0:cb:88:
43:fc:be:e7:23:0d:a8:ff:0e:33:5b:a8:48:39:bd:15:c9:41:
23:5e:7a:c1:ea:ba:0e:51:28:6d:7a:e3:f5:93:47:60:47:1a:
1d:a3:af:bd:3d:d7:1e:24:42:3f:ac:80:74:df:c8:e8:9a:b1:
bb:e0:d1:01:1f:61:a0:09:6b:74:5e:54:dc:6b:46:77:41:aa:
5b:46:9d:c0:62:50:03:8a:62:af:bb:bb:da:3c:23:12:9f:51:
f9:28:ff:f5:67:85:01:66:df:7b:1f:16:0f:64:b6:66:e3:9b:
95:d0:a2:9b:14:e5:6e:f6:bc:4c:48:7a:08:c5:70:5d:f3:ea:
b7:a4:d5:11:dd:21:d2:96:b9:b8:7e:3b:1d:86:12:fa:0c:21:
36:ed:8b:72:d3:78:24:b0:28:4a:36:3f:ac:b1:3e:d4:fc:ad:
34:09:78:4e:74:8a:03:0c:85:a3:90:54:45:1b:0f:e4:86:99:
b0:7e:54:6e:73:ba:11:61:0d:3f:8a:7d:9d:7f:d3:df:79:5a:
e6:9f:ac:c0:83:21:49:b5:d1:c5:71:b3:62:1f:7f:69:48:c2:
3b:0a:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:43:31 2026 by rpki-client