Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/ForxXITTo8VcelO4P9r7TvsO-XY.roa
File: ForxXITTo8VcelO4P9r7TvsO-XY.roa (raw, json)
Hash identifier: BAZ7Et0pfjNtIefZkGXGB5w18XLBmdb6lCep7vhdglk=
Subject key identifier: 16:8A:F1:5C:84:D3:A3:C5:5C:7A:53:B8:3F:DA:FB:4E:FB:0E:F9:76
Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial: 01A0623A9016796CB4D30723028B98E86E1D
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/ForxXITTo8VcelO4P9r7TvsO-XY.roa
Signing time: Wed 02 Sep 2026 13:06:40 +0000
ROA not before: Wed 02 Sep 2026 13:06:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29217
IP address blocks: 78.41.240.0/21 maxlen: 21
83.150.128.0/18 maxlen: 24
85.119.128.0/21 maxlen: 21
85.119.129.0/24 maxlen: 24
159.72.128.0/21 maxlen: 21
159.72.136.0/24 maxlen: 24
159.72.137.0/24 maxlen: 24
159.72.138.0/24 maxlen: 24
164.9.0.0/16 maxlen: 16
164.9.95.0/24 maxlen: 24
164.9.99.0/24 maxlen: 24
164.9.100.0/22 maxlen: 22
164.9.102.0/24 maxlen: 24
164.9.104.0/22 maxlen: 22
192.16.143.0/24 maxlen: 24
2a02:c58::/32 maxlen: 32
2a02:c58:6::/48 maxlen: 48
2a02:c58:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:3a:90:16:79:6c:b4:d3:07:23:02:8b:98:e8:6e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Validity
Not Before: Sep 2 13:06:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=168af15c84d3a3c55c7a53b83fdafb4efb0ef976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:93:21:b3:b4:81:36:c4:60:6d:34:4b:1a:ee:
35:e7:83:93:01:9c:4d:61:e1:9f:8d:6f:1e:49:5c:
03:61:a5:04:58:c7:0d:d5:6c:b3:7b:62:3c:58:67:
04:35:b5:72:d4:b6:74:98:22:43:41:69:3e:6e:03:
00:d5:e6:09:2c:00:8d:fe:cf:12:08:bb:5d:dd:39:
e5:84:5e:a8:44:63:2b:95:d7:31:46:0b:dd:b9:53:
5c:d6:cc:f3:12:84:5f:f6:34:e3:9c:f9:b9:9d:63:
a8:1c:3a:1e:8f:01:a9:d0:b2:31:0d:b0:b6:3b:d1:
5e:cc:ed:02:c6:3e:96:0a:bb:bb:ed:c0:c2:bc:33:
2b:47:29:c5:ed:28:ec:4c:e8:9f:3c:b0:6e:aa:a1:
92:14:d9:ab:71:7e:5a:d4:c5:af:4d:c4:1b:c6:6a:
27:42:79:bb:98:0f:b7:54:cd:ed:3f:3a:d3:24:83:
aa:08:ee:25:ec:eb:d8:6b:44:4c:fd:c7:8e:8a:df:
5b:81:33:9c:c9:01:70:d9:92:0a:e0:1a:6e:50:a0:
26:0d:84:a5:bb:96:e1:28:e6:ad:96:37:c0:8c:a2:
ed:78:f7:3c:02:7c:64:f3:23:dc:47:f1:4c:36:28:
e0:75:97:dc:a5:7f:9e:c3:7e:0a:13:b4:f1:d5:30:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8A:F1:5C:84:D3:A3:C5:5C:7A:53:B8:3F:DA:FB:4E:FB:0E:F9:76
X509v3 Authority Key Identifier:
keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/ForxXITTo8VcelO4P9r7TvsO-XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.240.0/21
83.150.128.0/18
85.119.128.0/21
159.72.128.0-159.72.138.255
164.9.0.0/16
192.16.143.0/24
IPv6:
2a02:c58::/32
Signature Algorithm: sha256WithRSAEncryption
6c:54:6e:30:f5:5d:d4:df:b1:f1:ad:91:bb:e0:53:92:bb:2a:
a7:89:e5:dc:b4:72:f9:ba:e5:88:dd:2e:63:98:68:da:d7:4b:
12:15:ee:dc:ee:03:47:3f:40:97:b7:a4:4a:38:21:42:c0:5e:
55:bc:f1:14:3a:1c:85:fb:f2:4a:8b:c2:c4:38:15:65:15:98:
1e:a3:e8:56:fb:50:1e:31:4b:68:1d:e6:7d:d8:4c:0e:41:7d:
c2:b4:31:ce:84:02:53:78:22:5b:98:a4:2f:d3:ca:33:20:ff:
ef:48:bd:c7:73:3b:97:ec:10:7f:83:f7:3f:35:b4:bf:69:23:
48:2b:8a:f5:2c:df:10:ad:a9:a7:4b:a2:92:5e:d6:83:06:d0:
1c:e2:78:b7:e8:aa:5e:39:31:eb:23:ab:13:8c:18:4f:5e:93:
8b:58:89:86:bd:d5:bb:39:88:75:f6:5e:90:59:89:5d:a5:1e:
f4:37:fc:43:72:83:83:c4:32:93:1c:21:03:2c:6d:b7:90:6e:
66:f1:d6:9c:b7:9a:13:8e:d3:e9:3f:b9:d0:10:46:03:4e:96:
06:8b:46:b2:8b:c5:9b:7a:13:8e:f6:08:3d:6a:a0:eb:9e:24:
13:d3:62:5f:10:ac:e1:fd:63:e9:75:8a:56:9b:45:41:4c:02:
f9:da:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:18:22 2026 by rpki-client