Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/lFBHMnGh4Uq2zrWIYArDZMiTAZ4.roa
File: lFBHMnGh4Uq2zrWIYArDZMiTAZ4.roa (raw, json)
Hash identifier: 59RbvFMy9HBXnfUPqwhzkRhjnBuLtkItjt3L2lY9NsA=
Subject key identifier: 94:50:47:32:71:A1:E1:4A:B6:CE:B5:88:60:0A:C3:64:C8:93:01:9E
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A0D2A8DA41D774F4ACDE48191875AA1899
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/lFBHMnGh4Uq2zrWIYArDZMiTAZ4.roa
Signing time: Thu 24 Sep 2026 09:04:36 +0000
ROA not before: Thu 24 Sep 2026 09:04:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 85.115.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a8:da:41:d7:74:f4:ac:de:48:19:18:75:aa:18:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 24 09:04:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9450473271a1e14ab6ceb588600ac364c893019e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:ce:9b:ba:e9:21:cb:29:00:d7:b7:14:d3:
0c:ed:81:dc:5e:3e:c5:a0:ff:e0:e2:94:d7:80:ee:
86:35:c8:40:e2:75:d8:a1:9b:0f:a2:00:e9:3b:5d:
c5:4a:0c:9a:c8:cc:fd:8b:bd:59:52:9a:82:9e:47:
ab:0b:d0:2e:79:1d:05:0e:d1:c5:72:13:70:e1:5a:
46:21:9f:f1:51:43:a1:cd:d5:82:b0:c9:5d:ae:d3:
68:a6:a1:6a:f1:5d:d5:6a:84:fd:40:d7:ec:bc:87:
8e:80:37:76:9b:9d:53:19:3f:b9:12:2e:42:78:f0:
8c:ad:05:a0:72:18:ad:6a:56:6a:f4:fe:a4:97:f3:
58:2f:27:8b:59:97:fb:21:74:e7:4a:f6:72:40:23:
f3:22:03:3f:54:d5:95:e6:8d:6e:41:f1:16:70:b6:
87:c4:07:30:e4:76:ec:6d:8e:08:69:06:c4:1c:c9:
bb:71:e8:e3:22:60:e6:82:70:a6:ef:ef:a6:7d:62:
4a:da:ef:6f:9c:81:e0:20:bc:95:61:65:71:5a:65:
d8:59:92:2f:8a:75:66:0a:c0:6e:a4:02:1c:56:ba:
85:27:44:ca:09:e2:23:eb:16:79:5e:b5:5c:9d:fb:
3c:64:bc:78:a6:77:f8:ec:b7:7a:4c:7c:3e:40:70:
c4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:50:47:32:71:A1:E1:4A:B6:CE:B5:88:60:0A:C3:64:C8:93:01:9E
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/lFBHMnGh4Uq2zrWIYArDZMiTAZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:93:9a:4f:1c:91:56:70:e5:ad:0b:cc:79:47:56:26:c2:49:
f6:ab:08:3a:8d:0f:aa:33:93:3a:7e:fa:95:d4:0f:76:89:db:
2b:61:27:4e:e7:44:79:7b:b5:ff:ef:13:05:22:29:b7:5e:ac:
fd:6a:c0:1d:98:5c:51:86:d8:5f:75:ad:3d:f6:c4:02:41:9b:
92:a8:b3:4d:a0:14:78:45:57:9b:6b:e1:b4:9f:f1:cb:7f:4d:
62:44:6c:1b:1c:5a:4c:9c:f0:c1:cd:47:f9:44:4c:1b:b0:82:
e8:a5:7d:5b:44:ce:e8:02:b9:bf:b6:47:06:83:8e:db:84:b2:
f2:13:de:24:a0:75:79:bb:af:11:30:2f:b3:0a:bf:d0:a8:35:
e6:26:99:a9:9a:b2:95:ea:fa:f0:5c:3f:80:9b:5e:58:1b:d1:
d2:83:71:61:8a:31:28:f9:92:c3:a2:fb:5e:e0:a7:43:b0:27:
9c:bd:fc:a8:4f:e5:3c:aa:a0:64:97:e3:bc:9e:c8:13:c3:a9:
ae:70:13:0d:ee:24:2a:80:38:b8:55:2a:54:74:66:29:31:9c:
8e:ba:de:e9:2f:c0:59:5a:20:ac:84:08:a4:5c:06:9c:02:9c:
b7:6b:9f:41:dd:9f:3e:b3:a4:52:de:3d:a6:02:1b:33:f4:2c:
30:8f:9d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:21:13 2026 by rpki-client