Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bJtdlvLOuI3jh0oA1qNjEc_zfm8.roa
File: bJtdlvLOuI3jh0oA1qNjEc_zfm8.roa (raw, json)
Hash identifier: Tnj06f7lntlh33HAIiByCN+U6C3df5AhbW5/3LmR9bI=
Subject key identifier: 6C:9B:5D:96:F2:CE:B8:8D:E3:87:4A:00:D6:A3:63:11:CF:F3:7E:6F
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A14440B8CBD0A9BF9D9DB288AA317AE104
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bJtdlvLOuI3jh0oA1qNjEc_zfm8.roa
Signing time: Fri 16 Oct 2026 10:27:34 +0000
ROA not before: Fri 16 Oct 2026 10:27:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 213.145.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:40:b8:cb:d0:a9:bf:9d:9d:b2:88:aa:31:7a:e1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 16 10:27:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c9b5d96f2ceb88de3874a00d6a36311cff37e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:15:49:28:57:fd:1a:41:70:85:10:8d:23:65:
71:4a:58:83:07:6a:99:d1:a2:bf:e6:84:65:41:7e:
4e:d4:b1:de:f3:64:de:b1:d7:57:ba:ed:03:20:00:
9a:a0:ea:83:98:8a:30:4a:5b:23:78:68:90:87:2a:
03:6f:95:f0:2d:0d:60:89:48:c0:6f:1a:c4:be:cd:
e1:1c:39:ca:dc:1d:4d:f2:16:b2:dd:4a:d1:3a:a5:
27:33:92:02:70:3b:c6:73:a3:9e:64:67:e3:bb:ba:
43:9d:f7:70:02:96:5e:aa:14:f4:08:67:cf:45:5a:
dd:1a:3d:a4:91:9a:07:0f:2f:d8:e2:bd:8d:73:fc:
2d:5a:46:84:b2:94:17:68:4c:4e:71:83:33:8f:e1:
0f:df:b9:e9:67:b4:d7:0c:5c:d0:d7:a9:ba:d4:90:
62:82:3e:b6:18:f5:e7:47:8d:e9:66:26:3c:93:0c:
50:af:cb:59:1f:da:34:27:08:10:62:c1:11:5d:2b:
29:e8:58:c8:0a:06:17:6a:df:74:9b:a5:f6:65:c3:
fd:10:5c:76:c3:e7:db:c2:dc:e3:a4:31:aa:cf:d6:
84:d8:5c:54:a6:1a:97:85:7f:cb:10:4f:45:2a:a4:
24:92:bb:fb:c4:9b:ac:8f:67:d6:ba:4c:d5:40:b4:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:5D:96:F2:CE:B8:8D:E3:87:4A:00:D6:A3:63:11:CF:F3:7E:6F
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bJtdlvLOuI3jh0oA1qNjEc_zfm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.71.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:17:95:fa:2c:48:f9:82:d3:3c:f6:9f:5b:43:9d:3e:92:61:
26:0b:7d:52:1a:0c:1c:f7:7c:bf:9c:c1:ce:a3:4a:36:da:30:
a2:d6:ba:30:58:0f:fd:3d:35:79:83:39:72:6c:60:93:a2:20:
ca:ae:14:80:de:89:5c:a4:b9:13:10:33:d2:00:f6:87:e8:67:
dd:f5:b5:8b:d5:b0:4d:cd:46:49:08:de:53:9b:ec:18:7d:83:
0f:81:36:91:17:ef:bd:bc:a4:b8:5d:67:c8:0b:87:8a:96:b6:
fa:ac:0f:46:dd:c7:7e:31:db:c8:6d:c8:0b:d1:08:0d:49:c3:
84:38:22:2b:9f:8b:fc:ad:c5:4a:1b:6c:f0:fd:3d:14:b6:ff:
c2:f6:a1:7b:a4:ca:33:6d:5d:9a:28:70:20:a7:a8:34:fd:2b:
9a:c0:04:7b:97:08:61:2f:b4:3e:9c:55:55:e9:81:62:b3:46:
09:29:6b:75:df:7f:69:dd:91:ba:4c:dd:56:d0:f1:71:9d:b8:
df:d4:c7:c6:e8:6b:1e:d2:cf:58:02:a3:2e:ab:c0:d2:1d:b7:
34:28:66:c0:fa:38:3e:09:56:98:51:08:38:80:19:cd:56:e7:
c7:0a:88:2f:6f:a3:9d:d5:dc:44:1f:36:a9:78:64:4b:42:be:
0a:13:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:41 2026 by rpki-client