Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/UQX7Y6H-6lldECg4kZw_DzXO07A.roa
File: UQX7Y6H-6lldECg4kZw_DzXO07A.roa (raw, json)
Hash identifier: bZFa28Qsy1xLhOmkVkv0XlpTFMES/ZYFD+5mIv+Azdo=
Subject key identifier: 51:05:FB:63:A1:FE:EA:59:5D:10:28:38:91:9C:3F:0F:35:CE:D3:B0
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A1C1C4D1D427057CC43A09E9CC365B821E
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/UQX7Y6H-6lldECg4kZw_DzXO07A.roa
Signing time: Mon 09 Nov 2026 19:24:23 +0000
ROA not before: Mon 09 Nov 2026 19:24:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218184
IP address blocks: 213.145.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:c4:d1:d4:27:05:7c:c4:3a:09:e9:cc:36:5b:82:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Nov 9 19:24:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5105fb63a1feea595d102838919c3f0f35ced3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:94:5f:38:a8:9b:cf:6b:20:32:47:60:4c:
d3:49:1e:33:b2:43:ac:f6:1e:de:b6:f3:cc:14:14:
78:c5:42:0a:b8:88:ba:32:a6:4c:c8:e5:ca:92:70:
9e:db:e8:37:a7:05:0a:0d:7a:df:02:5e:cc:f8:fb:
6c:7a:f0:47:90:a2:74:35:74:81:cf:68:8c:82:b4:
89:ea:7d:db:1d:27:83:8c:5f:12:fa:b8:a6:27:09:
28:ca:f2:df:5c:66:80:2f:c2:96:ce:15:12:8c:d3:
4a:a9:3e:ff:96:e8:22:87:78:15:27:f1:14:9a:31:
fa:22:12:c6:20:56:e2:40:4c:69:39:11:91:71:ef:
85:b0:69:c9:ad:04:dd:fd:73:96:a3:96:ba:7f:6f:
e8:24:aa:9f:69:34:87:c7:c6:38:66:fb:ce:57:18:
12:ad:21:a7:47:ad:20:02:fb:eb:6b:d5:df:5c:69:
1a:74:5c:39:e3:65:d9:54:4c:42:78:2a:7d:07:95:
b2:98:dc:39:66:f8:55:f9:26:8e:e1:a0:ab:fc:6b:
f7:5a:10:9e:be:5b:f3:eb:b1:f1:75:27:51:18:2d:
e5:47:67:18:b4:86:d2:3c:2c:99:99:db:bf:6e:14:
64:bb:a2:ee:df:97:96:a4:3b:0e:30:21:79:98:f4:
1a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:FB:63:A1:FE:EA:59:5D:10:28:38:91:9C:3F:0F:35:CE:D3:B0
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/UQX7Y6H-6lldECg4kZw_DzXO07A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.79.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d9:e1:b2:43:b7:1c:c7:19:b8:a4:65:75:f0:5e:d7:9c:e9:
e7:66:35:c8:61:32:40:73:58:b4:2f:fd:d6:26:23:bc:43:46:
e5:3a:53:49:78:9a:dd:a2:a0:c1:99:0c:06:1b:33:d4:c9:74:
56:da:e1:4c:05:bc:af:fc:0f:70:a2:e2:4b:c8:26:54:bd:e2:
24:12:c8:2a:97:84:dd:a1:74:1f:5c:69:ea:6d:32:74:57:38:
ec:8a:db:86:5e:dd:a1:bd:41:60:22:55:db:ae:bf:97:8d:bb:
9b:f6:3c:ec:95:fc:3a:53:a2:e3:22:f5:79:b2:ea:d2:02:7d:
66:e1:73:ef:93:99:85:34:d0:14:21:2a:bd:c1:2f:13:fe:a3:
55:a5:64:7e:d9:f9:ed:a3:a3:c9:1b:3d:66:b2:87:c1:e5:ba:
dd:c6:cd:de:72:5b:6c:04:73:d4:8d:d9:59:19:d5:a9:a8:53:
81:7b:ba:b3:53:d4:d4:ea:a7:01:87:ef:25:fb:62:09:5a:20:
9b:1b:99:89:85:c0:fe:7c:8e:0a:17:2c:88:75:e1:8a:67:f6:
55:49:ee:bf:a8:0f:f0:8e:a6:d2:3f:00:6f:ae:74:27:78:fb:
6a:3d:c0:ba:04:c0:7f:42:a8:22:f0:fe:4c:03:f0:0f:88:c9:
e0:20:ea:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:43 2026 by rpki-client