Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FHUnctDFlbLxHXxUS8Ic6F4ogL0.roa
File: FHUnctDFlbLxHXxUS8Ic6F4ogL0.roa (raw, json)
Hash identifier: kZdQp+z9chW/lrIcQPKYVqqBtcCaWSE+Z3veXmNoQug=
Subject key identifier: 14:75:27:72:D0:C5:95:B2:F1:1D:7C:54:4B:C2:1C:E8:5E:28:80:BD
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A087B084EFDE03BCF1EA79B538D24EE96A
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FHUnctDFlbLxHXxUS8Ic6F4ogL0.roa
Signing time: Wed 09 Sep 2026 19:41:27 +0000
ROA not before: Wed 09 Sep 2026 19:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218720
IP address blocks: 87.232.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:b0:84:ef:de:03:bc:f1:ea:79:b5:38:d2:4e:e9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Sep 9 19:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14752772d0c595b2f11d7c544bc21ce85e2880bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8d:fd:a9:d2:cc:72:7a:43:7f:09:d0:17:99:
79:7b:74:d0:e2:49:4e:8a:f7:40:a2:ca:29:2d:b5:
f2:67:3d:f7:e7:52:ef:aa:25:7e:20:8c:8b:ae:20:
7b:b6:20:df:fb:30:04:8c:c0:86:5d:a4:9a:08:52:
8a:14:5b:3f:04:1b:70:55:a2:1d:23:ae:f8:f0:80:
66:7c:79:00:a0:ca:a9:2e:d8:bd:3c:cd:90:ee:51:
56:05:f0:01:51:2c:94:4f:2c:f2:14:12:4a:d6:e9:
51:8f:a8:1e:ee:81:71:77:6f:20:fd:7b:9a:66:77:
d9:fb:8e:66:83:56:37:cf:2f:59:01:39:20:90:d2:
48:62:d8:53:44:4c:41:55:5e:a4:77:a6:5d:a2:56:
b5:51:88:cf:10:02:3a:62:ab:7c:66:e5:32:28:e3:
a8:50:46:b4:24:5a:c5:ae:7b:6e:26:c6:98:5b:1b:
29:dc:bb:88:a1:e6:7f:3d:3c:99:42:c9:5e:f7:4f:
2b:0e:74:52:0e:1d:e9:6d:f3:22:68:fb:2a:8b:c3:
fe:21:85:c3:d1:ea:30:83:3c:16:39:9e:51:7d:71:
df:b2:07:fa:7e:2d:04:a1:33:5a:fc:f3:bb:c6:d7:
dc:f8:9b:93:d4:8a:12:0c:a8:ca:7f:d4:99:b3:5e:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:75:27:72:D0:C5:95:B2:F1:1D:7C:54:4B:C2:1C:E8:5E:28:80:BD
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FHUnctDFlbLxHXxUS8Ic6F4ogL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:fc:f3:2c:eb:56:f4:09:66:62:f3:3b:a3:b9:c0:42:1e:62:
8e:aa:e6:d1:7d:a0:1e:73:a4:65:ab:6c:31:5d:92:2c:c7:d8:
bd:21:43:f6:03:69:db:ec:7d:e3:e4:11:75:f3:5f:0a:81:51:
45:aa:c7:34:7d:2d:bc:c6:bd:d6:88:2c:74:b7:67:a1:53:ab:
43:e5:57:0d:7a:9f:6c:80:1e:83:31:56:77:fc:ef:64:8d:9f:
7e:eb:2c:e1:2e:16:bb:49:df:e8:88:08:f1:5b:1e:88:f4:a5:
34:2f:b8:37:0c:3b:8e:37:a2:a3:62:15:19:3e:19:53:b2:f5:
5c:8d:dd:2d:0c:c7:a1:dc:b1:74:b1:6f:7f:2c:f5:c3:cc:47:
f5:dc:e4:16:e2:c2:8e:ee:f0:25:8e:cd:69:6c:7e:cd:f3:c5:
d6:86:5a:4f:3b:8f:c1:9a:25:49:00:3d:dc:6c:0f:b8:ff:7c:
82:bd:80:c0:28:14:23:ca:33:69:ff:43:79:df:02:ac:be:f2:
95:5b:5b:0d:18:d0:3b:24:fc:6c:50:82:cd:18:0a:8f:fa:60:
da:c0:bc:2c:c8:af:6f:bb:36:c4:6f:3c:f9:27:45:ed:a4:b4:
7c:61:e1:fe:21:4c:e5:14:6e:dd:2c:9f:0a:62:08:a7:ca:fd:
b8:57:cb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:53 2026 by rpki-client