Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/1-8EG5DRDWNCc8ZHM-Jb-FTzPY48.roa
File: 1-8EG5DRDWNCc8ZHM-Jb-FTzPY48.roa (raw, json)
Hash identifier: jWG7Upn+y2W0510FwJHQsAsw4DV2mqsd/e3gA/ude9g=
Subject key identifier: FB:C1:06:E4:34:43:58:D0:9C:F1:91:CC:F8:96:FE:15:3C:CF:63:8F
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 01A1DB457D74EE69C9954D91ACD36C1EEB09
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/1-8EG5DRDWNCc8ZHM-Jb-FTzPY48.roa
Signing time: Sat 14 Nov 2026 18:15:26 +0000
ROA not before: Sat 14 Nov 2026 18:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60542
IP address blocks: 45.139.9.0/24 maxlen: 24
194.180.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:45:7d:74:ee:69:c9:95:4d:91:ac:d3:6c:1e:eb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Nov 14 18:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbc106e4344358d09cf191ccf896fe153ccf638f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:91:f2:e8:5b:83:d3:f8:dc:ef:57:ec:6b:
32:de:cf:14:6c:18:68:83:68:59:a1:1d:9c:e9:18:
8d:a6:e8:b3:15:a3:10:53:94:33:98:54:3b:3f:2e:
e3:26:8c:b3:93:e4:83:ad:47:09:9e:81:aa:30:56:
4f:e6:92:4e:65:47:59:46:d3:43:40:87:d5:df:d5:
d6:0e:7f:75:38:a1:16:f4:f2:76:a6:c2:43:5f:dd:
21:9d:ea:2b:7e:3a:a9:fa:8b:d6:44:ea:96:2d:97:
49:8f:ab:33:69:5f:ac:27:00:f4:82:05:0a:84:74:
b8:69:a6:1b:e2:73:ac:36:1d:6f:f2:8e:d5:84:4b:
99:36:b8:50:69:5d:ae:f9:a7:4d:b0:22:53:c3:1a:
d1:5c:e5:4b:32:02:5b:78:9f:c7:b7:df:cc:b7:a1:
aa:5a:f5:9a:21:26:e1:6c:b1:67:fc:42:bf:68:5c:
e5:d7:a9:88:31:27:53:eb:ef:83:69:f5:f4:38:13:
8a:87:bc:35:ba:70:fb:52:90:71:42:c1:ea:6e:2a:
9a:d2:59:96:ac:e3:68:5e:60:52:38:d3:a4:ac:b3:
42:f3:e1:4e:9b:c7:61:ae:09:10:bf:68:bc:33:27:
dc:e8:da:02:51:fa:b9:e2:31:b2:28:9f:08:8e:4e:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C1:06:E4:34:43:58:D0:9C:F1:91:CC:F8:96:FE:15:3C:CF:63:8F
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/1-8EG5DRDWNCc8ZHM-Jb-FTzPY48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.9.0/24
194.180.209.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a4:e1:19:68:27:06:85:ff:c4:50:22:ec:26:f7:fc:7d:eb:
40:25:75:e5:f0:39:67:40:29:09:22:2e:a7:63:e5:55:43:24:
87:ed:81:2c:43:95:71:69:ab:ed:46:42:a4:a5:a4:ef:da:d2:
38:d2:c4:e2:51:bc:56:af:4e:ee:db:cb:c8:99:93:5b:08:df:
96:a7:90:ec:19:44:14:0a:42:44:44:58:b8:47:36:8a:bb:08:
e1:a5:4c:c8:77:cd:c9:4b:81:dd:c2:35:4c:ab:dc:64:dc:88:
e5:8a:96:e4:7c:70:31:73:06:f1:94:02:a4:8a:b5:d1:44:fc:
6e:45:cb:ce:32:bc:05:f6:7e:cd:d4:62:c2:27:69:e2:d6:f6:
a0:04:65:f3:3e:f8:c5:7e:1b:23:cd:7a:95:8d:cb:b5:66:eb:
81:ab:49:d4:f5:24:00:70:d5:b7:2b:eb:9d:3c:15:bc:14:e0:
37:2f:2f:c3:86:ed:50:2e:f0:52:f3:4a:ab:b9:5d:cd:d1:11:
a3:b3:9c:9c:7f:c7:e2:8d:bd:3c:e4:b8:2c:b0:71:9a:af:e4:
40:f9:67:7b:4e:21:f2:5f:c5:25:7f:1d:8e:de:0b:88:af:e1:
98:90:4b:44:ac:51:a4:b2:bf:e9:ac:84:c0:ad:37:41:79:0f:
d6:b3:fd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:02:02 2026 by rpki-client