Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/_Ay2tTIpe_q5Gkpp1qxvK6sIp40.roa
File: _Ay2tTIpe_q5Gkpp1qxvK6sIp40.roa (raw, json)
Hash identifier: ypgmDqwRmkGZBLiVxz3vORA3b2QG8PIWXLB1SUGzeWA=
Subject key identifier: FC:0C:B6:B5:32:29:7B:FA:B9:1A:4A:69:D6:AC:6F:2B:AB:08:A7:8D
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A1891CD2EE6169CF09AF950134FAF1806F
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/_Ay2tTIpe_q5Gkpp1qxvK6sIp40.roa
Signing time: Thu 29 Oct 2026 19:22:09 +0000
ROA not before: Thu 29 Oct 2026 19:22:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 168.199.154.0/24 maxlen: 24
168.199.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:1c:d2:ee:61:69:cf:09:af:95:01:34:fa:f1:80:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 29 19:22:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc0cb6b532297bfab91a4a69d6ac6f2bab08a78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:74:80:89:da:b8:fc:24:3d:b7:b2:19:df:
22:9b:85:61:8e:f6:78:d5:72:31:5f:a5:15:e1:9c:
d2:53:88:d0:ce:1f:a8:f7:8f:6a:00:a7:95:5b:93:
ce:ca:c5:f0:84:e6:ad:7d:d5:50:d5:65:6f:08:54:
9a:11:d7:24:b3:b5:0b:37:64:9e:d3:4a:49:03:b2:
82:5c:f2:43:ca:b8:e6:08:20:d9:97:49:8d:82:2c:
51:ea:bd:e2:16:cc:fc:35:4e:e1:d9:d5:74:38:d5:
ea:05:83:a6:ec:75:92:08:15:4a:97:01:fa:0b:c3:
b0:d5:3e:99:76:5a:49:76:84:f3:59:a7:ff:d2:d2:
9c:3b:dc:36:56:34:78:8e:22:0a:72:62:10:64:7e:
de:57:0b:0d:7c:41:30:09:83:3f:79:d7:a3:8b:55:
0d:60:08:13:a8:e5:91:39:a1:46:f9:43:5b:0e:ab:
a8:7b:e6:89:78:8f:c6:91:6a:06:1b:b9:47:37:d5:
02:6a:e9:56:84:32:c1:14:23:c7:c8:4a:e8:3b:35:
5c:01:c8:f1:0a:cc:f0:06:f6:43:82:72:62:60:90:
6f:d1:03:b7:34:c0:78:dd:57:e1:b2:52:c7:7b:3c:
39:74:92:37:c6:e7:5f:a5:1a:93:b4:04:5e:a1:da:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0C:B6:B5:32:29:7B:FA:B9:1A:4A:69:D6:AC:6F:2B:AB:08:A7:8D
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/_Ay2tTIpe_q5Gkpp1qxvK6sIp40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.154.0/23
Signature Algorithm: sha256WithRSAEncryption
88:35:5a:95:33:1e:e7:8b:13:db:2f:1f:a3:ea:7d:2d:41:1e:
d1:66:e3:60:1e:b1:3e:ba:e4:95:b1:b0:65:00:b7:7e:a7:5a:
70:b3:65:4d:d2:b3:10:ad:39:5e:84:82:10:27:aa:72:03:6f:
4e:52:19:d9:27:03:3a:1a:de:e8:db:78:a2:b8:9f:a5:45:ea:
1f:28:63:e5:7e:53:09:92:2a:5d:65:7e:e2:d2:c8:56:32:97:
e8:b2:ff:4a:01:b8:9b:d6:7d:ba:0a:ad:21:c6:eb:50:0b:c1:
13:44:f0:7a:63:be:37:eb:93:40:90:4c:a5:d6:77:ca:39:19:
32:16:72:3e:a5:e2:48:fa:86:b5:1e:93:64:91:58:97:4d:be:
ed:e2:c4:be:94:f4:a2:f4:91:b6:b3:ed:c1:fb:f0:60:e5:ad:
f2:6f:e8:2e:1f:c6:fc:70:01:35:fa:91:82:68:3e:55:28:a1:
04:82:de:e5:fb:76:68:41:61:3f:81:2f:bd:18:9a:45:ff:ae:
1b:77:e7:00:b7:58:f9:1b:8c:f9:76:d4:de:61:4c:b9:3b:dd:
19:b5:06:0c:3f:51:54:11:1f:57:ff:e8:57:2a:6e:20:b5:21:
1b:fa:05:da:e5:3e:bb:a6:4b:2c:1a:50:e9:fd:2d:a4:a8:ed:
dd:c6:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:42 2026 by rpki-client