Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/FG2fvuiwp7rqompvefOiSI8QnF0.roa
File: FG2fvuiwp7rqompvefOiSI8QnF0.roa (raw, json)
Hash identifier: 3LkpAB/M9ovIHrFGP+zRRz3e056sUShpO6CYwHOnLkg=
Subject key identifier: 14:6D:9F:BE:E8:B0:A7:BA:EA:A2:6A:6F:79:F3:A2:48:8F:10:9C:5D
Certificate issuer: /CN=d7a8683b097d15dcd14b5968ab09d3a31448f89c
Certificate serial: 019FFA85E9611B0EBD421B8A682713F33098
Authority key identifier: D7:A8:68:3B:09:7D:15:DC:D1:4B:59:68:AB:09:D3:A3:14:48:F8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16hoOwl9FdzRS1loqwnToxRI-Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/FG2fvuiwp7rqompvefOiSI8QnF0.roa
Signing time: Thu 13 Aug 2026 09:48:27 +0000
ROA not before: Thu 13 Aug 2026 09:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 194.150.208.0/23 maxlen: 23
195.144.10.0/24 maxlen: 24
2001:678:10c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/16hoOwl9FdzRS1loqwnToxRI-Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:85:e9:61:1b:0e:bd:42:1b:8a:68:27:13:f3:30:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a8683b097d15dcd14b5968ab09d3a31448f89c
Validity
Not Before: Aug 13 09:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=146d9fbee8b0a7baeaa26a6f79f3a2488f109c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:53:99:27:5c:e7:b3:e9:6c:85:93:9c:15:
7d:4a:19:7b:4b:54:cd:42:f8:5a:bf:f1:78:a7:88:
e0:36:85:26:2f:11:fb:a7:73:a2:de:05:cb:ec:40:
3a:35:d7:65:45:da:da:a2:44:22:d0:b6:df:5b:27:
9d:1a:e3:42:a6:1c:3c:5d:31:c0:a7:9f:d1:b7:15:
67:8b:60:f9:62:b7:bc:c2:de:68:28:31:86:02:e0:
a9:8a:dd:59:7d:42:1d:e8:4e:b9:8f:d8:4f:ee:c7:
b7:4f:1b:36:8a:72:67:d7:7d:fe:2f:8a:84:9b:88:
c9:9d:c7:23:c2:54:d8:28:4a:cc:3e:05:4f:cf:23:
41:1b:12:65:da:1b:e8:f0:91:41:1c:b9:b4:92:0e:
cf:c9:f1:df:a4:8f:12:74:01:bc:e9:9e:ce:35:66:
94:1d:6b:9f:03:cc:e0:f6:9e:42:76:df:64:54:62:
2b:af:0d:3c:6c:95:af:20:32:e7:bd:04:e2:2f:c5:
40:75:b8:fb:13:4d:3b:10:55:2a:02:a7:a4:95:cd:
ba:33:6d:46:06:91:e8:fe:3f:5b:5c:fc:d0:86:8b:
d3:22:eb:02:c8:8f:a6:fd:ef:5e:cf:25:30:60:ae:
28:a7:ee:bb:c5:02:26:c5:ab:b5:19:c9:7a:75:44:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6D:9F:BE:E8:B0:A7:BA:EA:A2:6A:6F:79:F3:A2:48:8F:10:9C:5D
X509v3 Authority Key Identifier:
keyid:D7:A8:68:3B:09:7D:15:DC:D1:4B:59:68:AB:09:D3:A3:14:48:F8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16hoOwl9FdzRS1loqwnToxRI-Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/FG2fvuiwp7rqompvefOiSI8QnF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.208.0/23
195.144.10.0/24
IPv6:
2001:678:10c::/48
Signature Algorithm: sha256WithRSAEncryption
2b:69:cd:7c:24:ad:91:7f:f7:ab:95:ff:27:1a:43:10:e7:71:
26:80:d8:2b:0a:e4:00:7d:91:dd:15:97:f0:be:20:92:af:b8:
13:aa:f1:e8:8c:cc:c7:b2:a3:5d:a9:0a:d2:8e:45:3f:8e:5b:
38:ab:ce:3e:e0:83:39:f6:3f:28:c5:37:4f:58:cc:65:0e:ef:
90:82:97:3d:a0:b2:f1:20:86:07:c7:db:3f:a6:fc:2c:c4:0b:
f6:13:3b:b3:08:22:d4:87:f1:b8:4f:66:61:9a:d5:7d:f2:0e:
a0:23:de:20:c9:01:e8:67:e2:d1:6f:64:02:c3:8a:3a:1c:7c:
ee:69:bb:91:71:a3:df:f0:54:34:1e:5a:1b:bb:3d:7c:24:f1:
8f:5c:ce:05:d6:ea:2e:66:e3:1c:24:bf:8d:de:8f:0d:9e:93:
ca:1f:d2:49:48:2a:90:d8:de:2e:f6:fd:8c:37:32:70:ec:cd:
68:45:ab:4e:19:ea:b1:fa:c6:82:16:9d:46:38:c8:31:20:39:
e6:b7:74:d9:64:4d:10:22:5d:54:a9:06:cf:5c:9b:88:cf:76:
89:b2:35:6f:57:bc:f1:6f:ca:ed:41:e9:6c:f7:1e:13:dc:46:
b5:22:aa:1a:3b:8b:8d:51:42:07:4d:3b:2c:ff:6a:6b:57:a6:
c8:ce:58:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:43:00 2026 by rpki-client