Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/FjWrMeaqmFrb_aVcAmZFH7JXhMQ.roa
File: FjWrMeaqmFrb_aVcAmZFH7JXhMQ.roa (raw, json)
Hash identifier: BAGPJ78nkyqpVFTQbCNjTsdEpQYs9ixpNRWsmn0g7Zg=
Subject key identifier: 16:35:AB:31:E6:AA:98:5A:DB:FD:A5:5C:02:66:45:1F:B2:57:84:C4
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A1D41336861BAA79E3E3E64D7CD18A1799
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/FjWrMeaqmFrb_aVcAmZFH7JXhMQ.roa
Signing time: Fri 13 Nov 2026 08:43:11 +0000
ROA not before: Fri 13 Nov 2026 08:43:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 85.232.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:13:36:86:1b:aa:79:e3:e3:e6:4d:7c:d1:8a:17:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Nov 13 08:43:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1635ab31e6aa985adbfda55c0266451fb25784c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:e1:71:fe:71:93:a0:ef:0b:e1:95:8a:b1:
c3:fe:12:8f:35:92:a1:c4:0e:e6:f7:19:d4:f2:01:
8e:73:49:17:22:ce:e2:77:af:94:81:ca:b7:5f:83:
46:df:f1:76:cb:22:89:ea:e6:63:1f:bb:e1:93:d2:
18:90:b5:31:fb:83:bf:0c:d1:72:03:8a:d6:a4:c1:
0b:ff:c0:76:20:69:08:d2:06:0e:83:63:59:ba:e9:
a7:e0:11:f7:b2:f6:3d:06:f7:a8:b2:35:70:8a:e2:
e7:7d:90:6e:bd:9f:f2:db:55:0a:5f:fe:5d:94:58:
82:75:a5:8b:5e:88:76:17:38:da:a1:94:9c:9c:f0:
e2:f5:7b:5b:97:60:00:74:e9:df:f0:2b:1b:41:96:
85:9f:82:d0:89:35:7e:f3:25:8c:b5:f3:6a:6f:b9:
ed:f5:ce:c3:aa:87:18:52:49:fc:66:c1:c1:34:8b:
fd:64:93:18:d3:02:30:0e:79:78:51:2c:a6:1f:13:
8f:f3:0e:1b:d3:e3:dc:28:ef:fb:70:68:5e:f5:6d:
b9:fb:ea:a0:f0:45:b1:6b:20:f1:94:27:a3:96:49:
9b:0a:40:42:00:6c:69:dd:cf:ad:b5:91:6b:5e:8a:
b7:62:c1:9d:1f:db:56:75:77:b6:c1:97:b3:e7:65:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:35:AB:31:E6:AA:98:5A:DB:FD:A5:5C:02:66:45:1F:B2:57:84:C4
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/FjWrMeaqmFrb_aVcAmZFH7JXhMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ca:13:8f:20:a7:66:79:4f:02:ce:4e:ac:cd:14:09:c9:fa:
66:07:de:7b:8f:4d:d9:ba:99:c1:f0:2a:4b:c3:53:af:75:5f:
e6:e4:06:1e:d5:eb:9f:b2:dc:9a:2d:e7:fb:b3:31:8f:e1:83:
06:35:83:84:a0:29:5b:4c:5a:77:b3:0b:bd:95:52:b9:e1:f1:
f3:a9:98:22:45:c6:18:9c:cc:09:e0:c6:00:2e:f8:24:4c:60:
38:5d:52:bf:6d:d0:7a:68:c8:c7:40:f2:27:87:dd:e9:fd:a5:
3b:d6:4e:0f:d2:8b:11:f8:39:70:f0:85:2a:3f:db:07:64:a4:
d9:9e:36:9e:98:af:20:cd:81:d8:08:78:cf:cd:af:cb:7a:62:
32:06:19:0d:57:a9:47:eb:d5:18:bc:19:e7:6a:f2:42:d6:a0:
c6:99:b7:30:d3:bb:c0:71:77:8e:d0:61:ff:96:2e:68:cc:b7:
fb:f6:04:b6:b2:e5:5b:5e:ce:4f:58:33:d3:f1:90:ab:e2:36:
2a:1e:b0:5e:90:37:e1:d8:d8:20:68:4f:bf:40:07:c2:ca:b7:
d3:b6:e2:25:ca:37:66:de:1c:19:44:fa:c1:6b:c8:43:43:4a:
c4:b2:69:eb:be:dc:5e:cf:95:1a:f1:1f:db:20:ff:20:7b:98:
72:c1:95:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:51:23 2026 by rpki-client