Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Fq1NPfsyOmVZECU2FJjJ5_NLWA0.roa
File: Fq1NPfsyOmVZECU2FJjJ5_NLWA0.roa (raw, json)
Hash identifier: zP4xgXcFTiI3pGf02z+g6mojyh0+IkrvjR4QKlDg2SU=
Subject key identifier: 16:AD:4D:3D:FB:32:3A:65:59:10:25:36:14:98:C9:E7:F3:4B:58:0D
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019FD0723F75A31C6ABD431F48FA7665EDD4
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Fq1NPfsyOmVZECU2FJjJ5_NLWA0.roa
Signing time: Wed 05 Aug 2026 05:42:56 +0000
ROA not before: Wed 05 Aug 2026 05:42:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198439
IP address blocks: 217.194.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:72:3f:75:a3:1c:6a:bd:43:1f:48:fa:76:65:ed:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Aug 5 05:42:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16ad4d3dfb323a65591025361498c9e7f34b580d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:cd:b3:73:2b:a3:0a:5e:9e:f2:71:c5:2e:
0c:76:0a:86:ed:11:96:fb:49:53:bf:06:66:f6:a5:
23:aa:dd:81:9e:c2:b7:c1:05:d8:45:02:54:5b:55:
86:e9:9b:85:6e:a3:25:f1:d8:11:a4:32:86:a9:1e:
77:0e:3f:ae:a3:b0:e6:c8:7e:bc:45:ea:f8:d1:5b:
34:ea:be:38:5d:80:84:36:55:df:09:b5:09:08:9b:
69:53:cf:60:5f:8b:b1:b8:f4:6c:e1:92:1c:34:7e:
ba:60:4c:d1:ba:2f:58:ec:3a:87:24:1e:13:c1:8b:
8a:a1:47:f6:4f:98:53:09:42:f5:1d:20:bf:60:fa:
66:eb:38:68:e9:40:93:c7:35:8a:ec:cd:0d:d6:a4:
77:a6:ae:8b:18:e2:6c:5f:ea:50:cb:88:10:07:e9:
eb:7a:e0:69:56:37:ee:50:bd:56:00:bd:4e:21:a4:
17:e7:54:a0:fa:03:1d:7d:40:09:ff:7f:6a:41:5b:
58:66:b4:15:3a:1c:b5:b5:06:32:a1:d6:a5:27:c7:
fc:c0:60:60:57:c5:f2:45:9b:64:e9:19:83:ee:30:
e6:da:1f:c0:ac:29:c9:97:d7:5a:7b:e6:eb:a9:3e:
1d:e7:7f:ab:3b:07:2f:e9:58:76:e3:41:c0:4a:3a:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AD:4D:3D:FB:32:3A:65:59:10:25:36:14:98:C9:E7:F3:4B:58:0D
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Fq1NPfsyOmVZECU2FJjJ5_NLWA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:8a:aa:fc:5d:35:fe:20:bd:e7:1f:07:9c:cc:41:ff:4c:f7:
b6:30:2d:52:f8:d4:47:0c:3f:28:40:7f:2b:12:81:bc:66:87:
f2:c4:cd:49:a4:be:2d:37:73:87:4d:ae:25:8a:84:0c:d3:80:
8c:c8:d3:b7:41:a8:c5:4c:51:93:5b:e4:6e:20:b1:53:01:08:
60:76:bf:40:cc:2b:ba:bc:fd:75:39:f6:cd:bf:b2:c8:6d:c8:
b1:c4:10:99:f1:b1:77:5a:97:b8:f0:ae:a5:e6:0f:31:b2:8d:
f6:ad:b9:f8:d7:ba:ca:ba:4f:eb:7a:78:6f:c0:ae:3a:19:40:
c6:c7:40:a3:df:21:df:fd:79:f3:4b:ca:23:cb:73:cd:94:25:
f3:63:cc:4e:bf:8b:34:ff:43:a8:dd:a7:3d:16:0a:b8:cb:4a:
42:4f:7d:a0:7a:42:3f:92:e8:39:64:d3:47:c9:c2:30:77:9b:
76:15:14:35:48:77:2a:94:7e:39:7d:99:c5:01:e9:3b:fb:0e:
ec:3a:75:b5:99:1e:5d:e1:88:e1:87:b3:2b:59:f3:c8:4a:6d:
62:f1:d1:cb:dd:d2:d1:30:8a:a6:c6:ed:3f:fd:ed:ed:e4:25:
70:28:a0:e8:6d:1b:99:6a:d8:b3:dc:e1:e7:ae:79:65:68:3b:
a3:16:9e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:46 2026 by rpki-client