Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/F6XAWB5BenQ_IRSOPZqea5DhGsE.roa
File: F6XAWB5BenQ_IRSOPZqea5DhGsE.roa (raw, json)
Hash identifier: laLP0bQhgvqPp4c71EMMvM4i0CgopiYv4IW5b17N234=
Subject key identifier: 17:A5:C0:58:1E:41:7A:74:3F:21:14:8E:3D:9A:9E:6B:90:E1:1A:C1
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01A18789F48962984503009F908A405AAAD3
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/F6XAWB5BenQ_IRSOPZqea5DhGsE.roa
Signing time: Thu 29 Oct 2026 12:02:07 +0000
ROA not before: Thu 29 Oct 2026 12:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219343
IP address blocks: 92.61.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:89:f4:89:62:98:45:03:00:9f:90:8a:40:5a:aa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Oct 29 12:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17a5c0581e417a743f21148e3d9a9e6b90e11ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:46:e5:4f:28:63:c5:79:a0:01:eb:c8:b6:82:
33:55:bb:43:2b:08:e1:99:2a:db:70:19:29:d0:77:
e2:41:86:51:25:1a:a8:0c:d3:58:90:b0:e1:f2:a7:
49:e3:d6:c3:21:b0:83:7f:97:fc:74:1f:06:af:2a:
df:d9:af:e9:38:db:c7:42:0b:17:ea:1f:79:bf:d4:
40:ab:23:e0:d8:22:42:82:8d:43:49:7a:52:1c:3b:
36:30:f4:a5:42:f1:0c:49:c8:39:89:2a:a7:99:c1:
0a:29:03:e7:8f:30:f7:2d:65:0b:7a:4d:02:b0:12:
9c:67:53:f5:a4:c3:99:cd:ec:87:63:00:d1:52:13:
f8:90:f6:14:ff:d6:32:be:23:8a:3f:ca:4f:ed:eb:
35:7f:86:57:a3:1b:04:48:e5:4c:8b:ce:dc:5b:3e:
d6:c6:45:14:8b:60:c9:8c:8e:7d:5c:a0:93:83:4e:
d2:03:ee:82:53:20:f4:71:a3:68:ca:0d:e2:43:c6:
76:de:44:7e:5f:c7:e0:34:8f:ca:a6:68:3e:3a:0f:
6d:dd:6e:64:22:9d:32:c0:eb:69:a8:40:24:f4:95:
b6:69:fa:73:35:0c:56:69:8a:27:bb:ea:68:d5:5f:
f5:fe:aa:7b:1d:f2:8c:e8:05:d3:19:4f:13:f7:39:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A5:C0:58:1E:41:7A:74:3F:21:14:8E:3D:9A:9E:6B:90:E1:1A:C1
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/F6XAWB5BenQ_IRSOPZqea5DhGsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.104.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b7:2a:ee:ac:dc:6c:27:e7:bf:9a:42:98:54:4e:a8:5a:e0:
92:b3:e3:35:ef:a8:66:ad:00:8d:e4:b3:44:2f:ef:58:93:77:
d0:cd:6e:92:d1:4b:f7:48:71:0f:16:5d:25:32:62:e6:56:f1:
2a:fb:b3:32:40:b9:e1:a5:8f:55:0a:87:3a:06:dc:c9:05:5c:
55:8a:7d:ea:ae:d4:21:6a:e0:31:7c:8b:26:5b:da:b0:0e:c2:
82:1d:f7:01:69:79:bf:9f:2c:62:1c:6c:31:b4:c6:84:5f:f8:
67:68:88:0a:a0:7c:90:ce:18:fe:2c:ea:2e:a8:e3:2c:a7:0d:
7a:4d:b5:b3:29:11:e5:1f:16:84:8f:6f:8c:c2:9e:1d:80:69:
c0:04:7d:aa:7b:84:38:3b:d4:38:06:cf:85:5f:f4:c2:cb:6e:
23:2b:cb:d0:26:ec:48:57:14:01:e0:25:54:11:99:c0:69:bf:
34:5c:2f:35:de:c6:0a:c4:c5:78:c4:a3:62:4c:c2:b5:f8:93:
62:ec:83:95:68:15:d7:55:92:14:7b:a1:78:04:d4:aa:4b:b3:
fe:46:56:eb:f7:c3:ba:09:ab:24:b4:f6:a6:43:17:ec:91:90:
0d:56:31:c8:2b:a9:0e:6d:bc:15:53:77:2a:06:10:f6:54:c7:
d8:f4:02:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:42:47 2026 by rpki-client