Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/1-nEjApMTEeRJIn7bUOz0OxxiBq0.roa
File: 1-nEjApMTEeRJIn7bUOz0OxxiBq0.roa (raw, json)
Hash identifier: lbYjjUbr12AR7hdRUjgCrN5cjs0fc01uAnttT1Qjcw4=
Subject key identifier: FA:71:23:02:93:13:11:E4:49:22:7E:DB:50:EC:F4:3B:1C:62:06:AD
Certificate issuer: /CN=36ea22f04b94078aae015e00957b273ff038cf12
Certificate serial: 019E8C146438EE1C9D9E32E91C395D935B95
Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/1-nEjApMTEeRJIn7bUOz0OxxiBq0.roa
Signing time: Wed 03 Jun 2026 06:03:27 +0000
ROA not before: Wed 03 Jun 2026 06:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56382
IP address blocks: 185.244.29.0/24 maxlen: 24
185.244.30.0/24 maxlen: 24
185.244.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:14:64:38:ee:1c:9d:9e:32:e9:1c:39:5d:93:5b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12
Validity
Not Before: Jun 3 06:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa712302931311e449227edb50ecf43b1c6206ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:d6:a5:00:f3:a9:18:64:0a:29:63:26:4f:
89:60:34:30:78:36:90:35:9d:11:53:95:81:6f:88:
af:8f:42:a6:72:5f:71:37:18:c0:f1:2c:49:e1:c4:
65:08:7e:06:1a:7a:36:ba:af:3f:2a:3f:2d:61:df:
d3:58:27:5e:4f:d1:6b:3f:5f:74:d5:f7:ad:fc:a1:
df:65:d5:78:96:81:c9:9b:42:0b:f2:32:6f:f8:d1:
88:19:c6:06:29:c7:9f:cf:8f:e7:0f:93:8f:6b:2d:
c9:1a:4c:06:b0:81:ed:66:03:b4:51:ff:22:20:a7:
58:f0:c8:7b:77:aa:f1:35:b9:77:78:58:0d:23:d8:
de:f5:86:98:f8:a2:e4:d9:f7:8a:a4:a8:4e:ca:97:
f1:4e:6b:3c:53:ad:ef:c1:64:fc:e6:a6:b2:a4:4a:
18:b8:06:24:0c:d8:32:73:e8:1e:85:24:d5:7d:11:
26:2d:b7:89:6b:b2:d2:c8:b0:46:99:be:c6:25:30:
27:76:d6:68:ea:8a:f1:0a:b1:9e:fc:06:18:85:ad:
b9:a2:95:a2:d9:af:6f:3b:24:ce:aa:46:4d:0c:3c:
34:39:78:92:09:0b:27:c5:eb:51:b3:8a:c7:6e:06:
0f:05:13:a1:33:2e:20:39:81:51:f5:d7:7b:9b:df:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:71:23:02:93:13:11:E4:49:22:7E:DB:50:EC:F4:3B:1C:62:06:AD
X509v3 Authority Key Identifier:
keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/1-nEjApMTEeRJIn7bUOz0OxxiBq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.29.0-185.244.31.255
Signature Algorithm: sha256WithRSAEncryption
48:ae:eb:ba:98:7b:87:72:b5:e3:44:f1:8e:15:5f:eb:be:3c:
8d:91:90:6a:4b:34:e7:06:a1:9d:8b:09:52:33:1d:6c:39:94:
d8:1f:54:cf:2a:bb:b6:cd:ef:8b:76:f7:b1:b4:89:ab:0b:3e:
75:23:c6:c5:f8:70:ad:32:c1:a3:ca:25:2d:a5:c0:b2:09:e0:
a7:5c:dc:1e:46:47:40:e8:ee:0c:45:32:d4:ca:24:98:e8:8d:
84:ab:e4:ab:e9:99:a0:19:f7:f7:98:3e:31:89:67:5b:66:16:
0d:e0:0a:00:13:40:45:9d:3d:99:a2:3c:f6:77:30:23:af:5d:
42:b1:7e:b3:9c:77:51:e5:82:1c:1a:0e:1e:c0:00:2b:a7:18:
87:43:e9:1d:a4:7b:6a:23:3d:2d:01:96:19:08:8f:ad:38:50:
37:0a:87:55:1a:8e:8d:e0:8c:24:86:53:81:3c:dd:24:43:53:
47:ac:bb:db:cf:4d:f9:0a:68:13:ce:65:ff:14:d8:ba:d7:0a:
c8:59:fe:bd:92:e8:1e:5e:75:32:33:03:de:da:78:72:91:35:
a1:8f:a3:36:3a:06:8e:43:7e:7d:df:93:46:51:90:27:81:ef:
1a:c0:f6:c4:22:b8:f7:84:ba:33:34:4c:e9:ba:d3:b0:e6:9d:
1e:68:01:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:05:02 2026 by rpki-client