Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bRICfHygFvjxI_2pc6KjZHMIMl0.roa
File: bRICfHygFvjxI_2pc6KjZHMIMl0.roa (raw, json)
Hash identifier: ZofpJN6+Uuv81MXIwdsnoil3xo2zrvEkD8BFi444WsE=
Subject key identifier: 6D:12:02:7C:7C:A0:16:F8:F1:23:FD:A9:73:A2:A3:64:73:08:32:5D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1AF23D7CCD31148FDF0D335498C6D6BC2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bRICfHygFvjxI_2pc6KjZHMIMl0.roa
Signing time: Fri 06 Nov 2026 04:35:24 +0000
ROA not before: Fri 06 Nov 2026 04:35:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218261
IP address blocks: 9.247.217.0/24 maxlen: 24
153.76.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:af:23:d7:cc:d3:11:48:fd:f0:d3:35:49:8c:6d:6b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 6 04:35:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d12027c7ca016f8f123fda973a2a3647308325d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:34:bd:a9:03:4e:e8:07:90:80:f8:5a:05:
59:13:3e:22:21:b9:2a:95:3a:8c:ac:21:1f:ba:14:
4d:21:3f:85:fb:75:0c:35:66:f7:a9:1a:94:68:4d:
99:7a:94:2e:0c:97:91:79:e8:e8:ef:1c:6a:c9:f1:
bf:7d:da:2b:b7:64:c6:3c:53:97:f6:91:0c:2b:36:
a4:dd:b4:bf:bf:8b:68:ed:6e:7a:09:67:54:c6:41:
64:49:37:d3:2e:b0:c5:94:12:d9:e2:b9:2f:c4:61:
cf:10:31:aa:5a:ae:29:8a:b7:bb:a4:4e:fa:af:d9:
70:3f:5b:ae:bc:c9:07:63:be:62:2a:ec:47:6b:81:
ef:ca:18:83:11:ff:4b:ce:55:fc:3e:f7:b4:6f:39:
61:e4:7b:f5:f1:d9:22:b8:fa:bc:61:09:6c:01:d3:
ec:15:37:23:0b:49:a7:b5:d1:33:99:0d:99:be:07:
8a:70:23:ce:a0:88:3f:69:de:81:83:d5:03:c9:54:
1a:06:a0:f5:f9:49:dc:22:fc:73:a7:ae:6a:03:79:
b9:a5:d7:7c:cc:a3:28:bf:49:7c:8b:f3:7f:e8:05:
82:91:e0:36:eb:41:4b:7b:4b:76:7f:4d:38:96:06:
98:6b:1d:a8:8d:de:42:0a:77:c0:6b:16:72:d5:4f:
93:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:12:02:7C:7C:A0:16:F8:F1:23:FD:A9:73:A2:A3:64:73:08:32:5D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bRICfHygFvjxI_2pc6KjZHMIMl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.217.0/24
153.76.202.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7c:a5:76:37:da:a1:50:68:08:35:79:2d:ae:2b:66:45:e0:
52:5d:5b:c0:03:a4:63:2a:f4:bb:70:ee:8f:4f:7c:72:01:40:
de:02:c5:cd:8d:7e:d8:17:32:5b:65:b2:31:e0:7e:c8:cd:26:
5f:02:31:33:c9:bb:fa:6e:3f:4e:0e:01:ed:cb:cb:75:01:90:
78:f9:8f:d2:50:81:96:00:5d:50:24:41:c1:ca:3b:97:57:7f:
d6:6b:d6:e8:9f:32:06:19:6d:6e:6a:7c:39:7f:13:e2:af:f1:
25:66:d9:c8:b4:a5:23:59:f1:ee:2a:9f:ae:f0:d0:e4:1f:d9:
9c:9c:27:6a:25:b9:15:d3:77:bc:9c:93:f6:64:6c:cf:e7:27:
c1:f7:89:60:a9:06:bc:a0:97:39:d7:79:f9:30:4f:5a:25:f5:
89:30:71:ec:28:b1:eb:f1:10:2b:8c:88:f6:a8:80:49:dd:53:
2f:24:dc:99:12:33:4f:64:2e:cc:84:46:a6:32:89:27:73:b9:
ec:26:9b:49:8f:77:36:05:17:8b:9e:82:9e:28:88:93:af:c4:
38:3c:53:ee:0a:1f:12:b5:0a:57:b1:3f:3d:7f:77:11:eb:be:
fb:cf:76:e7:e0:c8:d1:cd:bd:f5:a3:00:58:8a:2f:ea:73:07:
e0:22:cc:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGvI9fM0xFI/fDTNUmMbWvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMTA2MDQzNTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDEyMDI3YzdjYTAxNmY4ZjEyM2ZkYTk3M2EyYTM2NDczMDgzMjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV80vakDTugHkID4WgVZEz4iIbkq
lTqMrCEfuhRNIT+F+3UMNWb3qRqUaE2ZepQuDJeReejo7xxqyfG/fdort2TGPFOX
9pEMKzak3bS/v4to7W56CWdUxkFkSTfTLrDFlBLZ4rkvxGHPEDGqWq4pire7pE76
r9lwP1uuvMkHY75iKuxHa4HvyhiDEf9LzlX8Pve0bzlh5Hv18dkiuPq8YQlsAdPs
FTcjC0mntdEzmQ2ZvgeKcCPOoIg/ad6Bg9UDyVQaBqD1+UncIvxzp65qA3m5pdd8
zKMov0l8i/N/6AWCkeA260FLe0t2f004lgaYax2ojd5CCnfAaxZy1U+TkQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG0SAnx8oBb48SP9qXOio2RzCDJdMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvYlJJQ2ZIeWdGdmp4SV8ycGM2S2paSE1JTWwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQACffZAwQA
mUzKMA0GCSqGSIb3DQEBCwUAA4IBAQB4fKV2N9qhUGgINXktritmReBSXVvAA6Rj
KvS7cO6PT3xyAUDeAsXNjX7YFzJbZbIx4H7IzSZfAjEzybv6bj9ODgHty8t1AZB4
+Y/SUIGWAF1QJEHByjuXV3/Wa9bonzIGGW1uanw5fxPir/ElZtnItKUjWfHuKp+u
8NDkH9mcnCdqJbkV03e8nJP2ZGzP5yfB94lgqQa8oJc513n5ME9aJfWJMHHsKLHr
8RArjIj2qIBJ3VMvJNyZEjNPZC7MhEamMoknc7nsJptJj3c2BReLnoKeKIiTr8Q4
PFPuCh8StQpXsT89f3cR6777z3bn4MjRzb31owBYii/qcwfgIsz2
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:25:14 2026 by rpki-client