Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/FgHH8Xt1f7VzQSoTVAC27ghf-rE.roa
File: FgHH8Xt1f7VzQSoTVAC27ghf-rE.roa (raw, json)
Hash identifier: YVFe19iE2Xwhz35hkGQLqqB10MJOqZddrQvOlNebwwQ=
Subject key identifier: 16:01:C7:F1:7B:75:7F:B5:73:41:2A:13:54:00:B6:EE:08:5F:FA:B1
Certificate issuer: /CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Certificate serial: 019B7DCAC56A19F19A0AFBD61B676EA67B52
Authority key identifier: A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/FgHH8Xt1f7VzQSoTVAC27ghf-rE.roa
Signing time: Fri 02 Jan 2026 08:19:59 +0000
ROA not before: Fri 02 Jan 2026 08:19:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51493
IP address blocks: 91.217.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:c5:6a:19:f1:9a:0a:fb:d6:1b:67:6e:a6:7b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Validity
Not Before: Jan 2 08:19:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1601c7f17b757fb573412a135400b6ee085ffab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:1f:97:73:1e:91:58:a8:bc:2e:bd:7b:07:
07:a0:29:b8:11:c4:0b:dd:96:fa:e8:be:e1:b3:2b:
67:15:9f:63:7a:02:59:b5:2f:24:e7:56:84:bd:a3:
f4:da:88:54:4e:f7:bf:9e:4b:25:62:12:84:fe:2e:
82:6d:60:41:d7:67:bc:2d:43:ee:73:f1:00:a5:37:
26:08:a5:a7:b5:5b:3b:9c:65:99:3e:29:69:d9:17:
44:29:08:0d:64:8d:5a:f7:75:37:f4:ba:87:39:4b:
14:e9:46:bb:45:b9:fb:ba:97:da:92:6f:bb:da:e3:
94:5d:d5:aa:31:5b:e8:28:93:0f:87:e9:03:a4:97:
37:09:2c:c6:25:1a:7e:01:67:a8:b6:6e:30:e1:63:
43:3a:7e:bd:23:fe:86:8a:11:ed:85:c1:71:f7:0c:
98:99:dc:c6:70:64:5a:b3:6c:a4:b1:77:75:cc:f3:
e3:61:4c:56:93:16:17:02:6c:ce:c4:1a:4d:58:24:
12:27:1b:28:31:26:db:95:1b:90:29:d2:c8:3c:f0:
89:1e:9b:84:46:59:9d:97:7d:ba:e0:e1:34:76:be:
72:ab:e7:77:a7:8c:51:e5:23:f4:a6:f4:b3:2d:53:
7e:54:3e:b5:7c:f4:00:aa:aa:68:c4:90:77:29:1e:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:C7:F1:7B:75:7F:B5:73:41:2A:13:54:00:B6:EE:08:5F:FA:B1
X509v3 Authority Key Identifier:
keyid:A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/FgHH8Xt1f7VzQSoTVAC27ghf-rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:23:fa:01:f4:81:a7:6e:b6:fc:de:04:cc:07:3e:ad:1a:1e:
00:e4:8f:d0:09:c0:cc:e3:bb:41:18:58:7d:5f:95:15:21:28:
d2:0a:f7:9e:6b:93:f8:fb:24:b9:2a:64:68:3d:9b:26:e4:e6:
2f:a9:99:5c:c8:c2:57:d3:4e:f7:93:af:63:30:e3:f7:69:b4:
0b:35:49:e3:d2:d9:a5:0c:4e:9d:fa:c8:e8:1f:07:cb:0a:1e:
0b:9d:f5:b7:4e:94:1b:3d:bd:ba:65:5d:66:9a:2a:b4:4f:a2:
fc:bf:9e:81:85:0b:73:63:45:83:9d:d0:1f:68:d9:53:31:36:
18:f7:6f:35:b2:4c:98:1d:e5:f8:07:84:8d:be:e5:10:cc:e9:
15:db:8a:91:0d:27:52:14:d2:92:7c:ed:25:77:4d:b1:7f:2c:
c4:8b:a5:c0:ad:40:83:16:d9:cb:cd:13:a1:4b:7f:b6:5c:01:
90:dc:f3:d1:e3:af:3c:4e:f9:18:27:1b:25:9f:c7:f8:fa:5f:
e9:3e:b0:48:c5:39:e0:5c:32:9c:86:ff:e3:1b:e7:ad:1d:5e:
be:23:a6:e7:7e:8f:fd:e2:33:54:18:d3:63:39:5a:a2:fa:38:
fa:9c:e2:cb:8f:6f:b9:54:d5:76:f6:64:b2:a8:48:ec:ef:6f:
a4:df:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:01:52 2026 by rpki-client