Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/FvzNgN6jOPrU7HLhiQ1ZbT-6tB8.roa
File: FvzNgN6jOPrU7HLhiQ1ZbT-6tB8.roa (raw, json)
Hash identifier: ceH7xNtIASBG/OmWLD8LM3MYEGRNf6JiHbcW322GG3k=
Subject key identifier: 16:FC:CD:80:DE:A3:38:FA:D4:EC:72:E1:89:0D:59:6D:3F:BA:B4:1F
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 019B76EB31D9E816BC8C629C194E372DC2BC
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/FvzNgN6jOPrU7HLhiQ1ZbT-6tB8.roa
Signing time: Thu 01 Jan 2026 00:18:03 +0000
ROA not before: Thu 01 Jan 2026 00:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15946
IP address blocks: 193.41.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:31:d9:e8:16:bc:8c:62:9c:19:4e:37:2d:c2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Jan 1 00:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16fccd80dea338fad4ec72e1890d596d3fbab41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:63:8f:3f:82:22:7d:b9:99:d3:2c:10:84:
83:3d:ea:7f:91:de:82:24:2a:67:e5:eb:f0:d2:57:
f4:0e:cc:8b:ce:5b:c3:fd:a8:cb:48:24:69:47:55:
0a:6a:4e:02:bb:61:2f:1b:d1:fb:62:91:19:91:77:
31:da:88:46:ef:03:19:ab:a5:a8:26:8f:9d:e7:09:
c3:f6:b6:02:18:6a:f1:f7:06:15:ea:8f:32:d1:94:
31:98:fe:b7:9e:e1:16:a4:7d:57:46:66:d6:a7:ff:
43:28:1c:a9:f0:1a:cc:5b:1c:04:18:c4:d7:7d:95:
df:6b:0d:78:ef:99:97:22:0b:46:9c:24:e7:93:ec:
ca:ae:33:5e:ce:8f:ed:bc:09:37:75:77:ef:8d:ed:
e4:ac:48:31:ae:1b:14:5a:64:d4:1f:86:23:58:59:
f1:f5:57:bd:74:e8:d9:1b:da:97:46:2f:09:a2:d2:
40:4d:e6:74:3d:f5:1a:46:ce:c8:69:9d:ae:c9:e5:
45:ee:09:fe:a7:84:2a:90:2e:30:6a:ef:70:d3:75:
54:19:1c:2c:29:ee:82:c5:05:b5:6b:ca:c3:9c:20:
08:e1:08:64:3f:ec:58:1a:1f:a1:e0:70:e0:4c:61:
22:0b:92:f8:40:3b:25:b2:f5:d5:9f:3f:c5:af:b2:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FC:CD:80:DE:A3:38:FA:D4:EC:72:E1:89:0D:59:6D:3F:BA:B4:1F
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/FvzNgN6jOPrU7HLhiQ1ZbT-6tB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.35.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e4:48:bb:e7:be:b7:79:dd:0f:c3:7b:c9:38:f2:67:e2:81:
25:f2:0c:98:e4:7c:30:e9:44:ad:8c:a3:79:e9:8f:be:27:9f:
fa:1b:93:62:d2:58:9c:18:00:11:b9:1d:57:50:a4:9f:b0:f6:
20:c3:13:4c:87:f4:b3:24:5b:c7:72:77:76:ca:26:c5:6c:30:
01:16:55:2a:02:13:fc:82:1b:45:a4:f9:67:e2:e8:9c:51:3d:
41:8f:f9:d5:a2:91:d3:e2:0f:34:2c:81:46:1d:39:30:34:c5:
5c:93:74:f3:49:8c:a0:25:73:f4:60:4a:72:ea:4b:07:7b:43:
5f:5e:c3:12:96:2a:70:fd:d8:2c:da:23:af:d3:0c:53:bb:cd:
8e:16:72:20:7c:10:6b:0f:f2:87:ab:93:42:e5:22:f2:d1:0b:
41:cd:72:c3:be:b6:e4:58:cb:38:2a:98:1e:ed:eb:9f:83:11:
32:9b:34:35:9a:5f:05:46:04:ed:07:bc:72:7a:ef:df:de:53:
44:27:c5:1c:fc:c3:2f:13:f4:c6:b6:93:8c:83:21:4f:38:97:
a7:f9:7b:42:06:b1:c4:f7:cd:d6:92:b1:f0:ad:c9:6e:12:e5:
e1:59:8a:67:12:eb:13:9d:12:b3:c8:51:83:85:6e:25:d6:3d:
46:28:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:38:22 2026 by rpki-client