Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Fn5sZL-11A9hZAX1mhCxflWv_Ms.roa
File: Fn5sZL-11A9hZAX1mhCxflWv_Ms.roa (raw, json)
Hash identifier: XDWRJSpmjTV17qq6ee2RjMlx4BFuFF8549odnMToGMs=
Subject key identifier: 16:7E:6C:64:BF:B5:D4:0F:61:64:05:F5:9A:10:B1:7E:55:AF:FC:CB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1AADB0BBD04F888123A14ED4B0D989C8B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Fn5sZL-11A9hZAX1mhCxflWv_Ms.roa
Signing time: Thu 05 Nov 2026 08:37:24 +0000
ROA not before: Thu 05 Nov 2026 08:37:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218261
IP address blocks: 45.158.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:db:0b:bd:04:f8:88:12:3a:14:ed:4b:0d:98:9c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 5 08:37:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=167e6c64bfb5d40f616405f59a10b17e55affccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:29:4c:00:d3:51:f9:0b:7c:c7:ef:9b:6d:
93:d6:66:be:0d:10:f4:7c:96:e5:83:5d:03:d0:f7:
1b:c6:63:b0:b0:ad:c5:45:05:6e:d8:aa:8a:fc:a0:
82:ae:89:0f:e0:ed:3b:13:91:3e:73:67:76:6c:1c:
52:b7:00:a0:03:63:10:3f:2d:7a:ca:0a:72:fb:f9:
8a:cd:0d:38:ad:b3:5e:d0:b2:f7:f3:36:90:22:41:
ea:83:8f:bd:b8:86:b9:78:23:21:f3:95:d9:1e:4a:
36:b7:dd:da:9c:dc:81:64:86:61:7e:6d:f3:ba:a0:
c3:58:24:1e:ae:cc:d5:5c:2d:32:9d:6c:6a:1a:ba:
bf:c1:3c:7a:8c:bf:a8:1e:f0:9a:9f:9f:fa:e9:11:
ff:4d:37:b2:d0:4b:7f:5a:b0:d1:02:d9:7e:5e:87:
b7:7b:33:f2:c6:a3:44:42:aa:65:69:54:e5:32:74:
90:e5:ca:71:6e:9b:b0:31:e7:86:f6:5b:8c:89:26:
2c:90:19:c8:23:f0:8e:de:ef:b8:62:e9:95:81:da:
09:3c:27:13:b6:fe:83:69:f6:a6:4c:5e:3d:d6:bf:
46:06:5b:ca:e1:fa:53:99:3a:0d:df:d2:e8:5b:e5:
04:01:f4:23:e7:60:41:27:71:bb:c1:7d:d2:63:a2:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7E:6C:64:BF:B5:D4:0F:61:64:05:F5:9A:10:B1:7E:55:AF:FC:CB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Fn5sZL-11A9hZAX1mhCxflWv_Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.197.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:2f:61:da:5f:ad:90:b3:f1:56:dd:ac:14:c1:15:03:ec:02:
ae:7b:dd:b5:6b:6e:80:5c:11:39:02:0e:32:04:06:cd:08:79:
fe:31:4c:3e:36:1d:2e:e7:74:64:0e:88:b7:f9:4f:ea:4f:df:
bc:0f:42:b9:e8:44:00:96:80:ef:a0:51:d0:85:80:03:5b:1b:
ed:1e:c7:a4:e2:04:c9:be:fe:db:5c:f3:4c:a5:14:35:98:e4:
9b:0c:0e:ba:e8:04:a4:2c:22:49:0c:46:01:91:7b:05:6c:5d:
36:3c:16:50:23:de:57:58:3b:7f:e3:06:b0:69:52:19:c6:58:
08:03:a7:32:32:4c:03:f8:82:5f:9e:20:80:7b:b3:fc:6f:3b:
2e:b0:89:1d:c1:ef:10:68:d1:8b:70:41:9a:fe:40:24:b3:52:
1b:fe:a3:65:8d:df:d3:aa:87:2d:c5:3e:24:f5:a8:17:1b:45:
b5:22:17:4a:a0:28:de:a1:03:cb:37:76:e9:38:d6:c3:0c:63:
fa:a9:ba:32:44:b6:f6:1d:19:d1:b9:73:c4:3f:76:b3:cf:20:
d9:70:d3:11:97:cf:5c:bc:4e:5b:3d:09:ec:92:dc:1b:ff:36:
c9:58:d9:67:48:72:b7:28:a0:17:68:8d:4c:b1:0b:d0:10:71:
4a:cc:7c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:47:55 2026 by rpki-client