Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/1-s8esoK90fuTW0AWj651iPGBuh8.roa
File: 1-s8esoK90fuTW0AWj651iPGBuh8.roa (raw, json)
Hash identifier: sjKIBezOO4ivMoUNXIkq24CJOPHxFuHSGD6EjG7R65w=
Subject key identifier: FA:CF:1E:B2:82:BD:D1:FB:93:5B:40:16:8F:AE:75:88:F1:81:BA:1F
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 01A118C63A50DC4886C5AD78671766966A6E
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/1-s8esoK90fuTW0AWj651iPGBuh8.roa
Signing time: Wed 07 Oct 2026 23:50:06 +0000
ROA not before: Wed 07 Oct 2026 23:50:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213438
IP address blocks: 193.142.146.0/24 maxlen: 24
193.142.147.0/24 maxlen: 24
2a0f:ca80::/48 maxlen: 48
2a0f:ca80:1::/48 maxlen: 48
2a0f:ca80:616::/48 maxlen: 48
2a0f:ca80:617::/48 maxlen: 48
2a0f:ca80:619::/48 maxlen: 48
2a0f:ca80:666::/48 maxlen: 48
2a0f:ca80:fe0::/44 maxlen: 44
2a0f:ca80:1100::/40 maxlen: 40
2a0f:ca80:1337::/48 maxlen: 48
2a0f:ca80:1338::/48 maxlen: 48
2a0f:ca80:abcd::/48 maxlen: 48
2a0f:ca80:f000::/40 maxlen: 40
2a0f:ca83:1234::/48 maxlen: 48
2a0f:ca83:1337::/48 maxlen: 48
2a0f:ca84::/40 maxlen: 40
2a0f:ca86::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:c6:3a:50:dc:48:86:c5:ad:78:67:17:66:96:6a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Oct 7 23:50:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=facf1eb282bdd1fb935b40168fae7588f181ba1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:fa:a9:5c:bf:0b:11:d0:5c:12:38:2d:24:
c6:78:62:0a:c6:c2:76:8d:a4:67:17:0e:13:74:d0:
d6:09:a7:98:46:a2:d2:82:05:ed:2b:10:51:53:01:
b0:d2:88:f3:87:53:56:0d:49:ba:78:7e:5e:d8:10:
84:b2:2f:f3:bb:bc:bd:f0:10:4e:5a:ff:89:19:cd:
82:71:29:7f:29:05:8d:a2:e0:13:a9:71:64:2f:b8:
4e:84:9f:e4:2f:0f:d2:c9:69:2b:16:4e:e3:ff:d2:
49:e3:46:d9:d7:99:89:e4:1d:52:67:c7:20:65:e7:
52:e3:95:87:2b:98:07:cf:63:d5:67:dc:f7:49:8a:
e1:0b:f6:68:56:37:b5:67:df:74:07:50:16:44:0d:
3d:4e:49:a6:78:a1:d3:14:7a:e3:d4:96:89:09:0e:
0f:dd:ac:ce:a7:11:35:44:e8:15:99:9e:b4:f5:d7:
fa:4d:4e:be:b4:cd:84:67:de:e3:3e:9b:7a:cb:44:
20:d1:75:73:8d:47:8d:32:64:cc:5a:82:19:66:c8:
a0:6f:f8:4e:9a:db:b1:9b:bb:b9:93:09:79:03:cd:
0f:2f:20:dd:71:38:ac:12:32:93:be:19:cf:e3:c2:
5f:56:58:33:4c:cc:36:01:e6:54:96:ce:e0:3a:d6:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CF:1E:B2:82:BD:D1:FB:93:5B:40:16:8F:AE:75:88:F1:81:BA:1F
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/1-s8esoK90fuTW0AWj651iPGBuh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/23
IPv6:
2a0f:ca80::/47
2a0f:ca80:616::/47
2a0f:ca80:619::/48
2a0f:ca80:666::/48
2a0f:ca80:fe0::/44
2a0f:ca80:1100::/40
2a0f:ca80:1337::-2a0f:ca80:1338:ffff:ffff:ffff:ffff:ffff
2a0f:ca80:abcd::/48
2a0f:ca80:f000::/40
2a0f:ca83:1234::/48
2a0f:ca83:1337::/48
2a0f:ca84::/40
2a0f:ca86::/40
Signature Algorithm: sha256WithRSAEncryption
3c:48:e9:be:f7:82:d0:23:17:38:11:80:db:0d:45:b4:1e:4f:
52:b5:49:9e:f4:fb:17:23:72:24:8d:50:e6:a6:06:5a:94:44:
19:bd:8a:9f:40:73:1b:1a:5b:4d:70:2a:28:c1:e3:e3:40:ef:
69:37:c3:a1:a8:b1:c6:44:d3:51:34:64:5d:78:93:ad:b6:63:
a5:84:41:f4:84:f0:36:98:76:5d:6c:0b:b8:84:ae:d9:4f:b2:
59:1d:eb:f6:b0:06:90:e3:c1:cc:ef:3e:66:03:11:b9:46:a9:
95:5c:0a:b5:9e:c0:e3:94:c6:48:05:cd:4a:5b:45:68:89:88:
98:30:6f:fe:d7:4b:8a:3e:9f:02:2b:e2:8f:d5:5c:b6:a1:b3:
eb:c6:65:ae:43:36:e0:2a:d3:a5:1b:9a:a9:9e:68:6b:14:4d:
ff:8a:64:76:8a:52:35:1a:cb:3d:d9:c8:fd:5b:c1:f8:a6:a3:
de:c2:1b:27:cd:d8:50:a6:b4:fa:82:d2:81:90:97:a8:5d:e8:
66:90:8e:1f:39:9f:51:43:5b:d4:12:c1:95:cd:b3:1a:c1:91:
73:1b:28:58:a8:14:06:77:70:c0:90:d7:01:76:f2:4e:71:4a:
34:f0:5e:ba:66:cf:99:1f:83:47:6c:2b:70:6c:98:29:b3:d5:
e0:a8:08:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:40:51 2026 by rpki-client