Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/FAHbGGkA-ockCEhvvrJOayBGiSY.roa
File: FAHbGGkA-ockCEhvvrJOayBGiSY.roa (raw, json)
Hash identifier: d3khCxUehB5Xaj9d2nF8tun9GlovuretpWutZjjFsR4=
Subject key identifier: 14:01:DB:18:69:00:FA:87:24:08:48:6F:BE:B2:4E:6B:20:46:89:26
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 019C9439933344CB8D63533C265A26C354C4
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/FAHbGGkA-ockCEhvvrJOayBGiSY.roa
Signing time: Wed 25 Feb 2026 09:55:27 +0000
ROA not before: Wed 25 Feb 2026 09:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28889
IP address blocks: 185.135.16.0/24 maxlen: 24
185.135.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:39:93:33:44:cb:8d:63:53:3c:26:5a:26:c3:54:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Feb 25 09:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1401db186900fa872408486fbeb24e6b20468926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:eb:db:14:32:20:80:3b:85:79:46:54:14:
50:5c:2b:b3:f8:81:e5:c2:a8:89:0d:d4:8e:76:82:
9c:60:1f:8d:d2:de:5b:bb:33:c1:66:10:8e:e8:76:
93:02:bf:c3:83:1e:ea:51:d4:b6:e9:0d:42:c5:9c:
ca:3f:7e:89:9f:fa:00:65:29:47:15:37:7d:d7:16:
ac:30:98:e7:72:ed:35:c3:7c:cb:82:25:b6:6a:cb:
24:37:86:c9:d1:76:7e:48:fc:c2:96:73:76:7d:d7:
3f:1a:83:e2:1e:13:b7:ba:17:f9:f2:57:74:db:11:
29:a3:0c:59:15:bf:13:33:9f:bb:ae:0d:cf:0f:fd:
b9:13:c9:1c:70:5f:44:d4:e5:a9:3f:b9:39:0b:d9:
0a:46:2f:52:2c:29:e8:36:89:ef:69:6d:c5:b6:65:
a2:84:5e:6d:6f:bc:27:45:a1:3d:ee:2f:1c:60:ca:
51:65:92:6e:ef:67:c1:27:39:0f:17:60:ca:90:5b:
b9:29:31:3c:d2:22:17:01:c9:1f:f7:ec:c3:70:6f:
05:09:16:db:28:76:64:66:8d:90:d6:69:3c:f9:93:
9e:00:64:b0:09:13:86:88:11:18:62:be:42:5b:6b:
03:4e:83:64:46:d3:18:53:81:eb:b7:6b:62:35:22:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:01:DB:18:69:00:FA:87:24:08:48:6F:BE:B2:4E:6B:20:46:89:26
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/FAHbGGkA-ockCEhvvrJOayBGiSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.16.0/23
Signature Algorithm: sha256WithRSAEncryption
06:16:ce:c0:b0:b5:76:44:2f:a5:74:2e:47:9d:98:ef:a4:54:
01:30:e5:b8:df:3a:d8:49:a8:d9:84:e0:eb:0b:f4:99:0e:73:
50:fc:76:e2:4f:19:4a:7a:06:72:f5:17:d4:b9:9b:24:b9:bb:
22:ad:47:22:e3:d6:8f:8c:3d:84:e4:49:80:89:cc:ed:56:31:
dc:7c:46:b2:b9:07:92:7d:c9:18:a4:d7:7f:98:34:12:8e:da:
12:7c:3c:e1:d4:91:e8:b5:65:0f:6a:70:37:20:8f:04:ca:69:
d5:e8:3e:9f:ca:ef:fe:6d:50:57:3c:ae:df:94:13:4c:f2:f8:
70:8e:02:82:a9:01:c4:2b:30:f6:5f:cb:f7:e0:e9:5a:66:c4:
a1:8a:e3:eb:7b:49:de:ec:5e:1b:af:18:26:0a:5d:24:9b:74:
ef:d8:0d:5a:7d:d5:bd:fc:0d:e1:85:08:3c:4f:6c:20:88:50:
0c:a6:64:4c:8e:46:d3:b7:ec:85:be:7f:bd:c6:c9:54:6a:25:
a0:72:ab:1c:f6:46:d5:9d:bd:0d:4e:1d:ce:d8:3a:ca:62:e9:
fe:0b:68:c7:f1:4f:36:2b:c8:63:25:f8:41:e3:5f:9b:44:94:
66:ea:a1:f1:14:0d:f7:1d:62:a3:40:9e:94:73:cf:1f:a8:9b:
30:47:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:34 2026 by rpki-client