Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/f0MeXp8TTW5XIzoQnGTjYXD1B48.roa
File: f0MeXp8TTW5XIzoQnGTjYXD1B48.roa (raw, json)
Hash identifier: 2Ny2I2t6rMOWodi9FhqX5O/RtTJ2rVvVE+0X6mGDrYA=
Subject key identifier: 7F:43:1E:5E:9F:13:4D:6E:57:23:3A:10:9C:64:E3:61:70:F5:07:8F
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A179548793FA1896F0B2E837B90285FBFD
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/f0MeXp8TTW5XIzoQnGTjYXD1B48.roa
Signing time: Mon 26 Oct 2026 17:49:05 +0000
ROA not before: Mon 26 Oct 2026 17:49:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 213.145.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:54:87:93:fa:18:96:f0:b2:e8:37:b9:02:85:fb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 26 17:49:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f431e5e9f134d6e57233a109c64e36170f5078f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:9f:1d:19:66:18:b6:95:3d:45:55:d3:54:
74:7f:e6:55:74:b9:44:af:9f:3b:27:c5:44:23:13:
61:b9:75:a2:39:ec:60:61:68:9f:69:f0:94:3a:66:
e6:fb:6f:26:8b:dc:2d:da:6e:c6:52:ed:79:f2:51:
b1:24:c6:ca:37:f8:91:5b:d2:f7:43:cf:9e:ba:c8:
7e:69:17:08:97:d5:7e:e0:b9:42:8a:7b:40:fa:74:
d1:6d:d5:19:4e:97:c1:61:c6:51:15:2f:64:ca:17:
48:83:bd:91:8a:64:ac:eb:71:ea:81:41:93:9b:34:
8b:ff:19:e9:65:49:a0:2d:a7:2f:18:e1:61:85:4a:
da:1d:1a:04:78:8a:d8:ca:60:76:4a:5a:d7:13:8d:
3f:0f:22:bf:66:28:80:ca:79:45:bf:9b:ab:b3:9d:
4b:11:36:83:6a:4e:b9:e5:2f:df:81:fb:ff:9e:3e:
03:d4:b8:b9:14:82:a2:5b:20:86:f0:f2:3f:fe:4f:
eb:5a:09:07:c9:ec:33:78:4e:0a:e2:8d:54:69:2f:
6a:47:2f:18:bb:a7:45:77:4b:d0:4e:aa:21:8c:31:
e1:dc:9e:a3:bc:17:3c:fd:a5:00:61:bd:4b:c2:37:
33:d1:7d:52:b6:d0:4c:b6:c5:09:19:c2:c3:d8:eb:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:43:1E:5E:9F:13:4D:6E:57:23:3A:10:9C:64:E3:61:70:F5:07:8F
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/f0MeXp8TTW5XIzoQnGTjYXD1B48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.76.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e2:c1:e6:97:63:ee:81:66:5e:4a:65:16:78:42:f6:ed:01:
c9:5e:33:4a:e6:c3:02:92:da:89:d9:6a:dc:e6:2c:ff:2a:65:
bf:8f:c6:c4:b0:b9:b3:f1:97:47:51:17:6b:03:65:a6:5c:ac:
a4:1f:21:c3:ad:b1:9d:f6:94:03:f9:14:7f:3d:bd:b9:dd:3d:
51:f4:70:7e:78:92:de:ed:eb:fa:ee:6f:b1:ce:d5:26:0e:aa:
02:f2:18:2c:d4:b0:d2:b2:33:84:b1:17:21:76:a5:88:2e:85:
18:a8:5c:54:56:1a:29:50:aa:0e:ee:b3:74:e7:da:13:fd:3b:
8a:f7:8d:b6:d9:4b:cf:31:65:c8:3a:d2:93:fc:a5:e7:6b:cd:
5e:12:be:da:b4:eb:61:22:68:11:39:a4:92:e3:af:1e:87:a0:
1d:97:1c:84:b7:8c:80:eb:22:0c:a8:0b:02:20:25:5e:ac:7a:
20:f3:81:0d:a8:59:77:7d:1f:eb:f6:8c:1b:82:2d:ee:06:2e:
fb:f2:71:d3:95:80:fa:13:1d:d2:8c:f6:73:f6:c3:7c:07:cc:
dd:c8:46:a3:40:a7:bd:58:86:95:dd:e4:b7:98:db:8a:81:76:
e9:ab:ed:b4:d9:4a:6e:77:a8:8c:da:49:04:00:2e:f8:df:3e:
a4:ed:fc:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF5VIeT+hiW8LLoN7kChfv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjYxMDI2MTc0OTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjQzMWU1ZTlmMTM0ZDZlNTcyMzNhMTA5YzY0ZTM2MTcwZjUwNzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU6fHRlmGLaVPUVV01R0f+ZVdLlE
r587J8VEIxNhuXWiOexgYWifafCUOmbm+28mi9wt2m7GUu158lGxJMbKN/iRW9L3
Q8+eush+aRcIl9V+4LlCintA+nTRbdUZTpfBYcZRFS9kyhdIg72RimSs63HqgUGT
mzSL/xnpZUmgLacvGOFhhUraHRoEeIrYymB2SlrXE40/DyK/ZiiAynlFv5urs51L
ETaDak655S/fgfv/nj4D1Li5FIKiWyCG8PI//k/rWgkHyewzeE4K4o1UaS9qRy8Y
u6dFd0vQTqohjDHh3J6jvBc8/aUAYb1Lwjcz0X1SttBMtsUJGcLD2Otf1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH9DHl6fE01uVyM6EJxk42Fw9QePMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvZjBNZVhwOFRUVzVYSXpvUW5HVGpZWEQxQjQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZFMMA0G
CSqGSIb3DQEBCwUAA4IBAQCX4sHml2PugWZeSmUWeEL27QHJXjNK5sMCktqJ2Wrc
5iz/KmW/j8bEsLmz8ZdHURdrA2WmXKykHyHDrbGd9pQD+RR/Pb253T1R9HB+eJLe
7ev67m+xztUmDqoC8hgs1LDSsjOEsRchdqWILoUYqFxUVhopUKoO7rN059oT/TuK
94222UvPMWXIOtKT/KXna81eEr7atOthImgROaSS468eh6AdlxyEt4yA6yIMqAsC
ICVerHog84ENqFl3fR/r9owbgi3uBi778nHTlYD6Ex3SjPZz9sN8B8zdyEajQKe9
WIaV3eS3mNuKgXbpq+202Upud6iM2kkEAC743z6k7fyY
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:05:52 2026 by rpki-client