Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/_R9ozOhjsnXdveB9O93LpJsoaN4.roa
File: _R9ozOhjsnXdveB9O93LpJsoaN4.roa (raw, json)
Hash identifier: FgeHnK3aQkxgbjIxN0SaKLGGPBqXK9ZTQrdZ1bFtpBc=
Subject key identifier: FD:1F:68:CC:E8:63:B2:75:DD:BD:E0:7D:3B:DD:CB:A4:9B:28:68:DE
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 019C49362C3B2BEED3D3BACA22452CA049AD
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/_R9ozOhjsnXdveB9O93LpJsoaN4.roa
Signing time: Tue 10 Feb 2026 20:20:12 +0000
ROA not before: Tue 10 Feb 2026 20:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 145.224.254.0/24 maxlen: 24
145.224.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:49:36:2c:3b:2b:ee:d3:d3:ba:ca:22:45:2c:a0:49:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Feb 10 20:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd1f68cce863b275ddbde07d3bddcba49b2868de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:33:e6:26:c3:c2:c3:aa:5b:99:50:af:5d:
13:70:23:12:68:91:9f:62:df:c5:40:fd:5e:2d:b5:
8f:44:56:37:f2:20:c0:bb:11:84:4d:7f:43:71:a8:
d7:77:a7:7a:81:9f:fb:95:a6:84:5b:e5:6c:10:35:
a0:ca:be:41:52:3e:67:6f:33:6a:e5:5e:d1:7e:d7:
d4:9c:a7:18:a9:c3:99:f9:ca:77:2c:ac:47:b4:cb:
56:3b:75:11:49:5f:14:7b:a6:0f:4d:e2:6f:57:b3:
a9:20:03:2e:76:f1:66:b2:73:34:4e:73:43:80:c5:
43:b6:61:ac:e4:e2:e8:be:2a:4e:c6:09:e2:bb:e9:
6d:d5:6c:2a:95:84:86:2d:55:89:33:d6:f9:f3:a3:
cc:5f:ae:f8:fc:c4:81:99:49:d9:90:a0:51:25:9d:
07:0f:ed:48:57:7d:4a:cb:30:e1:66:3a:9f:e0:c5:
9a:12:2b:7d:99:e1:ca:72:f5:09:80:f9:b3:43:23:
90:71:9d:48:ad:e3:48:44:19:85:58:1d:ef:83:31:
b9:8e:c6:2d:49:95:5f:58:d9:5e:61:3a:64:35:bf:
a4:2a:1d:d5:b8:28:dd:05:e9:5c:18:c0:12:4e:6d:
31:a1:e6:54:89:9d:f2:0d:54:af:11:fd:e4:30:93:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:68:CC:E8:63:B2:75:DD:BD:E0:7D:3B:DD:CB:A4:9B:28:68:DE
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/_R9ozOhjsnXdveB9O93LpJsoaN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.224.254.0/23
Signature Algorithm: sha256WithRSAEncryption
89:7b:d2:7d:66:5d:59:5f:b2:88:cd:d8:df:b9:b1:a4:36:a2:
22:2d:4c:9a:4e:59:e0:53:43:62:cc:c7:cf:80:0d:fc:11:e8:
6a:e8:e0:c9:8f:fd:b0:6e:ac:7b:e4:8d:48:44:f9:3a:67:09:
ca:a9:ed:4b:db:17:12:0d:e2:1d:fe:a6:5b:cf:de:d2:ef:f0:
82:db:5f:c3:cd:02:7f:f2:88:70:61:dd:bb:eb:7a:77:b3:7e:
ef:5f:2b:9f:63:49:d4:a5:e4:a5:42:e8:96:04:47:2e:ca:cb:
41:b3:5b:8d:7f:37:cd:4f:6c:9f:c9:f0:c9:d1:38:90:67:dc:
12:5e:c0:d2:37:0d:98:d1:9c:ee:28:66:5b:95:95:3c:65:85:
27:33:50:78:29:8e:29:06:09:33:5b:b0:9d:b2:65:1b:b3:10:
fa:82:8d:a5:ab:31:90:7f:1b:25:16:44:47:89:03:96:21:a6:
2c:75:4f:6b:9d:36:59:79:c0:d3:f2:0a:31:21:b8:3b:dd:33:
a7:78:ac:e1:d8:ee:1b:cf:a0:91:4b:ba:c8:42:32:28:da:34:
51:a6:d0:03:de:2e:d4:be:d3:21:58:5f:19:f2:3e:32:f5:cd:
4c:4a:da:80:f3:d8:f8:2d:b1:b1:10:a3:e3:89:e6:2b:42:2c:
bc:34:d6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:29:01 2026 by rpki-client