Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/X1CFLv7A4sRe4MDi2VvzKlGjy14.roa
File: X1CFLv7A4sRe4MDi2VvzKlGjy14.roa (raw, json)
Hash identifier: k+C+7aHCIjTNRdAT1VeG2Bh6fcwcYqFEffA4u1Vojg4=
Subject key identifier: 5F:50:85:2E:FE:C0:E2:C4:5E:E0:C0:E2:D9:5B:F3:2A:51:A3:CB:5E
Certificate issuer: /CN=441d806c1a71f750747451c8d1a7fb5b4e6aa802
Certificate serial: 019FD64DFDD23F9178A50CBAF2FE2E7876A1
Authority key identifier: 44:1D:80:6C:1A:71:F7:50:74:74:51:C8:D1:A7:FB:5B:4E:6A:A8:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB2AbBpx91B0dFHI0af7W05qqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/X1CFLv7A4sRe4MDi2VvzKlGjy14.roa
Signing time: Thu 06 Aug 2026 09:01:03 +0000
ROA not before: Thu 06 Aug 2026 09:01:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8426
IP address blocks: 194.113.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/RB2AbBpx91B0dFHI0af7W05qqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/RB2AbBpx91B0dFHI0af7W05qqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB2AbBpx91B0dFHI0af7W05qqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:4d:fd:d2:3f:91:78:a5:0c:ba:f2:fe:2e:78:76:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d806c1a71f750747451c8d1a7fb5b4e6aa802
Validity
Not Before: Aug 6 09:01:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f50852efec0e2c45ee0c0e2d95bf32a51a3cb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:e0:0a:f8:4c:12:01:66:d7:44:14:06:01:
f5:39:c5:64:fe:cc:c4:5d:3b:3b:33:b1:b0:ef:4a:
17:4f:a5:8f:98:29:ab:3e:95:7f:c4:29:73:71:20:
25:06:82:a5:4a:14:00:08:47:4d:6d:52:b5:ab:30:
d3:af:b8:5b:c6:6d:bb:6a:c2:05:89:87:ea:c5:1f:
f3:8d:b6:75:72:94:00:a6:cc:c4:89:78:fb:c4:81:
5b:32:9c:c2:8c:1e:b7:d3:a3:08:02:ee:38:ee:42:
7d:b1:72:ed:70:f3:6b:d6:e4:53:41:7c:20:a5:bc:
91:6c:1a:f6:76:32:3d:47:8d:a6:1a:48:b8:68:77:
94:ec:b9:a2:d2:60:4d:86:5b:32:aa:c9:66:fe:f2:
5d:69:05:0d:90:45:43:9c:ec:2a:5c:a7:2b:99:83:
c1:68:76:54:ac:24:4e:39:89:73:17:dd:ba:26:78:
e0:6a:28:97:86:b8:0c:cb:3d:a5:cc:fd:1a:1d:07:
b2:d3:f3:fb:de:ed:00:dc:6e:f7:6b:45:20:4c:67:
57:cf:8b:06:2f:78:2b:04:81:56:26:9b:1d:f5:db:
0a:fd:6a:40:76:dc:22:f5:dc:5d:b1:99:a3:78:86:
fb:71:12:87:14:b1:71:f7:9b:14:4b:69:25:1f:53:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:50:85:2E:FE:C0:E2:C4:5E:E0:C0:E2:D9:5B:F3:2A:51:A3:CB:5E
X509v3 Authority Key Identifier:
keyid:44:1D:80:6C:1A:71:F7:50:74:74:51:C8:D1:A7:FB:5B:4E:6A:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB2AbBpx91B0dFHI0af7W05qqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/X1CFLv7A4sRe4MDi2VvzKlGjy14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/810ded-bd27-403e-8369-02626090c0aa/1/RB2AbBpx91B0dFHI0af7W05qqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.136.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:ce:cb:59:d5:38:10:b6:8c:e2:2e:19:81:37:a7:20:c0:0e:
df:ef:79:fc:93:28:d5:f7:c1:2a:1f:96:d9:2e:c1:6f:2e:d9:
8b:b0:a9:c4:4f:61:57:02:bb:b5:8a:3b:ef:fc:ec:81:1c:3d:
6b:99:3d:a6:1f:e4:72:54:8e:e9:15:e4:11:4c:86:37:b2:01:
da:64:ea:97:bc:d8:08:e0:4a:15:55:bb:14:9d:44:be:b8:59:
0b:ee:d5:61:8f:cf:9c:4f:22:58:5b:f4:eb:b7:ed:81:a1:5c:
f0:79:db:7f:af:24:6a:b9:55:d5:9e:12:54:dd:7d:ee:90:62:
96:13:a0:be:96:07:bc:63:9b:c8:d6:d8:d7:86:79:fa:32:bc:
82:f6:20:3e:21:14:37:b5:34:46:07:90:5a:06:f0:b8:e3:cf:
d8:80:15:4a:50:36:c8:25:03:1e:f2:50:c3:a8:e7:ad:64:28:
39:8a:24:e8:c3:1e:f0:3e:80:ec:65:15:b3:05:17:89:d1:9f:
73:ae:e5:85:a7:45:c4:e4:d1:4d:8c:b3:aa:e9:60:8a:90:53:
05:fa:8a:8e:e3:1b:42:cf:0b:fe:06:e1:76:75:6a:df:16:b1:
16:f7:9e:52:97:e5:3c:5e:bd:b8:0e:b0:ce:e3:48:74:89:b9:
52:7a:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:20:45 2026 by rpki-client