Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/FQaFiTcf67x6YrpuBrF65w_8hug.roa
File: FQaFiTcf67x6YrpuBrF65w_8hug.roa (raw, json)
Hash identifier: CNjoRJ7uhvB1XswkiORZT6na1N/pFMt+GGKFD8Y6iH0=
Subject key identifier: 15:06:85:89:37:1F:EB:BC:7A:62:BA:6E:06:B1:7A:E7:0F:FC:86:E8
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 019C540B4DF3DCB1FE89FDCCE279CBDC3647
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/FQaFiTcf67x6YrpuBrF65w_8hug.roa
Signing time: Thu 12 Feb 2026 22:49:12 +0000
ROA not before: Thu 12 Feb 2026 22:49:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8069
IP address blocks: 145.190.0.0/23 maxlen: 23
145.190.2.0/24 maxlen: 24
145.190.3.0/24 maxlen: 24
145.190.4.0/23 maxlen: 23
145.190.6.0/24 maxlen: 24
145.190.7.0/24 maxlen: 24
145.190.8.0/21 maxlen: 21
145.190.16.0/21 maxlen: 21
145.190.24.0/21 maxlen: 21
145.190.32.0/22 maxlen: 22
145.190.36.0/24 maxlen: 24
145.190.37.0/24 maxlen: 24
145.190.38.0/23 maxlen: 23
145.190.40.0/23 maxlen: 23
145.190.42.0/24 maxlen: 24
145.190.43.0/24 maxlen: 24
145.190.44.0/22 maxlen: 22
145.190.48.0/22 maxlen: 22
145.190.52.0/23 maxlen: 23
145.190.54.0/24 maxlen: 24
145.190.55.0/24 maxlen: 24
145.190.56.0/23 maxlen: 23
145.190.58.0/24 maxlen: 24
145.190.59.0/24 maxlen: 24
145.190.60.0/24 maxlen: 24
145.190.61.0/24 maxlen: 24
145.190.62.0/24 maxlen: 24
145.190.63.0/24 maxlen: 24
145.190.64.0/24 maxlen: 24
145.190.65.0/24 maxlen: 24
145.190.66.0/24 maxlen: 24
145.190.67.0/24 maxlen: 24
145.190.68.0/24 maxlen: 24
145.190.69.0/24 maxlen: 24
145.190.128.0/24 maxlen: 24
145.190.129.0/24 maxlen: 24
145.190.130.0/24 maxlen: 24
145.190.131.0/24 maxlen: 24
145.190.132.0/24 maxlen: 24
145.190.133.0/24 maxlen: 24
145.190.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:54:0b:4d:f3:dc:b1:fe:89:fd:cc:e2:79:cb:dc:36:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Feb 12 22:49:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15068589371febbc7a62ba6e06b17ae70ffc86e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:13:ba:73:be:3d:26:3d:db:bb:3c:79:b1:
a9:53:7c:43:97:63:89:b7:ec:a6:f4:6b:4a:0b:c6:
36:eb:05:a7:62:51:a4:c9:3c:f6:5b:41:92:88:5c:
21:21:12:1b:e6:cd:b8:ae:3c:dd:a8:10:56:53:63:
77:30:c3:4d:43:74:89:08:a1:17:14:56:be:ae:f3:
49:78:92:93:7a:42:24:9f:45:77:9a:53:14:2e:1c:
03:23:b6:24:14:1b:ca:b1:77:66:9a:be:6d:37:40:
bf:4c:64:33:2d:b7:ac:e6:5c:bb:c8:ba:67:51:43:
78:66:bf:9d:78:98:99:53:b0:16:70:ce:bc:f3:dc:
78:97:f3:fd:ef:a3:f3:c7:37:8c:15:30:75:8a:3b:
17:30:9e:c2:f3:f7:05:f3:78:94:6b:70:a5:57:1f:
f9:a2:e0:d7:2e:46:03:2c:dc:6a:87:bb:db:bf:cd:
e3:1b:a4:34:b8:f0:b1:6d:9b:a2:be:28:1e:d0:27:
8e:a4:f3:6d:c7:cc:df:74:f0:95:46:17:de:bb:88:
60:02:f8:2a:af:d5:14:00:fc:10:55:c4:68:94:21:
c5:6b:27:54:97:e7:dc:1a:d7:5c:33:06:e8:d3:01:
a9:82:a3:db:b8:68:35:de:c0:c0:06:6b:19:ee:cc:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:06:85:89:37:1F:EB:BC:7A:62:BA:6E:06:B1:7A:E7:0F:FC:86:E8
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/FQaFiTcf67x6YrpuBrF65w_8hug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.190.0.0-145.190.69.255
145.190.128.0-145.190.134.255
Signature Algorithm: sha256WithRSAEncryption
87:83:a1:d3:24:b8:cb:2e:f0:bc:5f:7e:24:12:b7:6c:20:47:
05:62:62:d6:84:94:c2:0f:60:5b:2e:bd:71:f1:40:b4:67:10:
4d:7b:da:f6:2d:81:05:09:eb:be:7c:8d:98:0a:15:d1:e7:8d:
4e:79:d5:d7:dc:4d:3c:06:57:5c:57:48:47:55:92:c7:08:07:
e7:27:c6:f9:c0:46:33:8f:78:1b:f9:91:dd:dc:8a:9e:be:aa:
2a:e0:74:1f:0f:0b:7a:16:ac:d5:96:2e:1b:ee:d2:08:f2:d4:
8d:3f:9e:7a:55:1f:39:5f:f4:be:58:1d:d5:06:76:cd:8c:38:
f5:62:f7:10:1d:cd:1c:74:64:59:c7:81:05:61:41:a6:4d:c1:
f6:87:69:fd:63:59:af:6e:af:a0:fc:53:b7:95:5e:57:15:1b:
cc:ee:4b:da:d4:0c:ec:cd:a1:77:a2:1f:6d:ac:38:de:6b:f7:
12:06:52:fb:03:1b:bb:12:b1:e5:f9:a2:aa:52:d1:a8:ea:8c:
e2:55:3d:14:ec:bf:f4:4f:1c:7f:47:95:49:0d:1c:ce:f7:ae:
f8:b7:4d:c7:de:2d:8a:f4:7c:d4:a0:40:c3:75:e0:8b:6d:e0:
e3:72:ad:d1:d0:da:56:51:5c:aa:ff:05:2f:47:1f:fe:5d:56:
6c:dc:66:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:38 2026 by rpki-client