Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/FOVnA7fzKyM0Cd5APfuCDllFHqI.roa
File: FOVnA7fzKyM0Cd5APfuCDllFHqI.roa (raw, json)
Hash identifier: /KXASaDL9GJu3XgGBmPZMKdfaA+uKruntNpUP5JVRuI=
Subject key identifier: 14:E5:67:03:B7:F3:2B:23:34:09:DE:40:3D:FB:82:0E:59:45:1E:A2
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019FFB5127F68EB8CD12B9372156CED245D5
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/FOVnA7fzKyM0Cd5APfuCDllFHqI.roa
Signing time: Thu 13 Aug 2026 13:30:27 +0000
ROA not before: Thu 13 Aug 2026 13:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197384
IP address blocks: 157.173.17.0/24 maxlen: 24
157.173.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:51:27:f6:8e:b8:cd:12:b9:37:21:56:ce:d2:45:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Aug 13 13:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14e56703b7f32b233409de403dfb820e59451ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:c5:84:e2:8a:b7:82:4d:49:b1:74:e8:c9:
47:50:50:30:f7:af:c1:13:f4:66:68:c4:a7:7a:0d:
a6:88:17:98:2a:72:a9:b3:3d:08:86:09:d0:3d:d3:
d5:d2:f1:d7:a6:a4:52:50:43:0b:51:19:fe:d6:77:
db:33:08:20:ec:66:07:0e:37:ea:d7:91:e9:05:7b:
25:96:cc:c0:ed:8e:c9:4c:e3:3e:73:25:17:cc:b8:
7d:c6:bf:a3:0b:a2:0b:aa:b1:60:66:ae:43:c3:48:
f8:87:3d:a2:c7:21:aa:1c:25:8b:75:ef:9e:0d:e2:
75:d7:71:ed:70:eb:9a:1e:be:44:f1:20:41:6a:7f:
8c:2d:e3:3c:04:a3:ae:ab:36:ee:d9:33:4f:14:9e:
ee:44:d9:57:1a:7d:af:6a:a6:6d:48:1d:29:1f:b6:
f7:eb:14:e9:9a:19:2a:44:a3:7d:4e:22:be:12:79:
b2:39:3f:d3:1d:33:2c:9e:f9:41:4a:80:db:4f:e5:
5a:16:43:99:a3:e5:90:28:37:08:53:52:30:7f:6c:
1d:26:b7:5e:13:f7:8a:fb:8a:c5:1a:fc:19:07:2a:
a7:37:f3:8b:fd:8d:67:72:ce:8c:76:2a:59:18:b2:
cb:80:10:83:ff:b2:2e:86:00:44:28:e4:02:f3:9d:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:67:03:B7:F3:2B:23:34:09:DE:40:3D:FB:82:0E:59:45:1E:A2
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/FOVnA7fzKyM0Cd5APfuCDllFHqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.17.0/24
157.173.19.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e6:1a:0a:05:55:a7:0a:5f:fa:fb:cf:8a:04:f0:4a:cd:fe:
a7:6d:11:ca:cd:38:f2:6b:de:1f:00:22:03:fb:c7:81:9c:c6:
8e:5e:12:9b:8c:e4:e9:cb:8e:5e:3b:10:ef:6a:c3:0a:fe:dc:
ab:3a:fe:ce:73:b1:40:35:d4:f7:a9:4d:c7:dd:aa:c4:95:15:
ed:4b:0d:0e:4c:65:d8:18:a2:e9:3d:c4:65:8a:0f:9b:72:46:
99:dc:10:58:fc:bf:14:68:91:ff:ac:13:f0:70:38:07:44:e2:
0d:1c:19:4b:30:77:17:d6:8f:b8:87:69:f8:6c:ea:e6:3c:ac:
b3:39:ad:d9:e8:c3:fe:9f:49:b3:36:99:55:1c:d5:7d:cf:77:
79:cd:31:05:47:9e:b1:10:18:cd:92:2e:94:13:2b:4e:35:52:
6f:be:ea:60:14:c5:16:66:0f:5f:06:ab:bc:9f:da:b7:20:fd:
33:4b:f6:2a:e6:8b:7f:a2:1b:bd:1c:2b:b3:e3:90:6c:38:d3:
0a:48:5f:38:40:e3:e6:0f:60:5e:26:9e:19:e1:73:4f:06:20:
b4:73:e0:ff:0d:01:8d:08:b8:89:b6:5b:07:0a:e3:63:06:e6:
b8:02:2a:b9:3a:de:76:de:af:b3:31:52:9b:9d:fe:e7:38:67:
5c:5a:90:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:29 2026 by rpki-client