Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/FGE22DbZh3-56wjW7LCxc0Hbgvw.roa
File: FGE22DbZh3-56wjW7LCxc0Hbgvw.roa (raw, json)
Hash identifier: AYkR0sqr/HhohnZBEQcJEx3ib1PKOMXkamXQeJAHf7E=
Subject key identifier: 14:61:36:D8:36:D9:87:7F:B9:EB:08:D6:EC:B0:B1:73:41:DB:82:FC
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019D83359724CE5C7FAC39706563A487BA3D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/FGE22DbZh3-56wjW7LCxc0Hbgvw.roa
Signing time: Sun 12 Apr 2026 19:40:20 +0000
ROA not before: Sun 12 Apr 2026 19:40:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215238
IP address blocks: 89.251.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:83:35:97:24:ce:5c:7f:ac:39:70:65:63:a4:87:ba:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 12 19:40:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=146136d836d9877fb9eb08d6ecb0b17341db82fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:3d:d5:1d:a6:67:24:2f:89:45:3c:a0:be:
34:4b:6b:9f:67:ad:26:d5:9e:7d:c7:96:84:29:80:
f7:c6:04:c1:14:70:6a:37:a6:d7:86:d0:d3:31:d2:
e9:e7:0a:a0:30:92:82:04:f1:11:a8:ef:7e:df:68:
0a:61:eb:69:7a:c1:89:47:94:5f:5c:4c:98:27:3f:
23:48:3b:34:aa:e4:b1:96:46:2a:2c:e3:d4:82:a6:
52:69:06:f2:47:9f:02:22:be:81:cb:b3:e8:d3:92:
24:60:11:fc:a4:a5:d9:37:fd:aa:7b:fa:cd:af:3e:
1c:88:9a:f5:4d:ae:23:d3:24:21:7a:ce:15:6b:e4:
31:3b:db:de:9f:ab:62:8d:5c:19:20:fe:08:88:bf:
f0:a9:66:75:7e:5a:4c:35:04:39:ca:3a:dc:98:66:
52:4c:b0:a5:3b:6d:be:44:ad:7e:60:2d:38:a8:4c:
bd:79:f4:93:48:c3:fe:20:47:1d:4b:3f:ae:e1:5c:
b7:cd:ea:be:d0:42:c9:32:39:3f:2c:02:08:e1:c4:
55:c6:f2:47:70:a4:34:f5:e8:50:32:8f:b1:03:d4:
62:9b:a9:25:ad:50:46:6a:35:ab:fb:fe:90:50:56:
ba:bf:05:0e:35:97:4d:33:2c:1c:91:88:e6:1e:58:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:61:36:D8:36:D9:87:7F:B9:EB:08:D6:EC:B0:B1:73:41:DB:82:FC
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/FGE22DbZh3-56wjW7LCxc0Hbgvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.18.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:74:ee:61:62:e8:12:7f:51:b2:d2:6c:a8:62:47:00:ed:ff:
5e:b3:9a:c6:cd:c3:c2:6d:0f:79:a5:25:dd:f6:5d:ea:49:df:
ae:6d:71:bd:49:12:8a:f7:89:47:64:00:ea:2a:c5:29:52:c4:
e3:17:cd:02:ef:d9:09:86:62:97:8d:04:c8:89:e9:f3:36:c1:
19:34:9e:60:0f:46:9d:c2:70:a2:d6:81:9c:51:73:25:8c:05:
bc:8e:51:5c:a3:e9:c7:42:c2:16:da:e9:ba:fb:3f:40:bf:58:
94:b6:0d:d8:63:26:e8:66:bb:b1:c9:26:43:89:71:e3:36:7d:
a5:3b:fa:28:ba:7c:04:6d:3f:0f:18:27:58:fa:8c:21:19:27:
1b:30:92:18:ec:a5:3d:82:f8:d2:10:89:e7:69:c8:05:62:95:
c4:b6:64:69:37:96:81:dd:ff:9f:d2:bf:2b:45:31:8d:28:bc:
61:6a:8b:47:08:00:99:4b:eb:20:e1:3b:40:c0:24:0b:b4:56:
d4:cc:34:f3:67:51:f7:7c:b1:3e:9b:ee:e0:08:2d:90:9b:4d:
68:33:98:c0:48:93:e6:80:46:9f:f6:47:c0:4c:9e:de:07:f2:
ca:15:2a:f4:f3:ed:d5:12:7f:74:6f:b9:71:a8:dd:f7:96:2c:
5c:b5:e6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:54 2026 by rpki-client