Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/F2cgTKks1adnvxWZM--sjPx3GsM.roa
File: F2cgTKks1adnvxWZM--sjPx3GsM.roa (raw, json)
Hash identifier: pgdHaxyTdaDFVqDxAY7Zdo6g8AKayk5hSRzwZ5TTgMo=
Subject key identifier: 17:67:20:4C:A9:2C:D5:A7:67:BF:15:99:33:EF:AC:8C:FC:77:1A:C3
Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial: 01A116280EC79AC0560F26C5F83DDB3722D8
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/F2cgTKks1adnvxWZM--sjPx3GsM.roa
Signing time: Wed 07 Oct 2026 11:38:06 +0000
ROA not before: Wed 07 Oct 2026 11:38:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202433
IP address blocks: 194.35.248.0/22 maxlen: 22
194.35.248.0/24 maxlen: 24
194.35.249.0/24 maxlen: 24
194.35.250.0/23 maxlen: 23
194.35.250.0/24 maxlen: 24
194.35.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:28:0e:c7:9a:c0:56:0f:26:c5:f8:3d:db:37:22:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Validity
Not Before: Oct 7 11:38:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1767204ca92cd5a767bf159933efac8cfc771ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:91:3b:d1:3f:a9:b7:58:95:14:b4:65:10:
59:32:a5:58:ed:17:8d:cd:ed:9e:7e:08:8d:b0:7e:
bf:17:e4:12:ff:08:ba:29:0e:ad:55:1d:ab:8f:df:
96:0f:85:85:2e:c7:27:96:b5:7e:ef:ea:e3:2c:ba:
e2:54:86:98:d7:a5:5e:5a:7d:56:f5:b7:a9:22:48:
57:69:91:de:4f:57:a0:c5:60:0f:36:b3:ba:74:5b:
61:59:b5:1f:a3:57:04:e8:81:45:d1:6c:94:f4:3b:
b0:25:d9:2d:6c:5d:47:04:cb:1b:b9:cc:ae:0e:fa:
9c:0c:e8:a1:c5:32:1d:7c:9a:0a:5d:95:6a:a7:8b:
80:b0:e3:0a:4a:9c:2f:d4:a0:20:12:04:a4:7e:4f:
12:89:cd:93:0c:ae:9b:e7:68:96:36:93:99:37:9c:
57:21:25:ff:ac:1d:9d:0a:5a:82:7f:e1:0f:9f:31:
a1:ab:75:52:93:c9:d1:61:47:06:b7:e9:fa:c8:dd:
de:84:12:ce:76:b4:4f:16:44:79:d5:6f:9e:28:e7:
34:64:9a:b6:74:b0:b8:18:c6:c3:2f:3b:38:53:1f:
f8:83:64:00:f2:47:13:aa:5f:ec:b5:02:17:a7:67:
85:ad:e8:62:3a:02:e5:a9:08:15:fe:55:0a:18:32:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:67:20:4C:A9:2C:D5:A7:67:BF:15:99:33:EF:AC:8C:FC:77:1A:C3
X509v3 Authority Key Identifier:
keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/F2cgTKks1adnvxWZM--sjPx3GsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.248.0/22
Signature Algorithm: sha256WithRSAEncryption
91:89:83:be:09:21:8a:83:82:4e:0a:55:31:a3:ac:6d:74:91:
11:4e:da:f8:0c:24:2e:e6:ce:48:31:1a:f7:e1:79:74:94:8a:
fa:1a:cf:c8:c1:c4:61:83:18:3c:7d:19:8d:62:45:ef:64:4c:
fc:54:28:a4:17:1b:e5:73:92:c1:6e:68:17:98:00:b8:01:0c:
31:c9:8e:64:8c:48:34:0a:74:33:8a:63:84:48:a6:51:f4:4f:
aa:27:8c:9c:a6:0e:ff:05:b5:95:4d:04:63:75:33:88:7e:fc:
75:61:f2:42:05:80:e1:89:df:fe:72:2c:eb:79:05:4b:74:92:
e4:3c:d9:b1:30:ce:d2:c0:5c:b5:30:b7:48:71:cc:af:f9:29:
7e:03:69:ca:3e:38:79:dc:36:7e:eb:57:2b:fd:07:4a:32:06:
a9:a1:27:ed:7f:82:55:3c:fa:1d:4c:a8:32:66:45:a0:8e:fe:
72:5e:9b:39:ed:25:8e:a1:29:17:1a:d3:e0:4d:6b:f9:43:d6:
1b:69:c5:9f:8c:ff:67:e0:84:0e:84:22:21:3c:36:ff:57:89:
17:df:28:83:5c:38:bf:25:b5:8d:6b:86:5a:21:36:9a:e6:92:
75:22:bb:92:b4:0f:f2:f5:bf:da:3c:68:ad:2a:c7:89:99:94:
6b:1a:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 04:40:48 2026 by rpki-client