Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/Fkfx-G5QL9i_y4t8EzraGT25sro.roa
File: Fkfx-G5QL9i_y4t8EzraGT25sro.roa (raw, json)
Hash identifier: Z3pIWqwQsVYBQFolUdVnXyqDy8vnTGDvbMN3ug4bHxw=
Subject key identifier: 16:47:F1:F8:6E:50:2F:D8:BF:CB:8B:7C:13:3A:DA:19:3D:B9:B2:BA
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 019B7F8077B55BF775FCF23C768687B54CE9
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/Fkfx-G5QL9i_y4t8EzraGT25sro.roa
Signing time: Fri 02 Jan 2026 16:18:04 +0000
ROA not before: Fri 02 Jan 2026 16:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61167
IP address blocks: 5.159.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:80:77:b5:5b:f7:75:fc:f2:3c:76:86:87:b5:4c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Jan 2 16:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1647f1f86e502fd8bfcb8b7c133ada193db9b2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:58:14:b1:95:69:36:6c:06:6e:ec:36:6b:
c4:c9:af:94:8e:99:55:d2:db:43:b8:51:5f:72:1c:
eb:ee:0d:11:c7:98:1a:38:d0:0d:65:b0:f9:e3:d2:
35:f8:00:7f:f1:f7:c7:64:30:37:7f:bc:3a:5e:6d:
1a:6b:d0:c7:b0:f5:b6:29:22:16:71:81:03:7e:fe:
11:1a:68:63:9d:60:29:fa:4b:e4:bd:d2:aa:c5:4a:
eb:a4:ee:19:88:01:48:0f:13:61:72:33:f4:04:18:
c4:af:47:35:61:ee:eb:da:c4:6e:eb:a6:a0:ba:8d:
d5:1a:f8:ec:6d:13:7b:b8:58:f6:da:7f:d5:e9:1e:
90:ff:d6:c3:7b:0c:38:7e:db:ce:ca:33:02:05:47:
9f:a8:86:bf:ca:a9:91:0b:53:eb:ed:6a:05:63:de:
51:7b:9e:54:c6:a8:9a:38:58:82:2b:8d:60:e9:7e:
11:b0:35:f8:e3:b2:7e:b6:83:47:02:fe:6d:67:e5:
43:da:2e:31:85:5c:5e:56:4f:0b:a5:cd:71:97:d3:
da:78:8f:b6:9a:03:c0:56:a1:7d:72:f9:62:fe:98:
8e:34:87:7c:de:1d:fb:4c:ab:8e:23:84:fa:44:83:
8a:9c:42:89:9d:e3:b4:01:11:fd:2b:24:9d:b4:ae:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:47:F1:F8:6E:50:2F:D8:BF:CB:8B:7C:13:3A:DA:19:3D:B9:B2:BA
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/Fkfx-G5QL9i_y4t8EzraGT25sro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:8f:87:b4:ab:fd:05:ba:d5:da:de:b3:70:e3:15:62:37:a9:
23:4d:72:3c:37:2d:cd:55:ec:ae:16:84:8b:50:d5:48:fd:2f:
09:6c:64:ba:79:0c:f9:8b:19:5a:89:97:70:78:de:e9:3f:4a:
ac:a6:80:96:53:0c:35:fc:a8:e3:1c:96:50:c1:ef:4d:53:26:
f5:d7:69:5f:84:c2:f2:c4:44:4f:a2:63:15:1d:b2:4d:b2:c1:
8d:b6:53:21:6a:41:95:9f:4a:6f:0c:a1:cb:00:e6:2d:e3:3c:
df:8d:46:65:8b:46:9f:f2:50:9d:0c:27:af:3a:53:bb:56:57:
93:ea:35:67:fe:8c:be:f0:34:60:0c:55:1e:3a:82:50:22:78:
63:e9:53:94:e2:ff:06:26:5f:29:0b:bb:02:70:60:d5:5b:e7:
de:90:f6:36:02:cf:23:3e:21:19:54:91:42:fc:00:ec:90:a8:
c4:2f:6a:e3:d9:1a:e6:cc:fb:31:46:88:e0:03:16:66:1b:c9:
d2:f1:43:b3:ef:49:f8:91:eb:5a:b7:4a:19:30:fc:bf:1c:3b:
55:29:ac:2f:fc:c2:da:a5:a2:25:d4:a3:85:6a:da:ed:79:af:
39:21:81:d0:40:f9:85:8d:45:c0:5a:17:66:34:28:2d:1a:6a:
0f:c6:fd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:54:17 2026 by rpki-client