Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fckTIwLrilL_-IdXVzIqBlmXeTk.roa
File: fckTIwLrilL_-IdXVzIqBlmXeTk.roa (raw, json)
Hash identifier: JV71BRplJxaNOpVDaw7GLtVfAjEwDDp47GinVIHZCbk=
Subject key identifier: 7D:C9:13:23:02:EB:8A:52:FF:F8:87:57:57:32:2A:06:59:97:79:39
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1D3FDE3871AACEDA07813063213995F85
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fckTIwLrilL_-IdXVzIqBlmXeTk.roa
Signing time: Fri 13 Nov 2026 08:19:53 +0000
ROA not before: Fri 13 Nov 2026 08:19:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 206.245.146.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d3:fd:e3:87:1a:ac:ed:a0:78:13:06:32:13:99:5f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 13 08:19:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dc9132302eb8a52fff8875757322a0659977939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:d6:98:c8:40:18:57:75:f1:e6:8f:a3:57:
0f:d3:15:37:44:57:1a:22:7e:b9:b2:f5:ec:87:b9:
95:6c:08:04:c4:f3:10:7c:6f:b9:4c:bd:53:72:a9:
b4:91:7d:12:e0:8d:a3:8e:22:69:7c:e7:a1:79:05:
0c:99:4b:2f:ed:cd:e9:ae:65:20:6d:06:d5:0b:5a:
73:b5:ab:92:5d:56:12:31:ac:38:ce:66:57:37:96:
94:31:13:04:41:5e:8f:50:58:6c:7d:00:61:4c:06:
dd:a7:68:bb:fb:0b:b6:23:63:2d:f3:e2:0a:c0:de:
c6:bd:08:6b:59:dc:29:0e:ec:9d:1f:2b:15:9c:7f:
92:bf:a2:02:10:83:f1:65:6c:b4:46:4e:35:2d:ef:
02:b0:13:3d:7c:55:b7:b1:24:6d:6d:09:46:f0:2a:
dc:f2:06:ca:23:93:62:9a:a3:c6:a4:ce:10:36:10:
91:fa:8c:1c:76:6b:cc:69:73:30:65:63:89:ce:b2:
77:8c:e3:49:7e:1b:f4:55:93:27:cf:a3:ca:09:aa:
9c:c4:39:3b:62:d8:a4:5f:89:1a:11:6c:ef:4f:db:
bf:d1:5a:d9:7a:0b:28:a2:7e:88:8d:81:56:09:bd:
9d:2c:ee:44:f7:1a:a7:26:43:f7:31:5b:60:f7:2d:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C9:13:23:02:EB:8A:52:FF:F8:87:57:57:32:2A:06:59:97:79:39
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fckTIwLrilL_-IdXVzIqBlmXeTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.146.0/24
206.245.158.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9d:1b:3f:00:ca:59:b3:86:75:67:cb:4b:c9:cd:94:77:5c:
b2:e3:89:87:df:fc:41:70:37:43:27:db:68:b1:35:0d:af:e9:
45:2c:cf:5c:46:14:47:47:80:35:b3:2b:9f:37:1b:c2:64:40:
b3:15:05:b7:eb:2f:a9:bf:eb:4a:4b:59:8f:a7:fc:16:45:8b:
5e:63:c1:e4:82:86:d0:f3:ee:11:c3:7a:eb:8a:8c:e4:2a:00:
e2:15:fa:42:dd:f7:95:ef:b0:e8:90:c9:7a:3d:57:7a:16:c3:
4e:16:47:d7:3e:45:17:62:b5:85:b7:bc:e5:61:c6:ea:b0:d6:
16:ec:6f:46:df:44:5f:8b:51:16:5e:e2:f3:35:ec:18:d8:41:
3d:86:c7:c8:63:2e:b7:5d:9d:5a:ac:e2:d6:af:d8:de:7f:48:
31:06:ac:02:41:51:5a:57:17:e5:ef:1d:cf:2c:27:38:0d:0b:
68:6a:d4:ee:fc:67:ed:05:fe:49:99:30:76:73:9f:d8:be:12:
71:a3:21:10:2e:0a:52:8d:d8:39:6c:04:05:d8:95:29:7e:db:
a5:5f:3a:20:8a:20:e8:86:d2:d0:6d:b3:ec:66:77:09:38:7f:
2d:a5:53:c7:ca:6e:ef:4e:8c:4c:2c:f8:9d:62:d7:63:da:9c:
12:42:4d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:59 2026 by rpki-client