Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/hFeItkl0pbB5nCfvB89ws2sKfzE.roa
File: hFeItkl0pbB5nCfvB89ws2sKfzE.roa (raw, json)
Hash identifier: kvSCEFvXk3oziU8gPMJaY3o3CdcxI9qbdV8zeD0Zlr0=
Subject key identifier: 84:57:88:B6:49:74:A5:B0:79:9C:27:EF:07:CF:70:B3:6B:0A:7F:31
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A14440B92F70AC05A84D0225810F0C41AB
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/hFeItkl0pbB5nCfvB89ws2sKfzE.roa
Signing time: Fri 16 Oct 2026 10:27:34 +0000
ROA not before: Fri 16 Oct 2026 10:27:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395470
IP address blocks: 213.145.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:40:b9:2f:70:ac:05:a8:4d:02:25:81:0f:0c:41:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 16 10:27:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=845788b64974a5b0799c27ef07cf70b36b0a7f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:2a:04:65:42:31:40:20:13:7a:d0:63:e4:
f7:e8:2d:58:df:86:d2:94:5c:d2:3e:fb:08:9b:a1:
f6:06:4f:27:1b:6b:eb:2b:fe:4e:83:73:2a:4e:83:
98:17:c0:a6:14:ec:a5:95:b7:95:98:e3:f4:c4:65:
ec:2d:63:9a:cf:7c:12:18:1a:4e:13:1c:ac:5b:49:
60:a3:16:fa:7d:5e:29:2f:bd:23:bd:d2:08:c4:01:
be:6a:90:7b:0e:bb:1c:93:42:7a:b2:71:db:55:55:
1d:7f:c2:6e:fd:dd:a3:55:df:5b:f8:fd:95:d4:bc:
c2:ba:34:6d:73:c5:0d:4c:c9:11:ad:a6:f8:fe:c8:
2b:be:54:a7:7f:f4:e5:df:d3:45:7d:f3:42:0a:f0:
d2:de:e2:07:a4:1c:c2:8b:dd:66:17:4e:88:a8:69:
13:b5:c2:fc:ac:b9:e8:fd:ba:66:29:d0:75:d6:17:
7d:e1:d8:ee:94:85:7b:21:39:ad:18:c9:75:8e:aa:
03:1d:25:5f:4a:8a:ae:e7:4a:b7:87:71:52:f0:56:
31:a5:90:43:a9:27:a7:12:7b:f2:41:aa:a6:73:85:
0f:35:fd:43:a5:30:cd:da:a6:e8:09:7c:84:87:06:
1a:ee:18:df:c0:2a:f1:c2:db:5e:5b:ad:18:72:8f:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:57:88:B6:49:74:A5:B0:79:9C:27:EF:07:CF:70:B3:6B:0A:7F:31
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/hFeItkl0pbB5nCfvB89ws2sKfzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.71.0/24
Signature Algorithm: sha256WithRSAEncryption
18:6f:b0:fc:49:00:e8:db:34:c9:4a:51:90:1e:d4:e7:5d:e0:
aa:e9:9a:75:c4:ec:8a:54:49:8f:04:12:0c:b3:3f:91:05:03:
f0:61:e8:67:fd:fd:1a:f4:16:98:5e:4f:ec:5f:6a:cf:34:f1:
b1:a8:75:e0:4f:4d:9b:06:61:62:33:21:5b:9f:46:6b:06:bd:
31:7c:0e:a7:11:5c:4d:6c:ad:1a:71:1c:eb:0f:a1:7d:26:0b:
fb:7f:75:53:03:fa:8d:fe:3e:9d:70:9d:be:f4:20:b4:9c:77:
d1:b4:c2:a7:e0:c4:a1:12:cf:f4:14:9e:04:15:af:7f:b8:f7:
84:92:02:8f:6c:8e:2e:b6:91:d0:4a:3c:11:88:35:ce:cb:63:
cd:98:74:21:86:e2:05:fb:e8:9f:8d:53:e4:2d:80:f1:13:a5:
e6:83:7a:da:d5:79:b2:7b:8a:f8:80:f9:cb:0e:16:6b:d9:09:
d6:5f:1e:f2:e5:d0:f6:5f:f9:45:7c:df:0b:2e:4d:2c:57:3b:
f2:db:73:21:dd:03:cc:fe:ac:e8:6f:d8:2b:df:38:74:a9:ba:
9f:37:65:f7:9c:9e:30:09:de:ac:f6:3e:d5:12:b8:45:d5:80:
1f:88:54:33:65:50:98:1b:93:06:84:8f:ce:76:3e:8d:b9:fd:
51:c8:fa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:46:21 2026 by rpki-client