Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Touy1G_QPr8UYTeYYQtRpqJk_5g.roa
File: Touy1G_QPr8UYTeYYQtRpqJk_5g.roa (raw, json)
Hash identifier: KcWcsKPmd8sllWoi5Lk5MB90LqzJor5vq1GKXnj4Hx8=
Subject key identifier: 4E:8B:B2:D4:6F:D0:3E:BF:14:61:37:98:61:0B:51:A6:A2:64:FF:98
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019C75C64CDEE712A00E45BA1CB4FBB6BDFE
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Touy1G_QPr8UYTeYYQtRpqJk_5g.roa
Signing time: Thu 19 Feb 2026 12:00:55 +0000
ROA not before: Thu 19 Feb 2026 12:00:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 213.145.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:c6:4c:de:e7:12:a0:0e:45:ba:1c:b4:fb:b6:bd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Feb 19 12:00:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e8bb2d46fd03ebf14613798610b51a6a264ff98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:81:d2:6d:04:88:38:5f:c5:68:f6:fc:32:
4c:0b:55:55:c5:a3:44:84:78:3f:3d:e8:b7:12:7e:
36:6c:66:1d:fc:85:8a:9a:45:c2:11:35:5f:aa:81:
11:07:be:a4:5a:62:c8:47:a6:9f:11:8a:e6:4f:27:
91:51:c8:92:c2:83:a6:3c:10:d6:6f:0f:5c:f6:b6:
98:f1:fe:83:33:b3:58:92:cb:77:3c:94:6b:3c:a1:
68:e8:e4:4b:63:33:5d:83:92:ab:55:79:8e:bf:10:
42:07:48:9d:11:8f:42:ab:65:49:0a:4d:80:81:fe:
b7:43:5a:e3:67:ad:b5:af:e7:65:bd:0e:e3:98:77:
93:a8:7a:68:2d:98:89:ac:e5:26:1d:3c:e8:b5:ab:
4d:ab:7e:13:b5:64:7b:13:13:75:74:5a:55:81:2a:
f1:18:4f:57:19:32:ce:8b:4a:6e:fc:24:40:f4:5d:
e7:74:b7:b8:a3:93:79:52:cc:b5:db:cc:cd:ba:57:
33:70:b1:14:a1:16:6d:bc:3d:93:be:f1:f8:9d:81:
5b:a9:62:97:5b:b2:cd:56:d4:bb:14:73:58:59:20:
d3:b2:6d:07:c1:af:c4:52:e6:64:e5:6d:7f:91:a6:
95:4a:8e:b5:ec:70:3b:13:3e:06:b5:b0:cc:2a:93:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8B:B2:D4:6F:D0:3E:BF:14:61:37:98:61:0B:51:A6:A2:64:FF:98
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Touy1G_QPr8UYTeYYQtRpqJk_5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d8:af:7d:f6:6d:48:40:2a:90:92:00:f7:dd:4a:68:da:36:
d8:f7:86:15:6b:48:d5:44:03:23:c1:d1:0e:06:3f:04:01:48:
0c:e8:7b:4f:7a:9e:c1:aa:33:48:6b:d0:13:e8:1b:26:5d:8f:
92:9f:0d:a6:e9:94:08:d0:75:92:5a:20:a8:6e:ae:6b:9c:7c:
3f:7c:c7:e2:3d:5a:45:cf:77:13:74:73:16:28:24:e5:d7:bc:
00:60:a5:28:5c:64:d9:83:61:db:d9:6c:16:a8:8d:05:e3:6a:
87:91:bb:e4:04:b9:86:df:6e:fd:ed:fc:8e:0a:a3:a3:37:e7:
a0:5b:82:60:c7:3f:ad:1e:6a:6c:ce:07:65:82:3a:e2:8b:c4:
e8:f2:a2:11:70:04:a7:dc:ce:41:ac:92:42:d3:bd:8d:2c:a6:
84:30:e1:89:fd:84:9a:69:8c:fa:a4:4c:40:92:65:cc:de:e9:
46:08:91:74:9a:60:eb:6f:95:5d:5f:6f:0c:48:c1:52:5c:42:
b1:a2:58:ee:ec:f2:11:59:1a:3f:38:11:71:ed:17:ec:f8:07:
15:15:bb:9d:e0:32:e2:48:40:d4:8e:6c:b3:f0:30:e6:f9:ca:
7a:e7:ad:d1:9d:8a:bc:53:cd:4d:86:17:96:73:cb:17:b5:df:
85:11:8c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:40 2026 by rpki-client