Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/FlZsev4qmKu2pwPsQK4F4RVM8mI.roa
File: FlZsev4qmKu2pwPsQK4F4RVM8mI.roa (raw, json)
Hash identifier: ud7gR1MM1r5c1XfP6THb0VBi1wOIgntgdITcMFxgOdk=
Subject key identifier: 16:56:6C:7A:FE:2A:98:AB:B6:A7:03:EC:40:AE:05:E1:15:4C:F2:62
Certificate issuer: /CN=61d40ac5a5425404824eb32a1ccf51f5dcb7851b
Certificate serial: 019F23686D87C324976522C42E002D1A0C94
Authority key identifier: 61:D4:0A:C5:A5:42:54:04:82:4E:B3:2A:1C:CF:51:F5:DC:B7:85:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdQKxaVCVASCTrMqHM9R9dy3hRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/FlZsev4qmKu2pwPsQK4F4RVM8mI.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57445
IP address blocks: 91.232.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/YdQKxaVCVASCTrMqHM9R9dy3hRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/YdQKxaVCVASCTrMqHM9R9dy3hRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdQKxaVCVASCTrMqHM9R9dy3hRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6d:87:c3:24:97:65:22:c4:2e:00:2d:1a:0c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d40ac5a5425404824eb32a1ccf51f5dcb7851b
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16566c7afe2a98abb6a703ec40ae05e1154cf262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:a3:d7:b9:3f:eb:50:bf:ac:a3:e7:17:17:
c5:54:87:56:04:2c:a2:64:2b:c3:39:c4:ad:1b:bd:
d1:d2:02:f4:2a:f5:e9:d7:1d:28:36:f5:55:ae:f6:
c4:ef:0c:e3:36:6a:01:6e:70:01:c6:9f:0c:a3:e4:
83:ba:5d:bd:07:bc:80:3a:be:77:59:26:14:5b:0d:
02:d7:e9:39:c3:8e:10:8b:33:4a:9a:b5:6d:47:da:
2c:8b:8e:1f:4c:5f:39:7e:0e:29:68:8d:85:7f:14:
bc:a3:e5:60:56:df:5b:57:67:92:c3:d1:1b:78:66:
f1:80:bf:35:7f:c7:bb:2a:fd:78:5b:02:72:da:fd:
90:42:9e:88:80:37:f7:df:52:f1:2b:96:94:76:ed:
1d:54:d5:5f:18:94:75:25:f5:18:e0:6d:17:1a:c5:
af:2b:bc:56:a8:08:d7:97:a4:19:36:39:65:88:39:
11:ab:ee:e9:19:ef:43:87:42:1c:c8:9e:94:01:81:
18:0b:ae:df:6c:7f:1f:f0:90:83:02:98:0a:a5:bb:
50:b0:f4:82:f8:01:64:1a:d3:a6:85:b4:68:29:ac:
38:59:05:9d:98:eb:34:6d:3c:0d:5e:d2:c9:23:1d:
7b:5b:7a:bc:bb:9d:03:5d:65:f4:44:53:4a:3b:a7:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:56:6C:7A:FE:2A:98:AB:B6:A7:03:EC:40:AE:05:E1:15:4C:F2:62
X509v3 Authority Key Identifier:
keyid:61:D4:0A:C5:A5:42:54:04:82:4E:B3:2A:1C:CF:51:F5:DC:B7:85:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdQKxaVCVASCTrMqHM9R9dy3hRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/FlZsev4qmKu2pwPsQK4F4RVM8mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/YdQKxaVCVASCTrMqHM9R9dy3hRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.26.0/24
Signature Algorithm: sha256WithRSAEncryption
29:1b:1e:7f:47:9e:e8:0b:b8:41:27:75:94:0c:44:d8:40:95:
6f:a4:d1:dc:be:60:f5:cf:f7:88:ab:16:21:a3:30:aa:fb:c1:
d9:d5:5e:b6:90:30:5d:05:ca:13:73:0b:a6:a4:02:a6:9e:50:
77:19:81:32:4d:e4:4e:eb:c2:87:d0:3e:fb:da:0c:88:29:3d:
63:84:e2:4a:1d:c3:12:72:df:ef:49:32:16:76:d8:74:27:f7:
10:89:fb:97:b1:0d:1b:be:19:c1:48:73:44:f2:ff:fe:84:eb:
33:7a:63:73:bd:14:84:13:9a:3d:dc:b0:e6:12:ab:53:ec:9b:
e9:04:2b:da:0d:ae:89:fc:5d:c0:b3:e2:fe:5b:54:1e:11:92:
ac:fe:09:e7:26:18:50:46:22:ea:b9:5f:26:ea:72:38:dc:72:
32:dc:cf:4f:a1:1c:e2:7d:c3:60:a4:ce:5d:4f:ff:e9:19:a6:
fe:53:45:8e:00:5e:e7:20:6a:42:ed:0e:8f:ca:ee:f3:65:b8:
f2:2c:52:f8:a9:d1:cb:03:8e:bd:61:5d:37:b9:ef:75:d7:64:
e4:75:db:29:d2:7a:90:67:b2:6e:49:98:e0:ca:70:cc:95:13:
c5:6f:40:5f:60:d7:2d:f4:36:d3:50:23:dd:80:a9:53:6d:3d:
ba:60:44:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:59 2026 by rpki-client