Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FW0-jCHFzYhQISAAJiDa67vwaww.roa
File: FW0-jCHFzYhQISAAJiDa67vwaww.roa (raw, json)
Hash identifier: IH7usul63SzAVptVSCI32UKMJnkOx8NG++4TlySg9QE=
Subject key identifier: 15:6D:3E:8C:21:C5:CD:88:50:21:20:00:26:20:DA:EB:BB:F0:6B:0C
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019FA49BFFC104920A970DCD9E5C2608543C
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FW0-jCHFzYhQISAAJiDa67vwaww.roa
Signing time: Mon 27 Jul 2026 17:25:14 +0000
ROA not before: Mon 27 Jul 2026 17:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27284
IP address blocks: 147.90.234.0/23 maxlen: 24
158.173.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:9b:ff:c1:04:92:0a:97:0d:cd:9e:5c:26:08:54:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 27 17:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=156d3e8c21c5cd88502120002620daebbbf06b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:4a:26:33:9c:09:2e:c9:de:eb:ce:43:fb:
f4:0c:9b:c1:91:98:0a:d6:ff:d4:23:e2:fd:88:0a:
8e:23:ff:13:7b:ef:fa:46:c6:5b:21:76:c9:ba:fd:
ec:05:d4:d7:12:e2:80:1c:c7:28:c9:a5:9e:e8:a6:
86:13:2c:cd:6e:57:66:4d:84:a3:e6:ae:0a:dc:91:
57:34:08:4a:96:53:aa:27:26:eb:eb:b8:2b:15:ec:
29:3c:42:af:62:d1:9c:b0:d8:97:a9:f9:cd:c4:f7:
d6:85:13:db:03:c6:90:b2:7a:b2:3e:2f:14:9b:c4:
d3:6a:1b:87:31:ba:5d:87:66:2a:09:4d:ff:c1:0d:
65:70:f9:e4:ac:40:60:81:da:12:cd:ba:0d:ec:e2:
29:af:97:a9:6f:fc:ff:5a:1c:8e:0a:d1:b2:1b:3c:
e3:89:15:a5:73:09:de:2c:2c:ea:ef:63:17:03:fc:
83:39:e3:bf:9d:9e:b1:78:4d:73:fe:c4:85:76:fb:
0b:0b:2b:3a:38:80:05:34:b3:8d:c6:14:b3:66:da:
53:f4:a9:99:61:f5:8b:4c:90:b4:aa:59:54:22:19:
36:9a:fb:4c:9a:fe:04:af:2b:a6:6e:4f:ff:37:1e:
8e:6d:8a:e0:a5:b8:41:18:8c:d9:b8:fd:72:00:df:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:3E:8C:21:C5:CD:88:50:21:20:00:26:20:DA:EB:BB:F0:6B:0C
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FW0-jCHFzYhQISAAJiDa67vwaww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.234.0/23
158.173.216.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:61:d4:77:14:c2:91:4d:d6:4c:ac:c9:38:bb:0c:91:46:f7:
6d:17:47:7b:41:3b:cb:ed:8c:81:ca:8e:98:17:9d:bb:0b:fc:
d5:bc:ab:b7:f6:fc:5e:8d:64:b9:f3:b7:dc:be:e2:87:57:99:
67:66:e4:4a:bf:04:9e:d2:f2:7b:c3:39:70:cc:7b:a2:ab:e2:
c2:43:0c:13:7d:dd:41:a1:35:a2:e2:2b:51:14:0c:85:34:21:
8a:f3:2c:b6:55:3b:57:26:c9:1d:89:d2:5b:76:88:c3:18:58:
7f:cd:84:87:0f:7f:94:03:82:00:f6:1a:79:fb:3c:75:4e:0f:
54:d7:06:0b:a8:ac:0b:f2:62:d5:0d:58:7e:e1:42:be:95:67:
88:58:f7:c9:c6:73:93:26:f9:c0:77:25:8b:8d:c6:f4:e6:8e:
cf:e0:4f:70:ce:a7:cc:cf:02:dc:0e:b1:bf:f2:e3:0f:87:83:
27:d5:37:0c:fa:28:c9:2d:aa:8c:84:72:3c:f0:52:47:ff:ee:
f5:0e:43:36:8c:c9:3b:a1:6f:7c:0c:27:b5:a3:13:c1:e3:a7:
81:d4:b7:0a:a9:8d:2b:81:08:62:f4:25:f2:77:ba:1d:09:9a:
c9:80:8f:ab:59:ee:82:b7:ce:a7:70:a9:64:c3:c1:cd:da:0d:
80:ca:9f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:41:23 2026 by rpki-client