Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FNpda0a4AfOSMzP0qhDPmFNE70A.roa
File: FNpda0a4AfOSMzP0qhDPmFNE70A.roa (raw, json)
Hash identifier: CO9uvp2b12ZzRAKTg47Vmti45zgHDGXhHutpIJBGfis=
Subject key identifier: 14:DA:5D:6B:46:B8:01:F3:92:33:33:F4:AA:10:CF:98:53:44:EF:40
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01A11A9666798C3C1EE947C41BA6206B96C3
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FNpda0a4AfOSMzP0qhDPmFNE70A.roa
Signing time: Thu 08 Oct 2026 08:17:06 +0000
ROA not before: Thu 08 Oct 2026 08:17:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218492
IP address blocks: 85.142.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:96:66:79:8c:3c:1e:e9:47:c4:1b:a6:20:6b:96:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Oct 8 08:17:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14da5d6b46b801f3923333f4aa10cf985344ef40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:97:1a:bd:8c:c9:1f:a0:70:10:c8:de:9f:
a6:1a:b4:49:15:8c:f1:3a:2d:fd:14:c6:2b:f6:d0:
4d:67:6f:1a:01:a0:06:97:8e:c5:75:c9:7b:c6:8a:
13:1d:79:25:29:84:ff:fe:db:ab:ea:56:1a:36:34:
e4:a1:0c:aa:4a:b5:a2:d1:9e:7f:8d:cb:72:c1:1c:
a4:f3:d8:9a:35:34:0e:ae:a8:2f:28:11:56:9b:2b:
01:08:a4:9c:d4:04:f8:f7:6a:37:dd:c7:bd:77:56:
1a:7f:02:00:d6:73:15:29:02:16:94:5f:36:fc:cb:
88:1a:bd:21:82:95:9a:a9:8c:11:72:53:5b:06:75:
9b:60:5b:6d:bf:60:9a:aa:0d:09:a4:2a:ee:b5:ed:
37:7c:35:8f:4a:f9:1c:bc:58:d1:14:db:02:41:de:
3c:2d:e9:5b:a1:be:f4:c5:c5:83:2d:c8:ed:4f:5c:
77:1a:a7:e7:6f:db:9c:c0:95:1e:4d:d4:d0:90:fd:
f2:ff:93:11:a3:40:52:35:2b:af:c6:0c:4c:71:20:
54:0f:fc:46:1a:35:91:56:89:62:c0:f5:22:5f:ef:
8a:23:c5:aa:bf:96:e8:82:a9:66:67:fa:ec:04:60:
1f:48:63:f4:89:5a:13:40:dc:41:6a:82:5f:07:98:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DA:5D:6B:46:B8:01:F3:92:33:33:F4:AA:10:CF:98:53:44:EF:40
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FNpda0a4AfOSMzP0qhDPmFNE70A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.84.0/24
Signature Algorithm: sha256WithRSAEncryption
87:96:aa:03:97:d2:7b:28:6a:95:06:b4:52:7b:4a:08:27:38:
54:e7:b5:7b:b0:6e:8f:19:49:c8:24:bf:09:82:44:31:a6:94:
86:02:01:d6:d2:c3:49:02:6a:b5:2b:af:1e:b9:88:67:6d:50:
8e:39:ee:7c:01:cf:9b:9e:12:78:b4:d9:67:8c:f5:72:90:e6:
08:4e:5c:30:9a:62:c1:98:2a:7c:9a:7b:67:d0:a2:9e:b8:f8:
61:21:45:fe:45:b5:e6:68:3a:ce:2d:ff:c0:a2:0f:41:fb:5e:
17:c6:12:b5:62:b0:b0:9a:bd:cd:10:c8:6a:e8:40:9c:2b:fa:
ee:20:87:20:79:f1:c7:6d:5a:e5:bb:5a:27:d9:73:04:e1:bb:
09:59:d2:32:d8:bc:40:c9:3e:ee:0e:18:c3:39:6f:91:3e:65:
6d:dc:21:bb:bf:a3:d4:b6:f2:3b:a5:7d:17:8d:b8:88:5e:e7:
a1:26:11:12:0a:fe:b8:b7:96:f3:3d:5a:1b:4c:f0:96:e9:5f:
da:ef:95:b1:60:ba:de:8d:d4:e6:6c:ff:11:0d:e4:cb:59:db:
d1:70:c8:34:f4:87:90:2b:c2:f7:6a:81:c9:12:ec:38:3d:8a:
3f:6e:a4:ef:3c:b8:2d:fe:e4:93:88:90:36:a6:ac:3b:f4:46:
4e:38:16:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:54:00 2026 by rpki-client