Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/F8keXq_pkJusVqvderyweZtB2hk.roa
File: F8keXq_pkJusVqvderyweZtB2hk.roa (raw, json)
Hash identifier: ovV/OvBeut4vp6yHx2cmk6UbzzFtHIGDrJbtwTxbjVE=
Subject key identifier: 17:C9:1E:5E:AF:E9:90:9B:AC:56:AB:DD:7A:BC:B0:79:9B:41:DA:19
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A10ADAC05AF8EF30224582F65D8028FCF5
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/F8keXq_pkJusVqvderyweZtB2hk.roa
Signing time: Mon 05 Oct 2026 06:57:50 +0000
ROA not before: Mon 05 Oct 2026 06:57:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 213.145.66.0/24 maxlen: 24
213.145.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:da:c0:5a:f8:ef:30:22:45:82:f6:5d:80:28:fc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 5 06:57:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17c91e5eafe9909bac56abdd7abcb0799b41da19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:05:a3:f3:5b:8c:55:28:5f:6b:71:92:32:
ee:d0:73:11:90:06:11:70:81:e4:7f:92:4b:12:d7:
39:ad:3a:b7:81:a8:46:c5:73:19:ac:c1:c9:24:4c:
bf:50:9d:ab:2a:75:a6:3a:a2:95:ac:3e:09:6f:c6:
c1:aa:82:c2:0c:cd:7c:e9:fb:0e:2b:f0:39:cc:f2:
29:b9:22:78:0c:8f:a9:1a:59:ed:a1:7f:c8:76:bc:
00:4d:bf:d0:82:a7:d9:3a:b1:88:6f:37:8f:68:0b:
8c:df:1c:7a:99:d2:59:3f:a7:59:c7:47:30:b4:e6:
e2:56:4f:9d:69:5f:49:b6:f9:de:c2:99:8e:61:c5:
50:50:47:fa:de:4e:3a:ab:05:6b:f0:48:df:a7:9a:
23:e3:f6:57:bd:98:51:d8:6e:ad:75:71:86:55:87:
22:a1:38:a9:fe:2e:b2:ed:a6:08:64:d2:d7:fe:4a:
b5:23:cf:22:ec:bb:1b:d4:d5:59:9c:43:23:d4:05:
7c:8d:fc:72:98:ec:60:2b:89:c9:1d:6b:03:ad:20:
2d:f5:51:b6:d3:2c:9f:49:da:d8:76:22:10:01:76:
b7:38:7c:9b:82:91:53:1b:8f:41:9d:c2:87:e6:b3:
48:0c:4a:46:8c:6d:56:3e:93:fb:d2:08:fa:fc:24:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:1E:5E:AF:E9:90:9B:AC:56:AB:DD:7A:BC:B0:79:9B:41:DA:19
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/F8keXq_pkJusVqvderyweZtB2hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.66.0/24
213.145.89.0/24
Signature Algorithm: sha256WithRSAEncryption
79:31:b1:02:34:42:88:e5:a9:ec:7b:ea:6c:02:8f:05:2a:00:
72:27:ea:79:5d:43:d4:53:c1:32:53:c7:f3:35:c4:0c:78:75:
a4:f0:1e:76:83:40:ac:ec:34:a9:eb:04:fc:70:d9:9d:24:90:
cc:62:87:36:b2:ad:fc:6a:e8:18:84:68:f2:15:17:7b:bc:6a:
30:79:3a:fd:d6:93:96:06:9b:9a:e0:53:69:7e:69:3b:58:d6:
84:f3:0c:82:3e:07:a2:98:e0:9d:2a:56:6f:a6:d6:0e:88:e5:
e0:a0:72:69:c2:ff:ed:b0:47:4e:ed:64:4c:23:8e:dd:77:23:
14:bd:aa:53:6b:18:53:4b:44:a6:9f:79:d6:1f:fe:ac:e2:38:
a4:ad:31:87:af:64:72:51:07:6f:b8:6a:67:bc:0b:0c:e0:e7:
be:d2:b7:27:3b:d2:8f:1e:29:88:18:c5:dd:fe:c7:87:14:7f:
f8:01:67:11:06:23:92:b6:00:f8:34:d9:ff:87:db:66:ea:52:
ec:a4:50:82:f4:f7:6c:86:23:10:d7:3a:d6:cd:2c:a2:ee:fe:
9c:d0:ad:24:e2:da:4f:f7:57:da:92:8b:98:c0:93:78:b0:ea:
ba:f9:df:10:76:bc:7b:87:04:d1:62:1c:ea:d2:02:3a:b9:cf:
dc:65:d5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:25:20 2026 by rpki-client