Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/FiJY_f6GKm6veDvPVDNX9LWOSRU.roa
File: FiJY_f6GKm6veDvPVDNX9LWOSRU.roa (raw, json)
Hash identifier: SMTBlb+NpQPNeXGuJJJYcwSp8wfNIzukvM7Bw3VT8hg=
Subject key identifier: 16:22:58:FD:FE:86:2A:6E:AF:78:3B:CF:54:33:57:F4:B5:8E:49:15
Certificate issuer: /CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Certificate serial: 019C569D916FE135C2BAEE759B0A3D9A8397
Authority key identifier: DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/FiJY_f6GKm6veDvPVDNX9LWOSRU.roa
Signing time: Fri 13 Feb 2026 10:48:12 +0000
ROA not before: Fri 13 Feb 2026 10:48:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 224
IP address blocks: 2001:67c:714::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:9d:91:6f:e1:35:c2:ba:ee:75:9b:0a:3d:9a:83:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Validity
Not Before: Feb 13 10:48:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=162258fdfe862a6eaf783bcf543357f4b58e4915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:b6:1a:b8:1c:87:71:9e:e4:0f:51:c8:41:
a2:78:cf:a1:4b:21:b0:0c:16:c5:bf:56:64:3a:da:
5f:6b:5f:6d:ff:8c:cf:b6:4e:f1:3b:3e:77:c2:03:
b8:0f:9f:0e:5b:6a:c6:1d:bd:33:58:64:d3:61:1b:
7c:45:38:47:76:e1:be:24:40:4b:c9:c9:29:ee:a7:
83:cc:85:c9:81:f1:35:31:f1:16:da:d1:4c:ff:65:
24:98:61:14:4d:8c:ff:9d:fe:be:31:4e:c6:b7:90:
97:32:59:eb:20:c2:47:1f:f5:ba:06:81:6f:f2:bf:
a7:03:0a:f9:56:81:89:cd:b4:a9:ec:a5:59:c5:15:
ba:08:32:49:af:c0:2f:37:ef:f4:80:90:76:1f:7f:
e5:a2:fa:8a:ca:72:9a:ab:30:98:c7:7a:bb:b1:fe:
ae:16:b0:52:58:8b:b3:a2:cf:f5:3c:03:53:da:bc:
e5:91:94:ef:3a:d4:92:3d:06:2e:c0:d6:d9:f7:50:
62:c9:6e:ec:bc:d6:7d:6a:11:52:71:94:30:94:81:
ae:40:b9:9a:1c:0a:c5:60:c8:74:89:3f:25:5b:85:
4c:af:b2:d4:58:4c:e3:92:a6:6f:4e:c0:d5:29:59:
0d:54:72:83:d7:b4:ea:c0:4e:09:32:ec:64:34:1f:
03:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:22:58:FD:FE:86:2A:6E:AF:78:3B:CF:54:33:57:F4:B5:8E:49:15
X509v3 Authority Key Identifier:
keyid:DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/FiJY_f6GKm6veDvPVDNX9LWOSRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:714::/48
Signature Algorithm: sha256WithRSAEncryption
6e:1b:c8:dc:cb:a2:cc:9e:8d:f8:82:42:57:b5:7f:e3:8e:48:
2c:7e:15:4a:d9:70:b6:b4:89:97:1f:a6:f9:b4:7f:68:02:de:
13:bb:71:88:75:03:b8:95:b9:39:f7:ff:c9:07:aa:7f:b4:c6:
71:63:f8:c3:31:44:cb:88:48:9b:1f:37:bf:fe:83:64:76:a4:
8e:32:0c:ac:ae:ec:d8:09:c5:2c:63:30:8d:7c:98:82:14:90:
f7:c9:b9:40:a8:41:b8:1a:bf:0c:2c:38:4c:44:ba:f7:44:8c:
d5:3b:c5:eb:f5:97:67:a7:32:99:d4:2a:f2:b7:ec:3b:0f:14:
88:f7:bc:15:75:17:af:ae:0a:d9:13:c5:d7:e3:3d:48:b5:e1:
a5:ec:5b:c3:89:ec:9b:9a:64:47:7f:b7:11:c5:af:ff:78:72:
25:f6:af:fa:cf:67:ce:e2:23:da:ca:2a:2e:d6:9c:fd:30:0a:
5e:0b:e9:06:5a:55:a6:b8:81:39:5a:eb:d7:be:22:d0:68:26:
e9:d8:33:b7:cf:15:6f:9a:1e:85:98:a1:16:3a:63:b1:5b:ec:
c7:b6:45:67:91:25:ea:cf:8d:fe:6d:27:07:6e:ac:fe:30:30:
65:a9:5a:ae:6f:c1:5d:43:15:24:ba:41:f1:1e:5f:96:c6:d0:
a6:46:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:54:43 2026 by rpki-client