Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/_IMfy7L64TiFDkx6bzVuqTYOy1g.roa
File: _IMfy7L64TiFDkx6bzVuqTYOy1g.roa (raw, json)
Hash identifier: hDAJnPY4g1h8UfFQwRf5t7zsTEF1odS8rtrxaz8PKTY=
Subject key identifier: FC:83:1F:CB:B2:FA:E1:38:85:0E:4C:7A:6F:35:6E:A9:36:0E:CB:58
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 01A0E7AF30AD3D1229BCF2A662E9281312DE
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/_IMfy7L64TiFDkx6bzVuqTYOy1g.roa
Signing time: Mon 28 Sep 2026 11:03:33 +0000
ROA not before: Mon 28 Sep 2026 11:03:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205634
IP address blocks: 144.124.209.0/24 maxlen: 24
144.124.216.0/24 maxlen: 24
144.124.217.0/24 maxlen: 24
144.124.218.0/24 maxlen: 24
144.124.219.0/24 maxlen: 24
144.124.220.0/24 maxlen: 24
144.124.221.0/24 maxlen: 24
144.124.222.0/24 maxlen: 24
158.94.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:30:ad:3d:12:29:bc:f2:a6:62:e9:28:13:12:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Sep 28 11:03:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc831fcbb2fae138850e4c7a6f356ea9360ecb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:88:21:72:f6:ce:10:fa:39:4f:d4:ba:03:
e0:f9:7c:08:a3:d4:01:85:26:4f:df:60:d9:aa:50:
99:7c:b2:35:dd:14:bc:5e:20:8a:ab:8d:1f:f5:b9:
b0:d3:48:0d:a3:06:21:f1:57:c0:dd:5a:c6:f6:43:
05:14:32:96:b3:a2:75:73:b0:c4:4d:d0:f6:23:b8:
dd:5f:73:04:c1:9d:bf:fe:34:ed:a5:1d:ae:0a:cb:
ef:a3:ab:e5:4a:94:1e:a1:68:2d:c0:36:a9:17:44:
34:f3:84:f1:e2:1d:bc:15:5b:e2:89:eb:6f:b7:fa:
0b:cd:c9:e4:10:6a:20:8a:98:d3:c0:6c:02:1b:c8:
7f:44:35:85:53:a1:8d:a7:a5:3a:15:57:f0:48:b9:
39:41:af:f5:40:c2:08:a5:27:22:6d:38:a1:e1:fc:
f3:28:46:c7:44:bd:1d:59:45:b9:bb:93:95:e9:98:
73:ae:04:5d:44:21:20:3e:c0:7d:9f:30:2e:bc:bd:
95:da:ec:f2:e5:84:70:9e:78:0a:a4:49:12:3c:dd:
0b:8b:14:f9:b3:78:b9:82:5b:78:ba:50:69:17:a0:
70:59:b3:23:35:91:af:62:d3:3d:9c:fc:b5:a1:95:
06:96:43:45:19:ac:d0:13:91:0d:0e:8f:e4:a6:08:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:83:1F:CB:B2:FA:E1:38:85:0E:4C:7A:6F:35:6E:A9:36:0E:CB:58
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/_IMfy7L64TiFDkx6bzVuqTYOy1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.124.209.0/24
144.124.216.0-144.124.222.255
158.94.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:22:a4:d5:2c:09:a7:ff:41:e6:c1:e5:08:cb:de:97:7e:ef:
4c:a7:b3:96:11:55:9a:e4:80:f0:ea:ef:e9:ff:f4:a6:eb:18:
dc:33:ae:de:12:65:10:f8:c6:82:f0:8d:3d:78:2c:6f:46:ef:
d2:7d:44:1c:d2:ab:25:a7:4d:ad:3c:04:9a:3b:24:61:bd:c1:
a8:9d:07:86:26:ea:49:c2:49:a3:f1:f2:eb:85:10:63:85:8f:
06:8a:5a:f5:9c:2d:89:c1:7c:ac:25:71:82:65:65:a1:07:88:
80:2b:06:c8:af:9c:31:83:e2:d1:19:87:46:0a:78:e9:27:6a:
4d:36:40:f3:9f:2c:a9:ca:e4:4b:2b:80:cf:fd:d3:4b:84:a4:
4d:15:02:8f:55:81:53:7d:57:5f:d9:0e:18:e0:1d:68:3b:82:
c9:13:94:bd:e5:16:fa:a0:de:49:26:75:68:54:09:30:c5:fe:
60:d9:4d:45:b3:65:b4:f5:7d:07:d1:aa:b7:7d:1c:4a:a6:2f:
66:19:08:b0:90:a9:89:a4:94:43:6f:d2:f0:db:90:db:38:03:
11:0f:62:be:60:8f:d9:33:c2:7d:1b:5b:fd:a0:db:ca:46:16:
e4:5a:c3:d8:7c:0d:14:40:d2:14:8b:73:4a:d0:7b:0a:48:d1:
a6:6c:f8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:23:30 2026 by rpki-client