Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/fpJjVotUhsdXpo3sWAQ-mpgLTtw.roa
File: fpJjVotUhsdXpo3sWAQ-mpgLTtw.roa (raw, json)
Hash identifier: 8IWb88Dncxls8E/1PvPjWMmMbWylAbiZ5lQj5V/0n/w=
Subject key identifier: 7E:92:63:56:8B:54:86:C7:57:A6:8D:EC:58:04:3E:9A:98:0B:4E:DC
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A09B4F1A78BF8415D7A870013520EECAD3
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/fpJjVotUhsdXpo3sWAQ-mpgLTtw.roa
Signing time: Sun 13 Sep 2026 15:07:27 +0000
ROA not before: Sun 13 Sep 2026 15:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199417
IP address blocks: 2a0d:d940:201c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9b:4f:1a:78:bf:84:15:d7:a8:70:01:35:20:ee:ca:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Sep 13 15:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e9263568b5486c757a68dec58043e9a980b4edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:26:9c:8d:03:ad:53:27:39:fb:5d:b4:67:
fe:7c:9e:73:51:e2:6c:49:0c:35:e1:5d:1f:f6:8d:
ad:db:e9:ec:5d:42:cc:2b:9b:9b:1f:75:d0:60:73:
5e:48:62:bb:a0:7b:8c:49:80:41:99:1d:c8:f0:b1:
0f:34:a4:46:e4:91:fe:2c:3d:89:6c:c3:97:71:3b:
85:c5:63:06:df:f1:27:e0:e8:23:ce:28:77:ea:2e:
1e:2f:70:ae:7a:07:3f:1a:c6:5a:66:4e:54:0d:fc:
46:0e:f9:96:ba:eb:d0:bb:9f:46:cf:23:8a:99:7a:
b6:75:cc:ce:0e:ca:d7:22:ff:07:23:26:99:62:6e:
b4:bb:b0:b6:a8:bc:7c:ff:f1:ae:cc:6a:ce:24:c8:
2b:47:ab:18:37:0b:88:3c:d9:7b:54:38:28:64:10:
72:94:16:4a:a5:42:85:b7:69:14:25:36:99:dc:13:
7b:53:3c:d6:98:d8:c1:38:f3:15:47:2b:02:5b:d5:
a1:05:82:ce:49:0c:d7:44:ba:43:b1:d3:15:7a:9c:
ab:fc:b8:33:c5:93:1f:06:c2:60:f9:84:00:f9:5d:
f6:99:7c:82:ad:fb:66:a3:b7:6e:6d:b9:55:e3:9f:
4e:ec:e0:e4:d9:0a:07:92:f6:3c:bd:ba:18:82:8d:
d8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:92:63:56:8B:54:86:C7:57:A6:8D:EC:58:04:3E:9A:98:0B:4E:DC
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/fpJjVotUhsdXpo3sWAQ-mpgLTtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:201c::/48
Signature Algorithm: sha256WithRSAEncryption
e0:38:6c:9f:e1:88:84:fe:3e:1f:68:6d:f3:2b:23:ee:c2:1e:
fe:75:c7:50:6a:c0:e9:6e:82:55:52:9c:ba:79:37:34:73:e0:
65:6b:90:e1:23:0e:a1:56:86:fc:2c:24:df:bb:7d:21:d9:c2:
fe:66:c9:0c:b0:ab:b1:f9:15:3e:51:99:68:97:f6:78:79:98:
1c:a7:39:d5:4c:f2:87:0d:bd:3b:88:5c:e1:7e:95:80:71:63:
1e:69:46:72:ec:fc:a1:3d:60:f3:f8:da:de:ed:56:ce:be:16:
87:43:24:03:c3:ae:6c:ea:b2:0f:89:4f:73:30:98:85:c6:51:
b4:b6:c7:1d:47:d0:0f:33:a0:5d:8e:c6:e9:11:71:31:d5:9f:
f6:c9:f8:ea:da:c5:c8:6a:4f:cb:b9:29:57:df:ec:a3:20:a5:
2b:0d:c1:80:20:fa:bd:e5:c9:90:23:f3:02:bb:ff:2b:60:7e:
00:6e:ee:eb:0e:a6:71:92:97:1f:4c:05:2a:d4:62:94:9e:62:
5f:1e:a7:0e:32:9b:54:fc:8a:41:de:e0:c9:7c:65:a6:3e:8d:
f7:2a:21:ba:9f:f3:fc:ed:5d:03:26:14:6f:31:12:bd:cb:3e:
4d:d7:36:5e:91:12:0e:55:f1:3a:41:50:ca:81:1f:92:e3:48:
4f:c2:f1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:48:26 2026 by rpki-client