Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/fisSyyhzC773k6EWjSNeTrgQm90.roa
File: fisSyyhzC773k6EWjSNeTrgQm90.roa (raw, json)
Hash identifier: /7aIEVLUHY42zLX4Rk7CYhD4ndJ7c1K7Tbu5DR88xEw=
Subject key identifier: 7E:2B:12:CB:28:73:0B:BE:F7:93:A1:16:8D:23:5E:4E:B8:10:9B:DD
Certificate issuer: /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial: 01A1C12126977DE53D9D7BB75F05F8A8A1ED
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/fisSyyhzC773k6EWjSNeTrgQm90.roa
Signing time: Mon 09 Nov 2026 16:25:37 +0000
ROA not before: Mon 09 Nov 2026 16:25:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 185.237.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:21:26:97:7d:e5:3d:9d:7b:b7:5f:05:f8:a8:a1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Validity
Not Before: Nov 9 16:25:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e2b12cb28730bbef793a1168d235e4eb8109bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:ac:a5:98:06:aa:c0:85:2c:1e:f4:74:2e:
ff:65:a7:3b:3f:05:50:4d:f0:69:fe:84:20:df:3e:
0c:15:fc:52:76:00:0b:3d:6d:dc:69:d5:a6:9e:ad:
b0:9f:3e:8f:80:53:26:67:62:28:51:b0:81:75:8c:
e1:a8:62:40:ea:53:d7:1f:d7:31:e0:07:86:bb:38:
87:56:df:22:f0:fb:a9:21:11:5b:c6:db:d8:35:0a:
dd:d8:41:a1:2a:76:6e:94:58:b1:68:f8:93:6e:49:
b4:56:b0:72:59:bc:3a:a7:8d:f1:f6:b8:79:de:a7:
ce:1d:eb:18:c1:4c:b2:df:1c:17:69:b7:b8:c5:e9:
e8:02:6c:40:7d:e7:d6:e7:80:be:8a:32:95:e6:b9:
cc:63:c3:89:3e:e6:ba:14:94:b8:ac:a4:57:c6:54:
a4:cf:29:5b:32:00:52:b1:63:8c:88:99:74:bc:da:
d0:17:32:3b:33:83:3b:21:98:bd:4a:41:f9:46:f0:
09:ad:69:37:61:ab:c4:08:82:cf:a3:a0:fe:f0:b6:
99:42:2c:52:0a:9c:1b:96:84:4c:c4:ed:23:a0:ea:
96:ce:54:fb:c9:f6:85:a6:3f:ee:36:be:63:02:ee:
19:b7:cc:ca:3a:dc:35:a2:3a:dc:84:d6:f8:10:4a:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2B:12:CB:28:73:0B:BE:F7:93:A1:16:8D:23:5E:4E:B8:10:9B:DD
X509v3 Authority Key Identifier:
keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/fisSyyhzC773k6EWjSNeTrgQm90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c5:d3:17:79:4b:93:f4:cc:05:2c:19:41:9d:9c:3e:04:43:
ad:05:c7:58:f4:8e:da:eb:68:28:d2:fb:b8:17:98:1f:f0:b8:
f0:c6:90:64:ee:36:4b:fa:41:aa:97:54:36:85:31:c5:a6:aa:
f3:41:e2:4b:be:32:49:96:59:22:a2:84:f2:a3:58:69:ef:cd:
f9:b6:42:2a:38:e9:4d:11:f7:ad:67:48:1d:fb:68:30:f0:81:
d2:98:f5:2e:62:48:62:41:21:64:2f:1f:ac:cf:1c:ea:72:83:
9e:c1:42:4e:19:28:31:bd:7e:89:71:cc:75:d8:a6:95:d0:5d:
fa:85:3b:89:d9:47:92:c3:1c:18:36:cd:8b:d5:f3:c0:4f:25:
6c:7e:c8:2e:db:b6:b3:fb:84:6f:f1:e3:d2:dd:2a:f0:8f:e6:
30:1e:7f:5e:c7:23:7a:7d:54:b1:14:8a:a0:18:73:02:ef:70:
e1:7d:ea:8c:84:5b:26:e5:8c:0b:86:4f:32:a3:1f:f3:f2:b9:
05:01:f8:11:07:42:45:93:48:15:13:92:38:3f:2a:ff:96:42:
e5:22:10:7d:b4:ba:0c:a5:f2:a8:b7:79:3c:b6:32:7b:ef:4d:
55:78:98:59:a7:84:34:ab:4f:44:4f:d2:6a:71:1a:e7:88:31:
1e:da:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:57 2026 by rpki-client