Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/favUaVSLQCzIxcL3qGI3p1RKI3w.roa
File: favUaVSLQCzIxcL3qGI3p1RKI3w.roa (raw, json)
Hash identifier: xmgoItMkPsbXePcvxq/hz6SI/VV2fF2Gq6G6lMLJ7pY=
Subject key identifier: 7D:AB:D4:69:54:8B:40:2C:C8:C5:C2:F7:A8:62:37:A7:54:4A:23:7C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1AF327DF44B21E9E074E19517756DB220
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/favUaVSLQCzIxcL3qGI3p1RKI3w.roa
Signing time: Fri 06 Nov 2026 04:51:23 +0000
ROA not before: Fri 06 Nov 2026 04:51:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218568
IP address blocks: 193.178.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:af:32:7d:f4:4b:21:e9:e0:74:e1:95:17:75:6d:b2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 6 04:51:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dabd469548b402cc8c5c2f7a86237a7544a237c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:1d:d9:40:07:cd:3f:93:9a:a0:71:83:be:
ff:a9:47:dc:9a:ce:a5:8c:47:16:29:ce:c4:db:ad:
d5:de:71:8a:24:d4:70:b3:7f:8a:a5:43:e7:59:ac:
09:06:d4:61:0c:bf:4d:20:47:94:5d:ed:69:c3:19:
ab:7c:5a:86:5f:a2:ba:92:05:91:f5:8d:8d:ed:f5:
8c:ee:7f:2a:ca:fc:c5:ea:3e:45:5c:44:1b:4f:09:
27:c6:ce:06:65:91:62:ff:24:ba:0e:b9:6b:b8:f6:
3c:ae:91:b6:8a:45:8d:1d:fc:52:59:2f:e4:5b:23:
c2:c0:87:6f:1f:45:70:31:bf:e6:ab:41:5a:1a:91:
e9:cf:cc:6f:d6:a6:92:8a:bd:75:d6:34:8f:15:af:
43:ff:d2:51:c1:88:fb:33:3b:60:d8:f1:26:bb:d3:
e6:79:4b:b7:97:cd:f5:2d:50:03:6f:dd:8e:0d:94:
4b:b0:03:b6:05:7c:28:a3:f0:c6:3b:ab:9a:e8:ac:
0e:ca:20:f5:e8:ed:1e:56:cb:b9:1b:5c:83:e6:15:
c8:11:d9:ca:2c:64:0b:66:60:71:6d:75:76:63:6e:
25:99:7d:3a:8c:59:04:85:bc:5c:d8:83:32:1a:fc:
b3:e1:96:af:00:c7:53:5e:b1:ce:bc:1d:ff:d3:f6:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AB:D4:69:54:8B:40:2C:C8:C5:C2:F7:A8:62:37:A7:54:4A:23:7C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/favUaVSLQCzIxcL3qGI3p1RKI3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6f:17:1a:62:f0:e2:62:2d:6b:bf:a7:07:4a:07:41:e5:6e:
aa:21:8e:dd:68:32:54:b4:fa:a8:c3:8b:d6:2c:7f:fc:17:4d:
df:b7:8c:9b:8b:c9:e7:6d:ba:0a:9e:93:c8:72:ad:6b:04:4d:
1c:cf:62:98:6f:16:34:06:d2:f5:f3:64:ca:a7:9b:7f:f0:dd:
06:26:47:b0:c7:6a:ac:cb:79:12:f6:00:ab:d6:48:ba:07:5c:
a8:e1:31:b8:fa:68:64:83:a7:ef:93:d3:a9:e3:63:b4:1a:87:
eb:12:53:4f:34:e3:e5:7d:e4:25:15:ac:a0:54:1d:9d:61:84:
1d:37:2c:54:b4:b8:44:d4:14:3f:1c:22:02:56:56:9c:f1:ba:
15:a7:76:e2:36:90:35:8d:da:17:74:65:53:c1:88:f9:71:2e:
6a:6f:5a:28:88:e7:e8:24:c6:d0:32:7d:e8:06:60:74:be:52:
e0:40:43:7a:dc:89:63:10:fa:93:a6:6d:c5:34:23:95:b6:4f:
ea:a8:33:fd:8e:aa:e6:1c:45:a8:02:bd:e4:4c:3c:74:b8:b7:
4e:b4:01:06:16:8f:34:9a:2a:db:84:39:5d:c8:e4:05:ab:31:
03:df:87:71:11:90:8e:5c:fc:72:49:1b:9d:31:40:60:3d:38:
4f:34:9a:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGvMn30SyHp4HThlRd1bbIgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMTA2MDQ1MTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGFiZDQ2OTU0OGI0MDJjYzhjNWMyZjdhODYyMzdhNzU0NGEyMzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdEd2UAHzT+TmqBxg77/qUfcms6l
jEcWKc7E263V3nGKJNRws3+KpUPnWawJBtRhDL9NIEeUXe1pwxmrfFqGX6K6kgWR
9Y2N7fWM7n8qyvzF6j5FXEQbTwknxs4GZZFi/yS6DrlruPY8rpG2ikWNHfxSWS/k
WyPCwIdvH0VwMb/mq0FaGpHpz8xv1qaSir111jSPFa9D/9JRwYj7Mztg2PEmu9Pm
eUu3l831LVADb92ODZRLsAO2BXwoo/DGO6ua6KwOyiD16O0eVsu5G1yD5hXIEdnK
LGQLZmBxbXV2Y24lmX06jFkEhbxc2IMyGvyz4ZavAMdTXrHOvB3/0/aqBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH2r1GlUi0AsyMXC96hiN6dUSiN8MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZmF2VWFWU0xRQ3pJeGNMM3FHSTNwMVJLSTN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbKGMA0G
CSqGSIb3DQEBCwUAA4IBAQBFbxcaYvDiYi1rv6cHSgdB5W6qIY7daDJUtPqow4vW
LH/8F03ft4ybi8nnbboKnpPIcq1rBE0cz2KYbxY0BtL182TKp5t/8N0GJkewx2qs
y3kS9gCr1ki6B1yo4TG4+mhkg6fvk9Op42O0GofrElNPNOPlfeQlFaygVB2dYYQd
NyxUtLhE1BQ/HCICVlac8boVp3biNpA1jdoXdGVTwYj5cS5qb1ooiOfoJMbQMn3o
BmB0vlLgQEN63IljEPqTpm3FNCOVtk/qqDP9jqrmHEWoAr3kTDx0uLdOtAEGFo80
mirbhDldyOQFqzED34dxEZCOXPxySRudMUBgPThPNJq4
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:26:35 2026 by rpki-client