Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/_Ovw3uwGk-p7sPfYsCILinKrT9s.roa
File: _Ovw3uwGk-p7sPfYsCILinKrT9s.roa (raw, json)
Hash identifier: q6l914BRxqFeLIwlhl2AYhL4rNs76Vs61dEar7zTZZ8=
Subject key identifier: FC:EB:F0:DE:EC:06:93:EA:7B:B0:F7:D8:B0:22:0B:8A:72:AB:4F:DB
Certificate issuer: /CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
Certificate serial: 01A14A2841B2EE912C0D77BF84D0F16F0026
Authority key identifier: 2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/_Ovw3uwGk-p7sPfYsCILinKrT9s.roa
Signing time: Sat 17 Oct 2026 13:58:34 +0000
ROA not before: Sat 17 Oct 2026 13:58:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203
IP address blocks: 91.229.92.0/24 maxlen: 24
185.84.20.0/24 maxlen: 24
185.84.21.0/24 maxlen: 24
185.84.22.0/24 maxlen: 24
185.84.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:28:41:b2:ee:91:2c:0d:77:bf:84:d0:f1:6f:00:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
Validity
Not Before: Oct 17 13:58:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcebf0deec0693ea7bb0f7d8b0220b8a72ab4fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:b7:90:37:dd:12:4e:4b:50:4e:e3:60:d6:
be:4c:f7:ab:ee:30:79:4d:d7:ef:3a:1a:8a:92:9c:
9d:14:14:2c:10:92:37:ce:4e:cd:e5:97:db:3c:e4:
16:3c:a8:5b:ca:f4:e6:d3:a4:12:32:94:81:2b:e9:
6e:c7:0f:eb:36:23:0c:d9:79:c7:df:32:6d:06:29:
c9:ea:46:3a:f9:82:e5:d8:e5:0f:14:ad:0e:b0:42:
8f:f3:84:8a:7d:d1:8a:f3:cd:92:04:45:97:0c:fa:
ab:62:7b:c8:d7:95:89:5d:9b:40:3c:0d:49:e6:43:
3c:54:97:19:c5:4e:57:17:98:bd:94:41:89:43:6d:
53:c8:57:b1:df:af:bb:8f:6a:8c:f4:6b:3d:13:d4:
71:ac:c1:46:25:a0:35:5a:41:c2:55:aa:ec:91:a4:
55:f6:4d:aa:a8:c0:b0:33:e2:e9:90:e1:8e:ec:82:
6b:6d:e4:b3:f9:a7:89:a9:54:d0:d5:98:2e:98:58:
3c:4c:5e:24:d1:6b:a9:c8:cb:6d:63:83:06:f1:b5:
af:1d:95:59:d6:47:e9:c8:15:aa:f6:0b:e8:da:3c:
b0:de:43:0a:cb:6c:97:c8:3d:b7:1d:f9:9e:d4:fc:
48:0f:54:f0:e3:39:6d:d3:92:02:79:59:b7:5f:b7:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EB:F0:DE:EC:06:93:EA:7B:B0:F7:D8:B0:22:0B:8A:72:AB:4F:DB
X509v3 Authority Key Identifier:
keyid:2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/_Ovw3uwGk-p7sPfYsCILinKrT9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.92.0/24
185.84.20.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:fc:79:1f:4d:9d:d9:49:07:7a:73:51:d8:f3:83:c4:2f:02:
f4:a7:4a:f1:fb:81:02:3d:dd:a2:f4:ae:5c:c6:c8:28:a7:c7:
e2:5f:d4:f6:bf:c9:89:f4:f0:5e:d7:2e:d1:2d:53:b4:99:38:
32:a5:88:8a:5c:15:50:24:7b:19:76:d1:74:0a:95:01:de:c2:
03:0b:de:d5:97:bd:cd:3e:1e:71:e0:ec:e3:4d:ce:f2:7d:a8:
9f:a7:54:e5:b0:9c:b0:4a:a6:e3:79:36:e2:83:d2:9b:94:8c:
cc:fb:db:ca:99:f0:c6:0d:62:dc:a8:5e:2c:70:8b:f1:19:44:
d6:01:8f:45:16:39:f1:60:dd:e0:1a:b2:3c:15:7f:5b:33:35:
c0:6a:2f:ca:ec:29:de:b1:98:4f:95:18:bf:fe:f3:6e:db:d5:
e6:67:c6:21:2a:74:5e:17:94:4e:26:f6:33:5f:fc:cd:09:f3:
c6:07:cc:63:48:25:29:d5:2e:2e:ac:99:8d:39:49:9c:12:1c:
87:d2:e1:fa:97:24:9b:51:01:cd:b0:00:8b:8c:21:90:31:73:
0b:21:bf:ed:3f:e3:a2:6c:61:5c:ed:30:de:a8:92:34:ba:90:
b4:54:81:af:34:1e:d5:e9:66:c5:a2:71:f6:03:bb:90:e7:85:
f6:de:07:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:58:42 2026 by rpki-client