Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/fLKMO8hs3PDpZkd8GtOpwqvqVu8.roa
File: fLKMO8hs3PDpZkd8GtOpwqvqVu8.roa (raw, json)
Hash identifier: 4kQpIHT40JntKpu1JXiZTJm5zqdCdOd4w+rgU958suQ=
Subject key identifier: 7C:B2:8C:3B:C8:6C:DC:F0:E9:66:47:7C:1A:D3:A9:C2:AB:EA:56:EF
Certificate issuer: /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial: 01A1656086863F9094D2CFE115670714750D
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/fLKMO8hs3PDpZkd8GtOpwqvqVu8.roa
Signing time: Thu 22 Oct 2026 20:49:46 +0000
ROA not before: Thu 22 Oct 2026 20:49:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15169
IP address blocks: 185.150.148.0/22 maxlen: 22
2a03:ace0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:60:86:86:3f:90:94:d2:cf:e1:15:67:07:14:75:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Validity
Not Before: Oct 22 20:49:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cb28c3bc86cdcf0e966477c1ad3a9c2abea56ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:44:60:c0:c6:c8:62:c0:5a:74:2e:f8:b8:
b8:51:3e:e3:b3:55:67:d6:c9:8a:bc:92:37:c2:6b:
e5:58:1a:19:ed:2c:9a:84:9e:43:25:78:19:9e:6b:
f4:ee:96:36:c7:e3:f6:ec:44:fe:9a:b4:20:eb:8c:
2c:32:4d:03:88:b5:de:3f:b8:24:90:5b:4b:8b:e9:
0a:68:bf:70:6c:13:53:12:e9:7c:60:37:29:73:e3:
bf:b2:4b:99:d7:56:91:f4:4e:9b:f1:5b:f1:ec:c1:
9c:2b:5c:04:ac:51:4e:59:d1:2a:13:63:2b:12:c7:
54:63:f9:0e:62:80:eb:a4:36:f5:eb:73:c8:a6:8d:
87:f4:01:93:2b:94:78:ce:0e:8d:67:51:f6:68:68:
d6:7b:db:03:27:d2:ca:c6:54:0c:b2:8b:2e:cb:cc:
f6:35:6d:41:f2:a9:68:91:58:8b:bf:92:52:e9:29:
9e:01:a2:91:ca:5d:70:d2:a9:9d:42:89:5a:4f:63:
8b:96:04:71:0e:85:92:e7:98:aa:d8:0b:f1:4f:39:
eb:c2:95:bf:5b:46:24:23:8b:34:26:4d:76:ff:54:
de:68:7f:00:82:50:c7:00:b2:a5:9c:8b:c2:be:11:
9a:73:f3:55:59:28:c7:dc:ac:37:95:56:fc:46:36:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B2:8C:3B:C8:6C:DC:F0:E9:66:47:7C:1A:D3:A9:C2:AB:EA:56:EF
X509v3 Authority Key Identifier:
keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/fLKMO8hs3PDpZkd8GtOpwqvqVu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.148.0/22
IPv6:
2a03:ace0::/32
Signature Algorithm: sha256WithRSAEncryption
97:f5:5e:53:db:4a:3b:a0:6b:31:5b:69:97:4d:68:74:89:cb:
b1:7b:aa:8f:1a:19:97:e8:c6:62:6a:74:14:40:74:59:76:35:
eb:a4:28:a4:b0:2d:4c:46:46:79:23:85:d5:31:29:73:af:45:
cb:e5:c1:cb:90:4c:a9:6d:e0:3d:13:24:ed:61:61:e7:48:f3:
ea:82:93:a0:d6:46:bd:14:14:2c:5d:b1:42:14:97:71:93:ce:
15:60:17:ac:c4:3f:fe:13:13:e0:17:06:c3:fc:2c:ef:69:43:
f8:9e:46:c8:3d:0a:6e:47:8e:2f:c8:35:37:c8:74:b8:6f:80:
92:be:11:6e:57:a7:03:58:f5:34:0b:20:12:5c:e0:57:93:ae:
af:54:3b:31:1f:50:c5:26:50:9f:65:22:9f:27:80:08:df:90:
eb:56:2f:92:89:78:73:67:c2:cf:86:02:25:3c:57:7b:d7:13:
3c:81:d8:2f:fb:48:57:0c:e6:11:3d:cd:f9:08:29:86:03:fb:
86:16:cc:56:ca:01:80:de:a1:3d:5f:7d:fa:bb:92:0b:74:5f:
fc:ba:0c:20:48:b4:c7:77:b6:6a:72:47:8c:10:cb:0f:15:fb:
6e:b8:05:75:ce:b3:79:44:72:6f:73:c3:e9:2e:bd:7b:45:f7:
6c:b3:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:57:49 2026 by rpki-client