Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1-0vvSx54Wd4o-n83erduwShl_FE.roa
File: 1-0vvSx54Wd4o-n83erduwShl_FE.roa (raw, json)
Hash identifier: NNZ7jyy/XVFCsfbW/Y5eulWsoeNfcfT9Vv50zVOArNk=
Subject key identifier: FB:4B:EF:4B:1E:78:59:DE:28:FA:7F:37:7A:B7:6E:C1:28:65:FC:51
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A05EE9DFC0DDE705F327BB233B8CF1D194
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1-0vvSx54Wd4o-n83erduwShl_FE.roa
Signing time: Tue 01 Sep 2026 21:39:40 +0000
ROA not before: Tue 01 Sep 2026 21:39:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 87.232.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:e9:df:c0:dd:e7:05:f3:27:bb:23:3b:8c:f1:d1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Sep 1 21:39:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb4bef4b1e7859de28fa7f377ab76ec12865fc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:a4:3b:b6:1c:49:de:55:b7:df:e9:86:7b:
1e:26:fb:c7:1b:ce:d4:8c:20:0b:c6:ff:fb:78:4b:
18:98:d5:d1:3e:91:10:76:17:7e:4b:16:3e:02:4f:
67:8e:27:e6:92:76:58:49:49:b6:92:ae:e6:62:f7:
29:9a:ee:1e:06:9a:5b:89:58:69:31:d7:5e:1a:0b:
15:4c:ef:a4:0a:70:1a:b7:42:b8:ad:38:5b:4c:99:
2c:3e:11:bb:fa:c5:08:13:78:c9:e1:be:00:a7:cd:
54:55:40:f8:1a:43:4d:ad:e1:8f:0f:2e:29:9a:60:
0d:8e:cf:03:a8:29:a2:49:1f:c5:de:56:4f:30:67:
1f:4a:e5:6d:6c:88:02:28:17:6b:0c:d9:6e:0e:31:
99:5c:e7:a5:31:24:45:b6:99:32:9b:e4:9d:7e:6a:
43:3e:16:06:0e:27:de:e8:f3:81:70:db:8f:2e:b7:
c2:be:f5:cc:80:94:c2:75:98:18:59:fe:d3:34:e3:
71:d6:25:3f:dc:fa:72:1f:16:55:f7:81:07:39:88:
36:76:fa:30:a8:9f:3a:d7:ad:46:48:ca:99:ce:33:
0a:1a:59:bb:64:0b:3b:23:0c:7a:11:48:74:df:67:
67:1b:bf:66:86:82:1d:d8:40:76:7f:25:b1:e1:21:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4B:EF:4B:1E:78:59:DE:28:FA:7F:37:7A:B7:6E:C1:28:65:FC:51
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1-0vvSx54Wd4o-n83erduwShl_FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.113.0/24
Signature Algorithm: sha256WithRSAEncryption
87:55:dc:a1:ae:d7:58:90:aa:6c:55:05:b9:86:ed:62:43:51:
31:ef:80:41:8d:09:cf:64:85:1c:ef:c4:69:fb:8d:fb:ac:6a:
22:61:16:4c:30:3e:f0:0a:08:69:45:aa:97:ad:4d:70:7d:b3:
f9:6f:a1:57:c2:9b:3d:af:a7:8a:a2:05:7f:e4:3e:d5:67:b0:
e8:70:aa:77:34:e0:fd:af:9c:d9:3d:62:74:cc:8c:e4:1c:cc:
db:7d:da:d8:6b:70:eb:23:7a:11:ec:09:a8:97:fa:dd:be:b8:
c7:1c:8d:93:97:dd:b3:22:08:86:bb:3f:4a:11:b7:32:3d:25:
af:ed:b2:0d:dd:61:82:83:84:0a:d9:a2:03:20:7f:9d:08:6e:
4c:93:73:1d:07:0b:25:eb:3e:ad:f5:75:37:94:f6:42:93:f9:
d8:e2:ed:1a:ee:e2:5b:bc:ad:d7:d9:b8:a1:1d:29:c7:2d:cd:
5c:5c:fc:7d:a8:40:ad:6f:97:21:87:47:2c:3b:77:71:f3:d7:
c8:ff:99:37:65:d8:f4:b4:34:de:51:55:c9:c7:88:5b:c7:18:
81:25:c4:b8:1c:48:29:13:7e:fe:a0:c6:0a:d2:81:83:1b:0e:
69:70:4e:2e:96:8f:8e:81:89:b9:7c:67:ef:d3:25:fd:9c:2a:
fb:51:1f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:06:58 2026 by rpki-client