Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/F0GFVvCeJ9pbO-4_eSWYbzssBrU.roa
File: F0GFVvCeJ9pbO-4_eSWYbzssBrU.roa (raw, json)
Hash identifier: du0k4fDhDK95r3qBKSzIHYwrlEx5NYL+57Wh2ZVcbWE=
Subject key identifier: 17:41:85:56:F0:9E:27:DA:5B:3B:EE:3F:79:25:98:6F:3B:2C:06:B5
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A1AACE3837D920B3A6A6D19511480A53C7
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/F0GFVvCeJ9pbO-4_eSWYbzssBrU.roa
Signing time: Thu 05 Nov 2026 08:23:23 +0000
ROA not before: Thu 05 Nov 2026 08:23:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 92.62.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:ce:38:37:d9:20:b3:a6:a6:d1:95:11:48:0a:53:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Nov 5 08:23:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17418556f09e27da5b3bee3f7925986f3b2c06b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:45:df:b7:5e:aa:7c:7c:35:30:90:38:de:
ad:9f:cf:38:bf:2f:4e:21:dc:59:4e:1d:3e:40:b0:
ef:04:33:46:ad:f3:45:8f:25:58:13:67:3e:1c:06:
41:a7:05:60:4a:9b:7f:5c:e9:de:9c:f6:26:ba:42:
3e:74:54:6a:75:3f:ac:01:81:1c:16:f9:97:8e:fb:
0c:b6:9d:6f:cc:ce:fb:b9:0f:5a:1b:7b:ed:d8:3a:
f5:c6:1a:61:6b:b4:c3:a0:ad:3b:b3:b3:86:d5:d5:
08:9d:9a:bf:cb:b6:79:31:15:29:c9:b5:72:4e:e0:
82:35:13:b5:44:3f:60:cc:d3:a4:69:0f:b4:58:2a:
f4:4f:e8:1c:57:12:19:76:77:7b:62:bc:e8:45:7a:
30:00:f2:89:3d:ec:90:fe:49:5a:bd:6f:47:1d:14:
c7:66:14:75:1d:66:f3:83:0b:f2:c4:ff:80:b1:79:
11:f0:62:8a:b6:64:5b:93:5a:fd:eb:ce:fe:b3:f7:
83:11:aa:4d:34:dc:c6:b3:ee:9d:13:e2:55:60:bb:
87:ff:1d:be:5c:01:f3:08:13:d3:e5:4d:90:f3:2d:
2c:56:b9:10:a0:71:0c:55:26:9e:eb:be:a7:ea:39:
e6:db:32:08:9d:a1:02:33:0d:57:25:d1:6a:53:94:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:41:85:56:F0:9E:27:DA:5B:3B:EE:3F:79:25:98:6F:3B:2C:06:B5
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/F0GFVvCeJ9pbO-4_eSWYbzssBrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.246.0/24
Signature Algorithm: sha256WithRSAEncryption
66:fd:07:70:25:d5:12:ca:8f:2c:55:83:97:42:ee:31:f8:19:
ea:ad:1d:91:37:54:52:df:b7:dc:81:bb:93:a2:66:e9:b9:66:
a7:05:be:30:a7:af:52:85:a9:27:55:be:c1:20:61:0a:ed:43:
ee:28:a1:f6:60:2a:c4:19:6f:f3:7c:a7:2d:25:dd:32:88:7b:
d2:4e:db:29:18:11:65:6e:95:8e:47:cc:85:fc:5d:08:c9:f1:
0b:6d:6f:67:21:2c:1e:10:64:2b:0f:d1:74:be:f8:dd:17:4e:
a3:5c:f3:90:07:00:c0:2f:bc:12:e7:07:34:79:00:f1:c1:ed:
83:4b:ef:66:72:b7:6c:69:29:48:fd:60:13:cd:49:9e:55:81:
3b:90:7a:5e:a4:f9:c1:2e:ec:77:92:6d:25:2b:13:a8:e4:e3:
57:04:74:e3:9f:1b:70:6e:ce:6d:71:cb:60:f7:33:62:c8:8c:
3b:da:94:64:50:8b:db:1c:a9:7f:d5:95:b6:16:0c:d2:a9:c2:
99:9f:68:e5:80:a5:2f:22:b4:7d:ce:dd:4b:12:51:6b:7a:61:
b0:d2:40:ce:21:1d:60:14:b6:3d:75:90:27:e7:37:7f:7e:af:
66:c7:f1:26:c1:b9:da:fd:1d:8f:af:dd:3c:4d:c5:c3:49:f6:
92:0f:dc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:24:09 2026 by rpki-client