Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/Fst4pQkpDcn9HG25PXG7MHum6To.roa
File: Fst4pQkpDcn9HG25PXG7MHum6To.roa (raw, json)
Hash identifier: 6g8glIxB1jRpiCXFN6M7BzFHCbEmfmqNqp2rbMwOKJ0=
Subject key identifier: 16:CB:78:A5:09:29:0D:C9:FD:1C:6D:B9:3D:71:BB:30:7B:A6:E9:3A
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01A1CA73ABB5C8E0F9979E216D4B3B351D18
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/Fst4pQkpDcn9HG25PXG7MHum6To.roa
Signing time: Wed 11 Nov 2026 11:52:20 +0000
ROA not before: Wed 11 Nov 2026 11:52:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 136.176.224.0/24 maxlen: 24
136.176.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:73:ab:b5:c8:e0:f9:97:9e:21:6d:4b:3b:35:1d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Nov 11 11:52:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16cb78a509290dc9fd1c6db93d71bb307ba6e93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:26:f8:16:2d:51:8c:ac:77:72:57:28:2c:
a9:67:61:71:18:98:8f:0a:89:e7:d7:78:11:5d:5b:
72:c5:8e:46:a6:74:76:c2:19:e0:2f:b2:3d:86:ec:
ab:2b:24:3c:5d:05:c8:85:3f:bc:1d:c5:d9:76:fa:
57:5d:bc:c0:8b:5a:5e:c0:df:74:e9:e5:61:f1:d4:
c2:28:cd:7b:ff:4d:03:d1:36:f1:39:f6:a7:d0:4e:
9d:21:db:1e:1e:81:b9:4b:38:90:ea:5c:23:6b:d1:
df:1b:40:7c:47:98:64:9d:31:01:e9:2e:d1:27:76:
d1:62:4c:ef:9a:bf:a4:54:a4:e0:ac:57:26:46:ac:
b4:01:61:7c:86:25:18:ac:ff:1b:88:01:56:d9:6a:
5f:c1:86:8c:f2:4d:44:31:5a:b3:74:0c:e5:3d:2d:
7c:a6:ca:6f:03:c8:98:22:48:d0:f7:35:eb:e7:c3:
e9:ef:ee:ab:f0:fa:64:d0:46:2c:47:4a:51:bb:dd:
ea:37:99:93:74:38:6d:a4:d2:a6:cb:4f:a7:00:37:
1a:73:b1:6d:2e:19:59:26:a6:0f:bb:dc:38:d4:d9:
21:37:3a:ef:44:c8:b4:ca:0e:1c:a1:41:e7:ed:a9:
13:1a:7b:24:c8:52:73:95:9d:5f:18:f8:81:4d:22:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CB:78:A5:09:29:0D:C9:FD:1C:6D:B9:3D:71:BB:30:7B:A6:E9:3A
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/Fst4pQkpDcn9HG25PXG7MHum6To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.224.0/24
136.176.226.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fc:c5:50:9b:19:c3:8c:ad:8c:b8:a9:0d:e3:dd:a9:74:5e:
89:e0:f2:cf:95:01:52:9f:36:02:bb:41:b3:2d:9d:ac:b2:f0:
3c:87:4e:59:9f:e5:d3:f5:7c:3e:65:51:8f:b6:7b:c9:06:2b:
d7:a7:e9:e1:a3:fa:90:08:68:b0:a2:3a:ab:ab:a0:f9:cb:e2:
56:ca:d3:d8:f2:87:46:03:20:b9:36:66:d6:45:a4:cd:db:ef:
2c:98:4b:da:fe:f7:57:7e:f4:0c:d1:f2:85:74:c5:17:c5:34:
37:f4:83:d8:c6:00:2b:30:f3:a8:00:5e:04:65:8f:a6:c4:e4:
da:c4:8e:00:47:b1:05:43:f4:25:30:94:7c:5f:08:0e:a3:21:
ed:20:06:a9:1f:42:bd:cc:f2:0a:e8:74:10:da:17:c6:b2:58:
e9:27:05:cf:cf:38:bd:a8:4b:61:d7:07:22:d5:76:f0:4e:33:
41:90:47:e3:ab:9b:5e:80:c9:d1:de:37:b9:1f:e5:13:0b:d4:
ab:c5:9c:2b:3b:81:a9:89:6c:bc:20:b9:4e:de:f6:1b:d6:b2:
ab:c7:7a:39:3d:bd:5e:e0:79:7e:6a:9a:29:aa:0e:89:8f:4d:
2b:2a:16:20:96:62:12:56:ed:75:55:f6:00:cb:0f:ff:78:ef:
5b:af:c6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:12:38 2026 by rpki-client