Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-7-6RGar2D151UHvO4qGzPCbHSY.roa
File: 1-7-6RGar2D151UHvO4qGzPCbHSY.roa (raw, json)
Hash identifier: chdOxT3iTp7d3crM5hmS9Pmpnph6NW1r5XQd9AGRwlQ=
Subject key identifier: FB:BF:BA:44:66:AB:D8:3D:79:D5:41:EF:3B:8A:86:CC:F0:9B:1D:26
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A1D41DEE4237B5EC4BC3DE8D4E511EFBD9
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-7-6RGar2D151UHvO4qGzPCbHSY.roa
Signing time: Fri 13 Nov 2026 08:54:53 +0000
ROA not before: Fri 13 Nov 2026 08:54:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219203
IP address blocks: 86.107.65.0/24 maxlen: 24
188.210.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:1d:ee:42:37:b5:ec:4b:c3:de:8d:4e:51:1e:fb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Nov 13 08:54:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbbfba4466abd83d79d541ef3b8a86ccf09b1d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:e3:08:8c:40:93:5f:8f:5a:a9:de:b8:43:
06:b2:a0:e8:ca:d3:bb:db:c2:54:9a:8d:51:b9:2c:
34:00:60:20:d4:a9:45:64:49:47:fa:21:46:4a:22:
39:35:5c:76:9c:8b:1d:a4:b6:ac:48:fa:5c:b1:00:
f7:8b:b0:9d:b9:5d:68:13:76:65:62:ec:33:60:20:
ae:be:bb:a8:88:27:40:79:a1:25:4e:87:20:45:0e:
8e:cb:90:27:fc:84:07:d6:51:5a:71:40:30:14:6c:
b4:03:d3:8d:06:d1:89:ea:20:c8:c0:6f:11:52:40:
04:45:c1:0b:23:2e:b2:b3:c0:89:59:fa:b5:e8:c7:
d0:62:9e:8c:cc:3d:08:de:5d:3e:51:f5:db:4f:6e:
d6:77:a9:f5:7e:0e:7b:58:ba:c3:01:da:7d:e8:a2:
14:ae:c0:2f:2b:d5:2b:56:7e:69:a6:76:0f:55:97:
e5:42:21:e1:7b:29:b0:f4:a3:bd:cd:31:09:5f:6a:
e6:1f:8f:d3:9f:0c:b5:b2:ee:a6:ef:4b:12:6b:6f:
16:d1:47:55:30:0e:99:f9:0c:aa:42:b7:3a:67:dc:
13:5c:f3:5f:e0:8c:12:c9:d3:12:ac:1d:29:ed:f0:
63:bd:1f:75:f5:c8:2c:15:0a:c7:93:6d:93:e0:41:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BF:BA:44:66:AB:D8:3D:79:D5:41:EF:3B:8A:86:CC:F0:9B:1D:26
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-7-6RGar2D151UHvO4qGzPCbHSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.65.0/24
188.210.246.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:1a:e7:18:07:cc:51:a0:b8:c1:99:a3:3f:fb:78:59:60:5a:
52:55:bb:24:6c:c6:f4:19:17:0e:3f:ef:ac:7d:78:3b:d4:87:
99:95:b8:c1:fd:7b:4e:ec:2a:67:ae:e9:b1:b4:02:ff:a6:08:
36:14:de:66:f0:d8:a9:b6:b6:e8:05:12:1c:85:6f:35:34:ab:
66:98:77:2f:26:35:da:ea:37:b6:dc:b5:e9:8b:f0:39:6c:8b:
14:01:94:df:77:82:8c:e8:43:25:02:0f:e2:05:a6:bf:ac:fe:
1a:ea:59:44:14:2b:cb:c1:bf:0e:76:b9:d3:eb:1e:63:f3:e5:
ef:e5:aa:42:3c:9e:bf:20:3e:f6:09:de:ff:af:fc:87:8d:4d:
a3:fe:d8:1d:9d:d4:e0:cc:0d:6b:9e:eb:69:b5:76:7b:4b:b5:
82:ad:f1:3f:ab:86:ee:c1:17:0d:49:49:09:70:92:b9:2b:6e:
96:e3:58:62:71:71:ef:e9:9e:53:bd:5c:0a:63:da:66:a3:2c:
bc:93:e7:2d:cf:c1:ae:fc:85:75:81:f1:01:05:d1:51:ea:b9:
10:09:10:5b:24:68:be:76:55:e7:9c:85:22:ed:4a:25:82:ac:
ee:bb:cf:09:0b:6d:c9:ad:e4:9d:8b:6e:9e:a5:8f:88:97:a1:
b9:cc:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:42:34 2026 by rpki-client