Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/F4bHO26ov_LXN2HmDVipaawO7m8.roa
File: F4bHO26ov_LXN2HmDVipaawO7m8.roa (raw, json)
Hash identifier: h7Mt3mdiFgijsbzUiijnPcewxsQWfduQBQ9fyFS37oY=
Subject key identifier: 17:86:C7:3B:6E:A8:BF:F2:D7:37:61:E6:0D:58:A9:69:AC:0E:EE:6F
Certificate issuer: /CN=aa75e8f3a1d9ce2c01b36d5ab6fc2f752730ebea
Certificate serial: 019F9897D18D4BB739CEB411AA9073B9A312
Authority key identifier: AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/F4bHO26ov_LXN2HmDVipaawO7m8.roa
Signing time: Sat 25 Jul 2026 09:25:14 +0000
ROA not before: Sat 25 Jul 2026 09:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209952
IP address blocks: 91.213.185.0/24 maxlen: 24
150.251.80.0/24 maxlen: 24
150.251.81.0/24 maxlen: 24
150.251.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:97:d1:8d:4b:b7:39:ce:b4:11:aa:90:73:b9:a3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa75e8f3a1d9ce2c01b36d5ab6fc2f752730ebea
Validity
Not Before: Jul 25 09:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1786c73b6ea8bff2d73761e60d58a969ac0eee6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:9d:d3:55:05:54:06:94:db:94:d0:a4:78:
5f:26:23:9d:2d:e1:ce:af:a9:93:a3:b2:05:96:b8:
6f:21:b5:f0:f1:b7:55:6f:34:55:ac:ed:3f:5e:70:
ea:03:53:8f:7a:b9:da:b3:82:74:a4:b8:b0:4d:74:
07:4e:f0:ca:43:06:e0:f3:8d:56:42:59:1c:73:6c:
ed:70:52:ad:71:12:d2:58:cf:52:f8:9b:28:06:12:
09:3a:e4:81:6b:a5:5a:7b:cb:d6:db:24:60:aa:f7:
9c:ef:cd:2b:27:8d:dc:68:30:14:8a:86:04:b4:67:
11:a5:1e:4f:a9:27:1c:df:1c:1a:f9:4d:ff:fd:16:
c5:5d:b9:a4:87:50:0f:13:5a:8f:a5:8c:f5:b0:6a:
1f:c4:6e:f7:54:34:ae:ef:76:c2:8e:3d:a9:f4:ad:
f0:76:c1:6c:c5:37:b1:73:94:37:de:57:d0:59:bf:
92:f2:6b:cc:db:b3:6e:fe:59:8c:0b:20:8c:71:0a:
c2:39:ea:74:46:6f:a9:89:2e:7d:c1:0b:c9:6a:ed:
e8:d8:31:18:2c:71:b2:4a:53:db:2a:79:68:b0:71:
ba:15:3b:eb:de:9f:69:80:54:5f:91:8f:43:71:5b:
43:b0:1b:ae:f0:b3:e4:69:68:d1:f8:e7:8e:42:80:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:86:C7:3B:6E:A8:BF:F2:D7:37:61:E6:0D:58:A9:69:AC:0E:EE:6F
X509v3 Authority Key Identifier:
keyid:AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/F4bHO26ov_LXN2HmDVipaawO7m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.185.0/24
150.251.80.0/23
150.251.84.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:7d:e9:1e:cc:74:70:9f:cc:45:f9:e5:b4:19:c7:94:0c:6f:
3c:cd:59:24:43:82:94:28:36:2f:c1:28:1c:be:e2:88:f1:dd:
4e:67:e1:ee:ed:59:63:c3:19:d6:83:b4:1d:1b:e8:1d:fa:7b:
f3:8d:a6:74:f1:81:f0:8b:1a:84:4e:c5:b3:cc:37:e7:e2:27:
aa:c1:e2:6b:06:9c:e2:fa:f4:7e:61:ac:f2:d7:15:c7:2c:84:
cd:c8:f3:d6:78:2c:53:ff:77:d7:b3:be:95:83:c4:1a:55:06:
c3:a0:67:de:18:9b:08:c3:63:a7:0a:f2:ae:47:97:c5:f8:48:
5e:a0:ea:d4:f5:75:67:69:3e:4c:e3:fa:02:4b:6b:0a:88:a6:
19:4b:45:f3:cd:09:fa:18:fb:7b:2e:08:77:ee:43:65:9a:61:
78:36:79:80:92:87:2f:88:ca:c2:31:a2:0a:f6:bf:ef:57:34:
57:3a:2d:52:9d:37:8c:a2:d4:a4:4e:6c:60:c2:d5:8e:86:f9:
64:7a:12:da:c7:eb:e4:9c:72:91:f3:24:31:59:34:2e:a5:c1:
52:f4:ee:74:c8:6d:a5:ce:93:e9:dc:1e:96:0e:77:1b:25:56:
c0:4c:c1:63:0b:99:42:99:9e:8d:83:57:18:d2:d3:53:51:5f:
73:a4:83:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:34:05 2026 by rpki-client