Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1-w0qBk994pd-BR7p7ARmsJ9l_Q8.roa
File: 1-w0qBk994pd-BR7p7ARmsJ9l_Q8.roa (raw, json)
Hash identifier: cy0LdGDdlRAjWe/TUqhyy+5043TUD2+ZBXw/OLIrovM=
Subject key identifier: FB:0D:2A:06:4F:7D:E2:97:7E:05:1E:E9:EC:04:66:B0:9F:65:FD:0F
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A195E6FDCCD35DACB4251B913152944A47
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1-w0qBk994pd-BR7p7ARmsJ9l_Q8.roa
Signing time: Sun 01 Nov 2026 06:58:25 +0000
ROA not before: Sun 01 Nov 2026 06:58:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9087
IP address blocks: 213.145.90.0/23 maxlen: 24
213.145.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:e6:fd:cc:d3:5d:ac:b4:25:1b:91:31:52:94:4a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Nov 1 06:58:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb0d2a064f7de2977e051ee9ec0466b09f65fd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:54:2f:b0:cb:9c:1c:57:f1:0d:e7:78:d4:
3c:ae:e1:8e:ba:a1:eb:93:1e:2f:21:e3:8e:06:5e:
5a:b3:67:5b:38:68:66:e4:e7:af:56:c0:ce:a6:fb:
5d:fd:c2:2f:98:6e:f2:ef:d4:61:d5:98:a9:54:fd:
64:58:30:43:45:64:1d:a9:cb:a1:45:37:a0:01:95:
f6:db:54:8d:a3:df:f1:7c:08:dd:bd:73:fe:75:0f:
b6:97:19:b7:9b:cb:09:bf:ef:ef:8c:6c:4e:ce:0f:
85:b6:80:dd:9a:89:ed:82:9c:f9:ad:6b:84:2a:b2:
27:f5:3f:f3:ab:2d:2c:67:b3:95:87:eb:d1:7f:03:
97:8e:bc:24:58:f0:03:54:4b:ae:fa:fb:89:ed:b7:
a7:fc:32:f9:c2:b5:35:b9:67:21:93:11:16:fc:98:
4d:70:99:33:55:5e:9e:0d:88:ae:57:f2:81:b9:8e:
64:b6:41:07:c8:54:29:ea:ef:d0:1f:ad:97:3c:34:
79:f0:24:f9:4c:b6:bf:7b:b5:6b:45:fb:ac:1d:41:
0d:5f:ca:5e:b1:1d:72:1e:eb:59:00:6d:30:f0:e3:
e4:cf:91:a8:8f:cf:b2:c4:dc:04:5f:50:52:f5:2b:
8a:7c:50:94:44:6c:09:ae:a9:36:94:27:2c:22:6b:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0D:2A:06:4F:7D:E2:97:7E:05:1E:E9:EC:04:66:B0:9F:65:FD:0F
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1-w0qBk994pd-BR7p7ARmsJ9l_Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.90.0-213.145.93.255
Signature Algorithm: sha256WithRSAEncryption
95:a5:c9:48:86:95:61:c2:78:13:1a:09:e7:f1:bd:71:c7:5e:
31:af:6b:ac:81:79:f7:22:a9:5c:91:dd:22:09:8b:6c:ab:6c:
bf:31:5e:fc:da:16:a6:4f:1d:67:1a:fb:9a:0b:f0:d2:47:52:
be:42:d5:09:a4:e2:54:6b:8d:bf:6d:87:68:21:5c:6a:e8:a4:
90:e1:e1:dd:cb:a1:65:74:f6:28:3e:0c:c6:6f:95:20:5c:06:
67:ac:57:c1:47:67:58:f6:87:c9:f4:68:d3:1f:f8:f4:e9:8d:
35:33:15:70:aa:d2:ab:3b:13:a0:35:81:81:b6:a3:7c:53:6c:
f8:e1:87:0b:99:d8:96:be:7f:24:17:67:5c:65:06:57:1d:99:
a8:8c:b3:ab:d1:05:96:14:bf:94:55:78:6f:e6:35:42:fd:84:
a5:35:98:03:6c:4c:83:f2:8e:ee:8b:bb:c2:f4:30:00:ef:02:
12:f2:af:96:33:04:d8:af:b4:31:f1:6f:47:88:19:09:af:48:
ba:50:37:33:d3:57:b5:6a:b9:a4:63:ae:6c:73:bb:17:d2:d3:
ff:fb:be:d0:6c:be:12:74:c7:38:8e:29:ec:99:ae:7e:f3:fe:
45:df:4c:9e:64:71:b6:cd:5b:11:17:b7:83:dc:03:d2:82:a4:
45:1b:13:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:03:48 2026 by rpki-client