Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/FhtJQHDlooxud9xxPO0yFpOJ7Ao.roa
File: FhtJQHDlooxud9xxPO0yFpOJ7Ao.roa (raw, json)
Hash identifier: jzi7ZxXuLslfZg58DIT2Jz45lLizrJBdXOsvUEEgK1s=
Subject key identifier: 16:1B:49:40:70:E5:A2:8C:6E:77:DC:71:3C:ED:32:16:93:89:EC:0A
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 01A0CEA8CB5E5B6D83D31EA1335EBFDE5828
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/FhtJQHDlooxud9xxPO0yFpOJ7Ao.roa
Signing time: Wed 23 Sep 2026 14:26:03 +0000
ROA not before: Wed 23 Sep 2026 14:26:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41227
IP address blocks: 78.111.4.0/24 maxlen: 24
78.111.5.0/24 maxlen: 24
78.111.6.0/24 maxlen: 24
87.247.168.0/21 maxlen: 21
87.247.168.0/23 maxlen: 23
87.247.170.0/23 maxlen: 24
87.247.172.0/24 maxlen: 24
87.247.173.0/24 maxlen: 24
87.247.174.0/23 maxlen: 23
87.247.178.0/24 maxlen: 24
87.247.184.0/21 maxlen: 24
185.166.105.0/24 maxlen: 24
185.166.107.0/24 maxlen: 24
185.248.32.0/24 maxlen: 24
194.34.160.0/24 maxlen: 24
194.34.161.0/24 maxlen: 24
194.34.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:a8:cb:5e:5b:6d:83:d3:1e:a1:33:5e:bf:de:58:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Sep 23 14:26:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=161b494070e5a28c6e77dc713ced32169389ec0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:84:9c:fa:ac:3a:d6:33:5f:21:81:38:b9:
fa:0f:09:e2:b3:19:3e:4e:b7:d0:d3:be:6a:42:a8:
15:64:64:02:18:ed:26:4d:3a:f3:df:d8:27:a8:1a:
4c:4c:4c:6e:eb:57:d5:6a:95:a6:15:8c:fe:46:82:
c2:3f:7e:b0:bd:6f:38:1b:f5:93:2d:2a:df:1f:fa:
08:60:62:e1:02:9e:49:39:f0:95:0b:3c:0b:dd:a3:
77:fd:36:59:6c:ab:09:2a:fc:1e:f8:c1:ba:07:61:
ee:99:b8:79:85:3d:a1:38:c2:12:ff:66:06:2b:87:
40:e1:19:64:02:cd:1d:60:a3:41:45:60:63:15:c7:
2b:da:d7:ad:28:44:3a:13:e1:48:15:fc:3b:7e:d6:
b1:88:43:22:44:0c:70:0c:ef:70:49:1b:e7:bb:e0:
64:d6:3c:27:80:65:63:18:70:9d:e8:b1:f2:a7:ca:
93:86:6d:3d:53:ea:fa:87:3b:1b:ec:10:2b:1b:68:
76:84:2c:96:46:06:b4:b5:d2:f7:67:9d:59:aa:50:
82:57:99:d8:3c:d2:2d:64:c7:fc:64:79:87:0b:26:
66:21:7d:29:5c:62:39:2a:f3:2c:4d:9c:06:5e:f1:
48:64:da:a3:73:11:19:9f:5f:87:39:2a:ba:92:19:
7b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1B:49:40:70:E5:A2:8C:6E:77:DC:71:3C:ED:32:16:93:89:EC:0A
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/FhtJQHDlooxud9xxPO0yFpOJ7Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.4.0-78.111.6.255
87.247.168.0/21
87.247.178.0/24
87.247.184.0/21
185.166.105.0/24
185.166.107.0/24
185.248.32.0/24
194.34.160.0-194.34.162.255
Signature Algorithm: sha256WithRSAEncryption
3a:42:73:8a:d5:c5:22:86:6f:ea:53:6a:87:ce:66:e4:6d:5d:
e5:8e:9f:ed:f8:3f:3b:df:8e:2d:df:c0:21:c7:3c:e8:20:73:
ec:dd:09:2c:ee:19:9a:2d:ec:34:cf:28:9d:cb:4b:fa:39:84:
9a:1c:44:f3:47:1d:14:27:7d:6e:b2:0c:59:f9:34:b0:f6:da:
b9:7d:29:ae:2c:c4:c3:cb:aa:32:87:f5:1e:c9:9c:14:0c:ae:
d4:47:17:93:f3:4c:ee:9a:79:bd:e0:b2:1c:0c:af:a7:5c:e8:
c2:2f:f0:05:41:2a:d6:92:03:69:cc:49:df:7f:67:03:47:db:
be:a8:27:72:a5:88:31:b3:2c:79:40:91:bc:28:04:9a:a8:d9:
5b:54:76:d5:03:72:86:7c:8b:67:59:59:b3:fb:de:d0:6b:51:
05:2d:74:4e:52:c1:ca:1d:0c:8a:db:08:b0:21:44:09:93:6c:
a1:06:c9:55:e1:bb:a6:19:2e:85:95:62:2a:7a:1d:bd:f1:39:
41:20:29:5a:77:e1:f3:69:a7:84:43:77:6d:5d:32:1f:38:4e:
aa:e5:af:54:41:52:7f:61:f0:b9:d6:e3:ae:bf:69:a6:83:7b:
4f:9e:b2:25:71:d3:61:31:f1:b8:dd:81:dd:45:99:bf:df:9d:
4f:e6:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:02:38 2026 by rpki-client