Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/FaV1fsMbfKNT6fQniZsXgjbEG34.roa
File: FaV1fsMbfKNT6fQniZsXgjbEG34.roa (raw, json)
Hash identifier: 9sV7lmS9kDoiZ7Wv3kdNHvFjDFag3HbA1N+qgOKu4b0=
Subject key identifier: 15:A5:75:7E:C3:1B:7C:A3:53:E9:F4:27:89:9B:17:82:36:C4:1B:7E
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A0D3370A91E8A1F4DC593A86FC69496F34
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/FaV1fsMbfKNT6fQniZsXgjbEG34.roa
Signing time: Thu 24 Sep 2026 11:39:54 +0000
ROA not before: Thu 24 Sep 2026 11:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 193.160.140.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:37:0a:91:e8:a1:f4:dc:59:3a:86:fc:69:49:6f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 24 11:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15a5757ec31b7ca353e9f427899b178236c41b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:0a:19:31:f4:36:a6:bf:a6:d0:45:f4:f1:
9a:42:c6:66:01:ea:7a:a9:ed:4a:2d:d3:c2:9a:6c:
7a:98:d3:25:2f:5d:33:cd:42:76:c4:3d:d4:68:36:
2a:47:c3:4f:50:27:60:50:45:f9:90:97:5c:3b:80:
f4:8a:76:5c:4c:33:71:f1:d9:3f:e1:82:8e:08:b9:
b6:12:87:97:b4:13:6a:b8:c9:e8:43:49:76:76:8d:
de:f4:80:c5:e1:83:fe:fc:52:09:bd:dd:23:44:c0:
e3:a7:a1:2b:17:ec:bf:99:2b:27:1b:46:6e:d3:4d:
62:d7:3c:45:d3:8b:6b:23:c6:1a:89:d1:07:fd:a4:
f4:f0:1a:7d:64:e1:5b:cb:94:92:bd:ae:fc:e6:cf:
b4:cc:57:dc:a8:88:4a:75:60:d4:0a:d3:40:65:22:
91:76:ba:21:26:09:6e:bf:2f:f5:95:25:b5:a8:b9:
c2:9f:7d:cb:f9:f3:92:77:39:91:c4:74:f4:97:d4:
de:42:b9:39:ac:c1:3d:df:be:7e:8a:55:09:15:8e:
f9:f9:9a:81:97:9c:c6:7c:79:c3:ed:98:ac:32:9e:
10:e7:ab:2f:43:bb:16:bb:34:89:cf:c5:11:2a:b0:
c5:d1:82:d7:c2:d3:4b:24:c3:04:92:53:de:f8:64:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A5:75:7E:C3:1B:7C:A3:53:E9:F4:27:89:9B:17:82:36:C4:1B:7E
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/FaV1fsMbfKNT6fQniZsXgjbEG34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.140.0/22
193.223.104.0/23
Signature Algorithm: sha256WithRSAEncryption
01:96:49:72:72:ff:a5:a6:96:83:98:11:cb:ca:d1:85:c0:7d:
04:47:50:2d:44:67:70:a7:b3:c4:b7:ae:db:c7:66:35:61:94:
3e:8b:8f:77:b5:b7:e9:91:aa:ca:0b:5d:92:a3:5b:cb:11:ae:
62:6f:d4:fc:cb:3c:31:b8:45:99:91:a8:a2:82:10:0d:6a:2e:
2f:d8:aa:27:d6:22:51:76:98:f9:96:da:41:6a:b5:10:16:bd:
9b:36:38:5f:45:81:cf:13:d5:ac:94:f1:49:0e:b2:84:25:16:
a9:ab:2f:ae:3c:e5:17:d0:75:48:c6:e2:7d:78:11:a1:b2:fa:
16:3f:d5:91:12:b3:08:6c:c0:95:b0:2d:b3:a9:92:ae:ae:01:
04:36:a3:f5:77:8a:c5:4d:f8:bc:e6:95:b3:ab:12:a4:93:08:
3f:04:e2:cf:0c:c0:bc:c7:ac:6e:36:af:a1:67:8d:a1:d2:8b:
09:32:4e:24:3b:1c:1f:73:84:24:8a:04:dd:a2:c2:2d:f8:25:
63:cc:4f:10:66:f9:8f:89:c5:df:28:1d:e5:43:07:d8:95:97:
99:5e:f8:0c:f7:62:66:fa:e7:6e:53:47:35:85:9c:6c:8b:7e:
b6:31:ca:39:97:0a:37:26:75:4d:2a:57:e4:a8:13:19:66:be:
35:ec:7d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:55:37 2026 by rpki-client