Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/gN61jn6F-kFsZvZUxEMEc51t2HQ.roa
File: gN61jn6F-kFsZvZUxEMEc51t2HQ.roa (raw, json)
Hash identifier: UYg+wtxbgZR3a8fuUVq2pBQ/n75q4I43BVL71UPIP9s=
Subject key identifier: 80:DE:B5:8E:7E:85:FA:41:6C:66:F6:54:C4:43:04:73:9D:6D:D8:74
Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial: 01A00094D07DBA48C00970E8BE784EA62705
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/gN61jn6F-kFsZvZUxEMEc51t2HQ.roa
Signing time: Fri 14 Aug 2026 14:02:27 +0000
ROA not before: Fri 14 Aug 2026 14:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 217.194.138.0/24 maxlen: 24
2a0f:fa42:9000::/36 maxlen: 36
2a0f:fa44::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:94:d0:7d:ba:48:c0:09:70:e8:be:78:4e:a6:27:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
Validity
Not Before: Aug 14 14:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80deb58e7e85fa416c66f654c44304739d6dd874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:3c:4d:f5:75:33:41:66:8b:07:28:07:32:
8c:62:d3:d3:e5:ba:8e:93:aa:7d:f6:e8:6d:b0:1f:
8f:9d:75:ef:6b:6b:3f:ef:2f:be:e9:37:d2:1f:fe:
e5:56:b0:e2:fe:3e:e5:fe:dd:53:eb:c4:7b:67:8f:
cf:fa:e7:96:93:94:e8:e5:6b:f6:36:9f:1f:e1:73:
1d:61:23:03:a9:23:ae:54:36:97:aa:ee:02:f7:c7:
28:18:4e:0f:7b:c6:a9:13:84:2c:4c:1e:f4:0b:b9:
74:21:9e:e6:33:01:05:89:72:d9:01:93:63:2d:ee:
44:9a:16:f8:33:0e:a0:4c:d3:f2:a7:4e:71:aa:e9:
e1:0b:a8:04:e1:30:4b:ed:6b:d2:f8:11:90:3c:2f:
22:3d:43:63:13:92:bb:ed:25:38:98:6e:b3:67:c1:
09:32:6b:33:08:95:2f:de:4c:af:5a:0b:0e:83:a9:
45:2f:80:0c:7e:33:a8:38:3d:0f:40:2c:0f:65:5c:
92:f6:ae:9a:54:8b:07:11:70:d8:6f:32:cd:5c:b4:
07:ee:c3:d8:52:a8:f3:62:8f:c5:9e:52:13:4e:8e:
27:23:ef:85:9d:0a:d1:a7:41:d7:61:79:5a:24:40:
e3:0e:25:0d:37:ec:ad:e5:0f:ad:a2:cd:b7:ff:15:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DE:B5:8E:7E:85:FA:41:6C:66:F6:54:C4:43:04:73:9D:6D:D8:74
X509v3 Authority Key Identifier:
keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/gN61jn6F-kFsZvZUxEMEc51t2HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.138.0/24
IPv6:
2a0f:fa42:9000::/36
2a0f:fa44::/32
Signature Algorithm: sha256WithRSAEncryption
7c:d9:e5:e3:34:75:7f:1d:54:00:97:7f:a7:16:a5:a2:ce:45:
e3:71:e6:b3:0f:18:b9:4e:aa:b4:61:09:30:e5:4f:f0:d6:0a:
53:c6:c0:e8:c3:b8:1d:29:c4:16:97:4d:f3:d5:1b:35:47:10:
1e:81:2c:55:d0:bc:9b:fb:56:10:6f:bd:e7:94:40:ce:8f:35:
99:71:8d:5c:82:a9:6e:95:05:c6:d9:82:ec:b3:81:19:89:9d:
45:33:92:a9:95:e2:01:aa:49:20:74:13:91:2d:bd:6a:17:c9:
e3:24:cb:2f:55:28:d8:4b:b7:87:64:de:5a:6c:fe:98:f8:fc:
be:b1:53:01:07:c1:d7:b5:43:9d:d1:7f:c3:81:46:bd:df:10:
0e:18:39:46:c5:c0:80:d5:50:bb:a1:8f:89:a3:d8:33:c1:d0:
03:20:d0:f3:f6:68:01:a2:47:64:e0:16:4e:59:c4:30:10:52:
6e:c2:ef:99:3b:d1:74:49:f6:ac:e4:45:04:53:ed:60:2a:da:
20:11:c9:a2:8c:d1:9f:da:01:77:31:df:00:ae:77:b7:83:40:
2a:91:5b:a3:27:55:b7:db:2b:82:bf:33:ff:4a:60:cc:75:52:
69:37:b4:21:39:4a:e4:59:2e:78:6b:61:14:c8:c9:87:89:2f:
27:70:32:b6
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaAAlNB9ukjACXDovnhOpicFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzZmYjVhNDY3OTc0Yzk3N2E5OTdjNmRkYTE0NjQ4MDVl
ZDM3OWYwHhcNMjYwODE0MTQwMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGRlYjU4ZTdlODVmYTQxNmM2NmY2NTRjNDQzMDQ3MzlkNmRkODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIQ8TfV1M0FmiwcoBzKMYtPT5bqO
k6p99uhtsB+PnXXva2s/7y++6TfSH/7lVrDi/j7l/t1T68R7Z4/P+ueWk5To5Wv2
Np8f4XMdYSMDqSOuVDaXqu4C98coGE4Pe8apE4QsTB70C7l0IZ7mMwEFiXLZAZNj
Le5Emhb4Mw6gTNPyp05xqunhC6gE4TBL7WvS+BGQPC8iPUNjE5K77SU4mG6zZ8EJ
MmszCJUv3kyvWgsOg6lFL4AMfjOoOD0PQCwPZVyS9q6aVIsHEXDYbzLNXLQH7sPY
UqjzYo/FnlITTo4nI++FnQrRp0HXYXlaJEDjDiUNN+yt5Q+tos23/xWjVQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFIDetY5+hfpBbGb2VMRDBHOdbdh0MB8GA1UdIwQY
MBaAFP7G+1pGeXTJd6mXxt2hRkgF7TefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUt
MTI2NDFmOWU2ZmMwLzEvZ042MWpuNkYta0ZzWnZaVXhFTUVjNTF0MkhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUtMTI2NDFmOWU2ZmMw
LzEvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAMBAIAATAGAwQA2cKKMBUE
AgACMA8DBgQqD/pCkAMFACoP+kQwDQYJKoZIhvcNAQELBQADggEBAHzZ5eM0dX8d
VACXf6cWpaLOReNx5rMPGLlOqrRhCTDlT/DWClPGwOjDuB0pxBaXTfPVGzVHEB6B
LFXQvJv7VhBvveeUQM6PNZlxjVyCqW6VBcbZguyzgRmJnUUzkqmV4gGqSSB0E5Et
vWoXyeMkyy9VKNhLt4dk3lps/pj4/L6xUwEHwde1Q53Rf8OBRr3fEA4YOUbFwIDV
ULuhj4mj2DPB0AMg0PP2aAGiR2TgFk5ZxDAQUm7C75k70XRJ9qzkRQRT7WAq2iAR
yaKM0Z/aAXcx3wCud7eDQCqRW6MnVbfbK4K/M/9KYMx1Umk3tCE5SuRZLnhrYRTI
yYeJLydwMrY=
-----END CERTIFICATE-----
Generated at Mon Aug 31 10:49:36 2026 by rpki-client