Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/fWSfT8rZ4yQU17BDaiKLn_Be6r4.roa
File: fWSfT8rZ4yQU17BDaiKLn_Be6r4.roa (raw, json)
Hash identifier: 0WLp5t/8+YyeQRyc/k7MKPlchix0mKrAIi7mbiY/mEk=
Subject key identifier: 7D:64:9F:4F:CA:D9:E3:24:14:D7:B0:43:6A:22:8B:9F:F0:5E:EA:BE
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 019FD1D72A4355754342407A304C8F1C27D4
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/fWSfT8rZ4yQU17BDaiKLn_Be6r4.roa
Signing time: Wed 05 Aug 2026 12:12:46 +0000
ROA not before: Wed 05 Aug 2026 12:12:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.67.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:d7:2a:43:55:75:43:42:40:7a:30:4c:8f:1c:27:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Aug 5 12:12:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d649f4fcad9e32414d7b0436a228b9ff05eeabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3d:2a:b3:0e:3c:a0:84:50:57:88:14:e9:8c:
33:3d:0f:1d:b0:50:aa:39:e7:66:85:8b:aa:f3:31:
9b:e3:6a:dc:a3:de:78:f0:48:99:2c:f9:87:2c:a9:
4e:27:8e:59:b2:02:49:4b:8a:30:3f:20:1f:55:af:
14:84:61:3e:d0:c9:40:54:f1:f1:2e:3f:94:9a:92:
24:67:ac:04:bd:9e:d1:a9:e9:7a:49:59:da:65:93:
90:c6:25:71:e1:07:c8:ff:e0:b8:b2:29:14:19:cb:
1d:8f:11:c7:1c:aa:91:58:8b:b4:9a:28:29:db:37:
1c:cc:80:76:99:fd:1a:d4:83:d3:d4:50:ba:d6:29:
53:8d:5e:db:29:1a:63:37:26:55:87:8c:e4:4c:2d:
a2:49:06:10:f9:fb:08:7a:5e:5b:bc:4c:7c:7c:3f:
e7:04:ae:8c:4f:e2:4b:9e:6c:5e:0c:c4:16:2c:e3:
01:62:8d:6a:2e:1a:c3:87:0e:92:55:c9:c2:1f:8d:
ff:6e:cd:bd:0f:b3:0f:1e:82:e8:51:f5:e9:31:35:
bf:92:bd:2a:b3:11:ae:94:b6:96:8a:23:11:6c:bf:
a2:2a:31:94:02:e8:47:6d:eb:83:92:6b:07:4d:52:
34:96:8f:bf:e1:11:d1:9f:94:72:c2:38:7e:9a:4c:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:9F:4F:CA:D9:E3:24:14:D7:B0:43:6A:22:8B:9F:F0:5E:EA:BE
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/fWSfT8rZ4yQU17BDaiKLn_Be6r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.23.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b7:21:c3:b0:16:5d:33:61:50:ea:a9:84:ec:68:c2:3b:46:
e3:d8:04:db:7d:c6:3b:4c:37:03:f4:58:8d:0b:3b:e7:c2:a8:
55:ff:e0:a0:33:ce:79:d6:06:52:eb:73:46:b6:3b:bb:e9:50:
a8:bf:71:09:45:e8:ef:56:53:ea:5c:9b:57:c7:7d:f9:8c:7b:
b1:6a:35:02:32:d4:d2:b3:f5:30:0a:9d:bc:10:3d:ca:0c:43:
8b:07:da:f8:61:7b:b4:99:43:b3:1c:09:72:08:c8:7a:44:a2:
34:bd:60:13:bc:c3:41:db:54:f9:a2:72:e2:8c:72:16:0c:56:
ae:33:bc:80:85:1b:8f:f6:a5:3a:e2:ff:9c:76:c9:dc:a5:33:
c4:3e:a0:5a:dc:e8:41:3c:e6:5d:79:94:ea:aa:7d:28:34:57:
ce:4f:b2:08:82:71:58:41:80:52:87:af:7a:f1:87:ca:7b:f6:
90:9a:ae:cd:15:a9:b4:ae:df:4e:74:d1:9e:ec:de:5f:9b:2b:
e1:dd:52:b2:85:bd:e8:50:86:7a:72:7b:72:7d:28:3c:4e:01:
ee:30:66:8c:39:6a:b7:93:16:6a:bb:d9:41:d4:54:86:8a:63:
17:75:79:c5:a6:4a:cb:ea:d1:45:10:ef:21:34:4f:30:59:14:
02:2a:a5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:26:01 2026 by rpki-client