Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/f2jONphYLcYaRQbOBbO10iALIjs.roa
File: f2jONphYLcYaRQbOBbO10iALIjs.roa (raw, json)
Hash identifier: pQe9gY/VpQIkbFjBlpkW+Nn4Uy4bQcAG3/UHmkEJEiQ=
Subject key identifier: 7F:68:CE:36:98:58:2D:C6:1A:45:06:CE:05:B3:B5:D2:20:0B:22:3B
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01A119C5A80253DE5F54E8CDA8106EFA4EDD
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/f2jONphYLcYaRQbOBbO10iALIjs.roa
Signing time: Thu 08 Oct 2026 04:29:06 +0000
ROA not before: Thu 08 Oct 2026 04:29:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 109.104.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:c5:a8:02:53:de:5f:54:e8:cd:a8:10:6e:fa:4e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Oct 8 04:29:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f68ce3698582dc61a4506ce05b3b5d2200b223b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:ca:bc:dd:0a:0d:cb:8e:2b:81:e1:a2:90:
f5:36:f2:d6:f3:c2:cd:3f:b5:de:59:c4:56:92:30:
3d:64:4b:55:c6:c8:41:86:b7:d3:15:fe:43:0a:5e:
5f:f8:eb:54:f0:e6:26:2f:ca:f2:8d:3e:12:d4:30:
f2:cd:d8:b0:4c:a4:62:a5:22:10:19:d8:89:b9:af:
cb:e7:e1:96:30:f1:af:a8:6e:49:3d:90:55:1b:c9:
78:49:75:d1:e5:22:41:9b:bf:d0:8d:ee:6e:f0:7e:
38:9f:17:5d:2f:4f:85:e0:be:60:e9:48:e8:1b:c1:
09:26:84:86:61:93:15:7d:85:3c:36:f0:f4:b2:37:
04:9a:5d:06:20:4b:9c:f6:01:c4:84:6e:ca:d0:15:
5a:91:3d:b2:ea:90:a6:c2:85:ed:df:66:bd:65:e0:
40:29:27:e7:1f:9d:8b:07:7a:ee:b0:aa:e8:04:fa:
bd:c8:a5:7f:40:1a:d0:23:51:0f:f8:71:fb:30:13:
9b:59:64:9e:69:28:e6:63:7d:31:5e:85:5c:a2:a0:
e0:5c:ff:21:7b:b6:a6:4f:da:37:5d:f5:4f:b5:57:
3d:c2:1e:79:06:5c:3b:43:90:49:90:0e:ca:56:e7:
2d:ed:47:0b:18:d4:5a:05:5c:0b:6e:18:57:c8:32:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:CE:36:98:58:2D:C6:1A:45:06:CE:05:B3:B5:D2:20:0B:22:3B
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/f2jONphYLcYaRQbOBbO10iALIjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.104.157.0/24
Signature Algorithm: sha256WithRSAEncryption
79:86:a7:6c:27:cc:16:1b:a9:8d:ef:b2:53:34:98:4f:fd:7a:
e8:bf:aa:d5:dc:03:56:4e:c2:08:1c:d1:ff:d8:be:66:85:b5:
71:8c:e0:bd:d7:42:04:bc:fd:8c:42:8f:fb:1f:ac:99:ef:f3:
4d:89:e5:90:90:de:b1:f4:ea:3e:4b:5f:f5:e1:dd:b6:e5:2e:
55:5f:be:08:1d:00:51:3e:0e:12:42:d9:19:0a:95:6b:7a:7e:
cd:fe:37:6b:cc:b5:d7:4c:6d:9f:37:ef:f4:84:6e:76:76:05:
e2:70:75:d8:52:30:62:ff:6c:4e:1d:af:e9:c5:31:ec:01:63:
e6:e0:e7:1a:ca:43:88:a8:6c:03:fc:11:51:41:ed:02:0d:1b:
f7:e1:8e:39:4b:7c:f0:0f:10:84:8c:7c:29:06:22:b3:54:4f:
4f:3b:54:3e:22:58:93:12:1c:0f:ba:8d:60:80:cf:df:d2:d5:
8d:fe:7d:51:fb:6d:0e:9b:a9:09:66:f6:fa:ee:7f:07:ec:7c:
75:75:87:89:a0:8f:6f:fd:9f:4c:a2:84:47:3c:23:52:84:d5:
ad:28:f9:7a:ef:c9:f2:58:ab:b7:cc:0d:d0:c0:14:85:a7:7e:
06:4f:ca:7d:f6:a0:fe:fe:2d:e8:ec:5f:5f:f1:e3:86:52:fe:
cb:70:35:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:44 2026 by rpki-client