Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fgklkFqvypN1sUngELabnsz9JS4.roa
File: fgklkFqvypN1sUngELabnsz9JS4.roa (raw, json)
Hash identifier: zU2fuX+BzrChbJccaBS+YOvxGlAu/Vzgp6VaRJcw8Tc=
Subject key identifier: 7E:09:25:90:5A:AF:CA:93:75:B1:49:E0:10:B6:9B:9E:CC:FD:25:2E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A1D9EA0090460E9A7A810E94435196695A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fgklkFqvypN1sUngELabnsz9JS4.roa
Signing time: Sat 14 Nov 2026 11:55:53 +0000
ROA not before: Sat 14 Nov 2026 11:55:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 178.219.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ea:00:90:46:0e:9a:7a:81:0e:94:43:51:96:69:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 14 11:55:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e0925905aafca9375b149e010b69b9eccfd252e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:91:81:36:c4:22:04:08:5d:b9:73:02:cd:04:
35:ed:de:85:ba:fb:39:f2:2f:f2:10:76:ec:74:9d:
aa:d3:ee:c0:f4:81:90:fb:9a:4d:87:53:6c:89:f4:
6e:da:4b:53:53:7d:5d:5a:8f:86:a4:e9:29:f8:02:
f5:8c:0c:18:6e:69:e4:6b:68:ed:f4:2d:5a:d2:7c:
6c:98:62:da:3a:b0:28:16:fd:a1:b3:e3:7e:1d:39:
1f:86:5a:c8:11:e4:d5:53:c8:c8:90:b3:b2:0a:9b:
ea:60:12:21:94:31:ee:5b:9c:ff:b2:34:47:9a:10:
b5:73:05:60:74:73:c7:00:85:b4:f0:bc:41:47:5b:
6f:87:6a:fd:6c:fe:70:59:1a:e1:67:1e:be:04:af:
5d:87:af:9b:c2:3c:70:cf:1d:dc:a1:0d:fb:e7:13:
be:88:94:d7:13:ea:5a:09:c4:9f:df:b3:c0:97:50:
e5:26:01:cf:27:a3:c8:78:20:97:93:6a:41:26:92:
c1:0c:bf:58:00:ae:f8:91:54:d3:06:a1:0b:d2:08:
7d:4f:6a:d0:8d:9f:20:a8:bd:77:63:90:79:66:28:
13:64:00:f6:59:24:a9:0c:8f:41:52:ed:50:a7:c9:
44:85:da:c5:3f:aa:78:6d:80:94:f6:52:aa:7b:af:
f1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:09:25:90:5A:AF:CA:93:75:B1:49:E0:10:B6:9B:9E:CC:FD:25:2E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fgklkFqvypN1sUngELabnsz9JS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.4.0/24
Signature Algorithm: sha256WithRSAEncryption
52:18:49:7e:8a:31:5a:7d:c1:0a:25:1d:08:d7:57:ee:c8:80:
90:72:c5:21:80:5f:e3:50:0b:89:09:92:68:fc:00:3d:06:e1:
10:f9:4c:c0:22:2d:38:06:e9:33:b0:72:09:20:a1:83:47:e8:
53:08:56:17:1d:88:a0:48:90:95:ca:c8:ad:63:9e:f5:c1:27:
63:66:59:e1:06:1a:de:c2:90:b9:77:9b:9f:b2:78:c0:79:55:
07:9a:35:c6:a4:d8:1c:f0:bb:a0:00:10:63:e2:9d:0e:a3:78:
99:32:a3:aa:77:ef:38:f6:3d:36:63:20:75:ea:af:f9:5b:27:
a9:c4:1b:0c:57:e3:ae:ed:3a:7e:0a:88:09:bc:87:46:90:3e:
d3:1a:e4:81:3d:64:2d:27:45:60:f9:e8:05:c3:4c:5d:90:5e:
ea:88:98:3d:a1:eb:8b:e0:fa:9e:c7:0f:0b:fc:da:5b:48:28:
cc:73:09:cc:05:d2:0e:a3:54:46:7f:ef:2c:9b:0f:ca:8f:95:
f9:5f:b0:50:d9:43:26:0f:13:4c:5b:27:f9:68:69:5d:cc:8f:
3d:9b:b0:a8:0d:e6:9a:51:a5:04:c5:e8:90:68:4b:f4:1f:f5:
77:b2:80:74:cb:5d:6b:f7:0c:20:52:af:0a:f0:d5:32:f1:89:
f0:e6:26:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:55:52 2026 by rpki-client