Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/FXoEQXQ1y_sgLaeu2GI514jSQq4.roa
File: FXoEQXQ1y_sgLaeu2GI514jSQq4.roa (raw, json)
Hash identifier: cMLduCCScD6l8ZmN8/0hmU4GsPGIiE1HYswdwXlFY38=
Subject key identifier: 15:7A:04:41:74:35:CB:FB:20:2D:A7:AE:D8:62:39:D7:88:D2:42:AE
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 01A1AFF76DDCC819D7BC6EBC03EE54706B78
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/FXoEQXQ1y_sgLaeu2GI514jSQq4.roa
Signing time: Fri 06 Nov 2026 08:26:30 +0000
ROA not before: Fri 06 Nov 2026 08:26:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 84.239.17.0/24 maxlen: 24
84.239.42.0/24 maxlen: 24
84.239.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:af:f7:6d:dc:c8:19:d7:bc:6e:bc:03:ee:54:70:6b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Nov 6 08:26:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=157a04417435cbfb202da7aed86239d788d242ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:38:4c:cf:f3:ee:ac:f0:eb:cb:02:a4:cc:
f0:79:47:66:ad:42:71:54:40:77:01:39:01:27:b6:
98:1c:cc:99:0a:d3:e5:b6:1f:63:3c:2c:c7:1a:b2:
49:98:76:5c:26:b4:3f:2c:6b:92:64:71:47:96:4c:
6f:4d:fb:5d:d1:88:34:48:4d:34:93:fb:9a:d3:ab:
d7:b1:c2:4e:9a:32:98:94:ad:bb:df:d4:b1:36:72:
0d:9d:c4:0a:84:cf:da:4f:77:7e:f4:6b:b6:51:72:
e6:6e:37:eb:5d:84:25:a4:3e:3e:32:fe:0a:f8:54:
c9:f9:b2:a4:d1:a5:6c:f7:a3:5b:90:04:da:8b:7b:
a6:36:36:6d:a3:a6:2c:68:a1:90:89:69:86:7a:f5:
53:73:01:eb:46:a5:6b:69:00:58:51:6b:bf:e2:68:
a9:17:62:ac:00:0b:e5:30:fa:6d:bd:4a:cd:98:d2:
42:d4:db:2d:30:55:2c:47:e9:ac:8c:e8:dc:bf:1b:
ea:d8:9d:ac:92:5e:22:7a:2c:0c:f8:ed:ac:2c:8f:
78:5d:a8:00:7d:23:e2:72:84:5a:db:5b:7e:96:33:
5b:e2:d1:98:39:1c:e5:11:30:eb:6c:32:a7:1b:eb:
6a:bf:ff:11:d9:92:3c:0e:4f:83:e9:7b:21:78:f1:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:04:41:74:35:CB:FB:20:2D:A7:AE:D8:62:39:D7:88:D2:42:AE
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/FXoEQXQ1y_sgLaeu2GI514jSQq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.17.0/24
84.239.42.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:b6:b9:18:23:f3:68:94:65:8a:e7:6f:41:b5:ec:90:56:98:
89:8d:41:cd:05:69:90:be:bb:cd:fe:57:33:20:b1:a9:3b:da:
5c:7b:09:46:86:99:18:46:de:1e:4f:34:bf:31:2b:f4:c6:64:
82:4b:fe:58:b1:96:d0:2d:0a:db:c7:74:1c:ac:88:85:e8:d4:
a3:ba:8f:c4:28:ba:46:57:59:f6:28:cb:77:7f:17:79:71:b8:
89:7c:ff:61:2a:e9:29:c3:64:1a:be:48:db:08:bb:cc:da:a5:
aa:e1:e5:98:30:4b:6c:c7:d0:d9:1b:72:60:f5:17:ae:1d:7d:
5e:77:8e:dc:c5:03:b7:ef:d2:09:1a:34:1f:a6:f1:51:ca:4e:
b8:65:01:af:5b:9f:fb:d4:c2:22:6d:ff:7f:52:cd:3f:d2:8b:
5d:7c:93:6b:de:63:46:5b:dc:10:1f:34:be:35:b7:c5:6d:c3:
ff:59:05:9e:bf:07:f5:13:cd:24:8d:25:e9:0e:f8:42:c5:0d:
f0:93:28:ee:a4:01:f5:b6:ce:cb:d1:a4:d6:bb:2c:bf:83:11:
3d:bd:9f:86:62:b8:14:b3:98:84:78:c4:9a:14:25:14:3d:1a:
47:f8:92:f4:46:70:44:c6:05:c4:10:43:0b:8e:ff:64:ea:29:
bb:f5:63:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:56 2026 by rpki-client