Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/fWz3OeZpjRbRtz9nuDki8n1BOcU.roa
File: fWz3OeZpjRbRtz9nuDki8n1BOcU.roa (raw, json)
Hash identifier: aZku1TFWvkxC1p13UHvpiwZWXOAO0Qq0M8H5Ejvwe+M=
Subject key identifier: 7D:6C:F7:39:E6:69:8D:16:D1:B7:3F:67:B8:39:22:F2:7D:41:39:C5
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A11BD6D5AB0DF45641781FC3030EB58714
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/fWz3OeZpjRbRtz9nuDki8n1BOcU.roa
Signing time: Thu 08 Oct 2026 14:07:06 +0000
ROA not before: Thu 08 Oct 2026 14:07:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201414
IP address blocks: 45.140.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d6:d5:ab:0d:f4:56:41:78:1f:c3:03:0e:b5:87:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 8 14:07:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d6cf739e6698d16d1b73f67b83922f27d4139c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:6e:8f:f2:c4:61:4e:c4:4e:8b:2c:b0:67:
f2:98:4f:ce:9b:41:4a:eb:fd:52:4f:a2:0b:97:1d:
b1:e4:e0:2d:51:5e:ae:10:38:c1:ed:8c:e3:cc:4c:
c8:8f:22:d4:32:f0:3a:28:6f:ab:87:a0:47:41:8e:
f2:50:ca:de:00:ee:cd:00:ec:b1:35:cf:b7:cc:a5:
dd:e2:33:b1:94:7a:a8:bf:03:55:b2:7f:20:6f:e5:
f4:15:e7:4b:a3:95:d5:78:75:a2:5b:34:f2:42:4d:
62:5e:a4:bc:ba:8d:f9:a6:9a:cf:89:80:5b:75:67:
b9:bd:e7:bc:a6:ac:ac:7c:fb:7e:04:6b:90:92:29:
42:33:2f:53:7e:02:c8:91:ad:26:36:49:78:50:1e:
bb:05:25:ab:00:ea:3f:1e:87:a0:b3:0e:87:fa:65:
a2:2e:df:b7:4e:25:a2:0d:f7:57:bf:cc:34:41:e9:
8e:d8:e4:c0:fd:01:7b:99:32:62:bb:c3:77:96:ad:
0f:77:f0:33:7d:27:64:9e:16:a1:54:eb:e5:c8:a2:
d0:ff:3e:d7:7f:e8:6a:42:9c:f0:5b:85:98:f7:db:
5f:50:18:4b:56:6b:2a:17:ad:56:f2:92:ef:83:34:
b5:62:c0:5d:9a:22:b8:d7:c3:ea:e3:b4:71:fe:52:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6C:F7:39:E6:69:8D:16:D1:B7:3F:67:B8:39:22:F2:7D:41:39:C5
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/fWz3OeZpjRbRtz9nuDki8n1BOcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.17.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e3:b6:2e:c9:d4:2d:00:35:82:24:28:c6:4d:84:29:3c:8a:
07:d5:d9:bb:43:c6:70:99:79:ab:b5:1f:d4:e5:fd:70:08:95:
23:bc:6c:fc:e5:cd:20:8f:bb:ec:a9:a9:0c:98:9e:7d:6f:1b:
d0:91:f9:95:e8:00:f9:43:e4:f8:9b:77:b2:f4:be:15:af:47:
13:24:ae:7c:91:e4:2c:34:3c:fe:b4:c1:3f:c4:3a:0a:3b:cb:
a1:3b:eb:e2:9f:cd:b5:18:ce:bb:41:98:3f:7d:4c:55:69:70:
0f:db:30:76:49:11:10:b1:fc:04:42:3f:4d:b5:67:67:4f:36:
17:fe:47:c2:6e:c2:c2:3e:87:a6:bc:7b:db:5c:8d:f3:80:90:
b0:a6:2f:22:92:a8:e2:19:4c:64:0d:44:e6:46:97:29:b8:36:
9b:a2:4c:b6:69:93:c3:69:51:29:81:f2:a6:6b:a9:9b:3b:33:
06:90:2e:da:e4:13:53:58:71:b0:e7:19:6d:89:2f:9c:a6:a6:
d5:47:63:41:35:8f:f6:97:bb:4e:b8:bc:41:2f:6c:2b:93:12:
ad:c8:c9:ff:88:3b:02:13:09:b2:2c:f8:29:2e:4e:df:a6:27:
9c:69:08:a9:ce:e3:f3:c4:a5:c7:f5:bb:e9:d5:14:a7:15:d3:
2d:21:51:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:19:44 2026 by rpki-client