Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/flXbE03TECSCT80HkokwJLS28m4.roa
File: flXbE03TECSCT80HkokwJLS28m4.roa (raw, json)
Hash identifier: 1kqteL+PJ2bBStPYllVaPi54gCfdy2+IqLKbJZ5scBM=
Subject key identifier: 7E:55:DB:13:4D:D3:10:24:82:4F:CD:07:92:89:30:24:B4:B6:F2:6E
Certificate issuer: /CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Certificate serial: 01A15D352A8AB46BB584046086DC3BF0E527
Authority key identifier: 06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/flXbE03TECSCT80HkokwJLS28m4.roa
Signing time: Wed 21 Oct 2026 06:45:27 +0000
ROA not before: Wed 21 Oct 2026 06:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9063
IP address blocks: 194.48.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:35:2a:8a:b4:6b:b5:84:04:60:86:dc:3b:f0:e5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Validity
Not Before: Oct 21 06:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e55db134dd31024824fcd0792893024b4b6f26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:8c:6d:c9:47:6e:eb:5a:91:11:c4:55:bc:
97:48:4c:fd:1e:0a:87:9e:49:e2:da:f0:fd:28:7b:
bb:3d:5f:19:5a:06:43:ac:73:de:a8:58:c2:9f:ac:
8f:2e:1a:37:3e:15:fc:d8:dc:23:6f:d9:ca:92:5d:
db:34:47:9d:75:cb:ce:3b:da:de:a6:c7:5d:d2:e4:
77:e2:04:97:e2:35:2d:96:02:8e:71:5b:d3:28:66:
6e:d3:e3:6f:22:b7:d8:ee:1f:b0:fa:32:cd:32:b3:
7b:01:62:ba:ec:96:0a:75:16:84:00:ae:4d:77:dd:
25:be:b3:0e:91:2d:74:b5:be:1d:35:77:33:a1:3a:
72:32:57:97:bd:e8:0f:7a:9c:8a:ec:5a:ea:82:cf:
29:25:ce:7f:fa:16:0a:e1:3f:ba:41:cd:7c:65:b5:
83:00:7d:68:a2:61:75:d2:c8:82:6c:bd:ca:be:0e:
f7:de:a2:4d:80:e1:c1:55:94:69:9e:9e:4e:c7:40:
cf:da:c0:86:59:9a:8f:a7:98:85:27:e6:41:b8:60:
e1:4f:a3:b0:71:ef:00:bc:2a:e4:fa:d8:14:25:c4:
36:6c:42:f4:8c:f3:a8:b0:e4:e4:8d:a9:9f:c3:1b:
d7:76:db:19:ad:c9:5f:be:f5:f6:26:58:1c:7f:ee:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:55:DB:13:4D:D3:10:24:82:4F:CD:07:92:89:30:24:B4:B6:F2:6E
X509v3 Authority Key Identifier:
keyid:06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/flXbE03TECSCT80HkokwJLS28m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.193.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:28:9d:4f:ba:8e:65:98:d4:6e:88:25:7c:db:16:8a:9c:1f:
87:32:41:f7:51:6c:3a:7e:13:30:29:0f:6d:14:31:4a:de:96:
a5:2c:bf:2f:db:3b:3d:ba:e3:53:a5:24:a5:6e:93:ff:0f:77:
96:56:8d:61:cd:f2:fe:8b:b8:ee:c8:cf:74:d4:9d:28:53:8e:
70:a5:c0:ae:d5:52:fc:01:21:6b:6f:fb:3c:7e:46:9d:a1:60:
9b:24:b0:56:fb:83:f9:3b:b4:a2:38:a3:ef:9f:50:8a:38:cd:
db:ad:85:03:5b:1e:5c:90:4b:71:85:f3:95:27:7c:a8:da:9d:
c4:01:fd:c9:75:33:e5:48:82:45:c1:cc:07:97:d6:8a:a7:91:
3f:a7:f6:04:3c:85:70:1a:a6:4f:a5:e0:72:91:42:d2:94:e5:
00:a0:57:06:08:f7:a5:26:19:87:d6:a6:a1:1c:cc:1c:b4:07:
ab:2c:b9:55:2d:60:d9:fd:d8:10:2d:8c:4f:55:fb:ce:f0:55:
64:80:e0:c1:93:fe:97:cf:42:5c:60:63:a8:77:43:18:71:67:
0b:d3:1d:49:d9:9e:0c:ca:2f:58:1f:dd:7d:3d:41:15:4d:d0:
bc:63:82:d2:ce:a4:b5:62:7a:f9:d5:b3:02:32:75:b3:c3:e0:
34:56:51:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFdNSqKtGu1hARghtw78OUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YjdlZGVmNjE4NTg3MjNjNGFkZWJlM2VlNWE4OWY3MDA1
OGQ1ZmUwHhcNMjYxMDIxMDY0NTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTU1ZGIxMzRkZDMxMDI0ODI0ZmNkMDc5Mjg5MzAyNGI0YjZmMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZaMbclHbutakRHEVbyXSEz9HgqH
nkni2vD9KHu7PV8ZWgZDrHPeqFjCn6yPLho3PhX82Nwjb9nKkl3bNEeddcvOO9re
psdd0uR34gSX4jUtlgKOcVvTKGZu0+NvIrfY7h+w+jLNMrN7AWK67JYKdRaEAK5N
d90lvrMOkS10tb4dNXczoTpyMleXvegPepyK7Frqgs8pJc5/+hYK4T+6Qc18ZbWD
AH1oomF10siCbL3Kvg733qJNgOHBVZRpnp5Ox0DP2sCGWZqPp5iFJ+ZBuGDhT6Ow
ce8AvCrk+tgUJcQ2bEL0jPOosOTkjamfwxvXdtsZrclfvvX2Jlgcf+556QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH5V2xNN0xAkgk/NB5KJMCS0tvJuMB8GA1UdIwQY
MBaAFAa37e9hhYcjxK3r4+5aifcAWNX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUt
ODk1NTFlOGNjZTEyLzEvZmxYYkUwM1RFQ1NDVDgwSGtva3dKTFMyOG00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUtODk1NTFlOGNjZTEy
LzEvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjDBMA0G
CSqGSIb3DQEBCwUAA4IBAQBbKJ1Puo5lmNRuiCV82xaKnB+HMkH3UWw6fhMwKQ9t
FDFK3palLL8v2zs9uuNTpSSlbpP/D3eWVo1hzfL+i7juyM901J0oU45wpcCu1VL8
ASFrb/s8fkadoWCbJLBW+4P5O7SiOKPvn1CKOM3brYUDWx5ckEtxhfOVJ3yo2p3E
Af3JdTPlSIJFwcwHl9aKp5E/p/YEPIVwGqZPpeBykULSlOUAoFcGCPelJhmH1qah
HMwctAerLLlVLWDZ/dgQLYxPVfvO8FVkgODBk/6Xz0JcYGOod0MYcWcL0x1J2Z4M
yi9YH919PUEVTdC8Y4LSzqS1Ynr51bMCMnWzw+A0VlGH
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:00:11 2026 by rpki-client