Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/F3OmVjID0eHX8v23aliioJL6Q_0.roa
File: F3OmVjID0eHX8v23aliioJL6Q_0.roa (raw, json)
Hash identifier: +ejGFePCBoseXKvGTABQfAg8iLvNyH8I7sHO20cZQEY=
Subject key identifier: 17:73:A6:56:32:03:D1:E1:D7:F2:FD:B7:6A:58:A2:A0:92:FA:43:FD
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A191A583F127C473341043EC91045C150F
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/F3OmVjID0eHX8v23aliioJL6Q_0.roa
Signing time: Sat 31 Oct 2026 11:08:25 +0000
ROA not before: Sat 31 Oct 2026 11:08:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59245
IP address blocks: 213.189.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:a5:83:f1:27:c4:73:34:10:43:ec:91:04:5c:15:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 31 11:08:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1773a6563203d1e1d7f2fdb76a58a2a092fa43fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:ac:2b:8c:dc:3d:59:18:dd:bf:b4:77:32:
d9:c5:47:05:2d:c3:e2:b1:0d:69:0f:c8:b4:ff:07:
ff:b8:2b:49:e3:ea:c7:b8:97:0a:64:b7:9c:5a:76:
fd:96:00:5c:c7:39:f7:18:28:cf:68:6e:6b:d5:a0:
a7:21:2c:7c:13:01:78:f3:b5:ee:77:fa:eb:aa:49:
07:b6:22:f2:b4:16:69:71:2b:5d:d9:b2:41:62:92:
6d:79:6d:61:51:af:76:c2:fd:1e:20:a4:84:fb:bf:
82:7d:b7:56:18:16:01:2c:83:13:ed:2c:dd:bf:70:
0c:18:5b:08:55:11:d2:2a:c7:5a:74:ad:9d:90:f6:
7f:22:18:67:5f:d0:a8:86:de:7d:89:98:61:75:57:
1f:88:78:d3:70:a3:84:ad:29:df:e8:f0:46:f8:21:
c7:0b:9d:47:f0:10:12:d1:bf:3d:92:06:ca:38:15:
8e:ea:e5:65:c9:29:84:a9:4a:17:c1:d6:48:16:89:
46:cf:53:bc:e4:22:3b:9c:aa:c8:fb:dc:d0:a1:07:
e7:0b:8b:47:46:be:17:66:46:7d:6a:1d:e7:e6:5c:
ea:ef:ac:14:ac:fc:b1:d0:4a:53:7d:48:54:b4:4b:
29:a2:7e:c3:64:45:be:b0:f8:53:7d:12:c8:3e:f0:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:73:A6:56:32:03:D1:E1:D7:F2:FD:B7:6A:58:A2:A0:92:FA:43:FD
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/F3OmVjID0eHX8v23aliioJL6Q_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.25.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:aa:88:a2:69:c5:2e:96:3c:26:b2:c0:24:c6:4e:37:46:f9:
31:12:f9:53:f1:4f:c7:be:70:43:e0:ff:d2:97:fa:52:46:af:
45:d3:6c:56:3f:10:45:ff:95:99:18:6c:c6:18:b0:e4:33:39:
68:8c:d6:db:6a:b8:93:95:b4:92:a1:ae:d0:37:df:95:29:a7:
31:ce:98:a2:62:4d:1a:c0:be:cc:0c:04:af:41:39:42:3d:b2:
88:9c:42:f3:2f:46:20:5b:ee:30:ef:c3:f9:6b:c7:b5:5c:29:
fd:da:a3:d5:27:12:0a:75:b3:1b:35:5a:7b:59:ec:2f:a5:9d:
e3:83:d2:ef:6a:b9:d9:af:ad:27:82:6b:7f:31:d1:da:de:41:
54:31:6c:78:2d:ab:95:69:31:55:81:55:f2:01:e2:45:81:fa:
c0:0f:b4:12:c2:18:b0:bd:c0:8f:23:da:d7:29:65:ec:1b:42:
f8:11:b8:f4:3a:3c:1d:83:07:85:69:8c:94:71:f2:0f:ed:fe:
1e:0d:a1:3d:34:e0:f2:29:e9:b3:62:f8:0e:47:6f:9e:75:c0:
50:75:c9:a9:25:c3:e1:84:c0:a6:06:db:7f:72:63:6e:c9:5d:
eb:61:40:44:2c:eb:44:2b:fa:0a:ff:d1:4e:f7:8b:29:60:c9:
ab:f5:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:52:17 2026 by rpki-client