Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FWctnaVt0fHo19fywwAtztnuNzY.roa
File: FWctnaVt0fHo19fywwAtztnuNzY.roa (raw, json)
Hash identifier: zQ8ooWd93eI1/niM2XOtxa0EwZbRg/0jLUlrr1WXdXI=
Subject key identifier: 15:67:2D:9D:A5:6D:D1:F1:E8:D7:D7:F2:C3:00:2D:CE:D9:EE:37:36
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019FA94402EB02E520BCFD11A0D08A084F4D
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FWctnaVt0fHo19fywwAtztnuNzY.roa
Signing time: Tue 28 Jul 2026 15:07:14 +0000
ROA not before: Tue 28 Jul 2026 15:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214480
IP address blocks: 87.232.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:44:02:eb:02:e5:20:bc:fd:11:a0:d0:8a:08:4f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 28 15:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15672d9da56dd1f1e8d7d7f2c3002dced9ee3736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:38:22:4e:b6:96:0a:52:30:09:7d:1a:61:
40:4a:e5:13:55:11:b2:49:92:13:17:5f:b5:8c:1a:
2c:05:95:f9:36:2e:02:aa:36:da:ce:f6:2e:26:f7:
01:e3:32:f0:5b:0d:cc:c0:69:e9:1e:67:64:d3:b9:
19:9e:4c:cb:6b:a7:39:71:ee:0e:d8:79:a9:1f:de:
1d:95:41:5f:8d:95:bf:69:f0:6c:f5:5f:c8:76:04:
2d:e1:a1:d4:80:e2:77:96:21:f1:65:6d:4a:26:19:
87:d4:84:c8:ea:1d:56:f3:2a:bd:e7:a8:17:1a:bd:
58:65:8e:62:97:8b:8c:58:15:28:3e:f0:a6:08:ae:
50:32:c6:26:71:56:20:c6:a7:89:eb:4c:a2:ee:ab:
77:fb:9a:d3:ab:6e:b3:ad:c9:38:b1:36:6d:d1:cb:
2d:e1:6c:e9:5b:32:f0:85:e9:b7:50:73:3a:b2:d3:
87:89:cd:46:24:e4:03:fa:49:db:57:2f:c1:e1:58:
fb:a7:4b:21:e8:52:e2:c1:8d:03:3b:e6:4f:42:44:
a7:21:3f:34:c3:94:29:c0:c6:ac:8f:b6:2d:23:35:
da:e1:53:78:d6:b7:71:77:a0:a5:43:dc:1f:aa:3b:
ca:c8:e8:cf:44:8e:76:ee:f2:ba:f8:db:5a:0e:94:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:67:2D:9D:A5:6D:D1:F1:E8:D7:D7:F2:C3:00:2D:CE:D9:EE:37:36
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FWctnaVt0fHo19fywwAtztnuNzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.108.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:c9:09:b0:a4:23:64:83:49:cd:f1:e3:fe:c1:9c:90:de:c9:
b7:19:b2:a7:05:54:19:df:3e:fb:ee:5e:11:85:ce:93:70:19:
34:cf:00:cb:01:10:e9:54:ac:dd:44:f9:37:30:e0:55:5c:20:
e1:be:6e:e6:34:16:d6:38:77:ca:75:85:fc:74:b4:91:9b:65:
68:dc:86:b2:04:62:79:07:9d:1c:c8:86:7e:9d:bc:d2:d9:02:
22:f6:f8:e2:ef:b7:f2:a4:af:71:4e:86:08:79:4c:2e:3e:4e:
48:ba:ee:f8:db:56:1e:ae:c6:b5:87:5e:51:b0:3b:4c:57:8e:
49:fa:5d:a2:ad:2f:73:bd:6e:80:29:b3:3b:84:93:5f:ed:9a:
8e:d0:a6:9a:8a:71:d9:05:1e:43:90:17:bd:37:12:90:d9:5c:
7f:ff:97:0c:cb:c0:cb:af:7c:ea:02:ca:72:a6:0b:66:6c:1c:
18:ba:7a:29:02:8a:35:cc:5b:5d:2c:f6:6e:47:6e:c9:5d:f9:
35:0d:b5:77:ee:be:15:21:ac:e8:3e:49:3f:01:fe:4e:46:07:
c6:91:42:4a:7f:8f:ae:29:16:86:07:0b:52:08:e1:ce:37:62:
50:4e:48:d1:bf:dc:b4:fc:e2:f7:44:33:41:ca:4b:88:d8:1f:
95:87:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:56:59 2026 by rpki-client