Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fmqkcdW-EzeIYZtLw1e7f1STStY.roa
File: fmqkcdW-EzeIYZtLw1e7f1STStY.roa (raw, json)
Hash identifier: XPRjLw0k35zUejQ36ur0eoqTH6yHKUoToM6usUs2TK4=
Subject key identifier: 7E:6A:A4:71:D5:BE:13:37:88:61:9B:4B:C3:57:BB:7F:54:93:4A:D6
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A08B71297D7E3B5215059FA9CD604FB219
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fmqkcdW-EzeIYZtLw1e7f1STStY.roa
Signing time: Thu 10 Sep 2026 13:10:44 +0000
ROA not before: Thu 10 Sep 2026 13:10:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218751
IP address blocks: 2a0e:4001:f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:71:29:7d:7e:3b:52:15:05:9f:a9:cd:60:4f:b2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Sep 10 13:10:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e6aa471d5be133788619b4bc357bb7f54934ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:0a:76:31:44:46:7a:6a:91:f2:e6:7f:61:
eb:3b:84:55:a7:ee:f1:8d:80:d8:1a:d4:1f:c8:da:
b9:09:0b:d6:3d:e5:b3:61:42:05:a7:59:fc:fc:09:
e9:42:80:47:32:b1:a7:d4:19:e2:e9:47:34:31:0a:
87:4f:b8:85:1c:a7:e3:34:60:20:bc:7e:83:77:5c:
0a:9a:c7:7d:cd:15:cd:56:ee:6a:67:de:d3:7e:7b:
53:08:d5:fb:b2:b5:1d:25:2a:61:ee:6e:d7:a1:56:
1f:2e:7c:ed:65:a2:19:74:08:0b:59:1a:3a:9a:c8:
3c:0a:e8:2b:54:dc:e0:ce:0b:a7:2f:80:dd:56:a0:
9a:02:31:b0:07:1b:a0:a5:d0:90:d1:72:34:bf:86:
c9:b2:6e:1a:ee:9a:b9:6b:9a:77:8b:01:0e:5a:72:
12:b1:b2:eb:69:ec:2a:e0:aa:54:13:ca:b8:a2:10:
74:cc:31:3c:9d:a1:98:24:b9:cd:73:03:24:3c:fb:
d9:d0:70:9f:8d:f4:02:26:af:6d:50:1c:71:db:a3:
eb:a0:c1:48:ed:e0:33:88:ac:51:a8:09:9a:9b:bb:
e7:7c:26:d2:ed:f6:7e:5d:07:49:4b:bd:5b:7e:3f:
e6:2e:45:a3:eb:b2:b2:65:17:12:31:df:45:b8:d2:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6A:A4:71:D5:BE:13:37:88:61:9B:4B:C3:57:BB:7F:54:93:4A:D6
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fmqkcdW-EzeIYZtLw1e7f1STStY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:f00::/40
Signature Algorithm: sha256WithRSAEncryption
5d:16:d7:59:a8:c6:26:0c:47:0f:49:ce:7e:41:c3:dc:47:45:
53:bf:92:57:9d:ce:48:55:a1:9a:5a:f3:4b:69:0f:68:4f:f5:
12:12:33:d9:e1:12:0d:d3:6d:5b:b8:72:5e:e3:00:72:81:a8:
14:74:7f:ed:72:2f:f2:e8:f0:7c:8c:bc:49:55:c9:7f:4d:c1:
35:07:d6:7a:0a:b7:8e:72:77:45:4c:eb:26:58:95:35:e4:ff:
f9:c3:df:34:5b:87:7d:29:60:38:08:7a:88:49:fb:8c:56:b3:
0c:b2:52:d4:a1:4c:09:e2:00:e2:27:ad:ff:83:d1:e8:cc:84:
88:23:f4:32:3f:0e:ba:10:39:31:70:3d:ab:3e:cb:19:b8:6d:
38:2d:10:1c:c6:62:00:00:40:fd:e7:0a:54:2b:cc:6c:af:68:
68:ea:93:e7:4e:b0:2c:cc:e5:89:87:74:ca:32:6c:83:15:9d:
cf:99:03:28:35:ca:f2:9f:fc:6b:81:1e:c5:6f:61:be:71:ee:
d4:12:31:3d:2d:8c:51:e2:9f:82:58:73:72:ab:4a:c8:e5:3c:
fb:66:8f:d8:a8:7a:7e:d5:94:63:19:e2:83:7b:a0:a5:c2:b6:
10:55:65:38:0a:d4:1d:79:56:76:5c:5d:1e:13:94:57:0e:91:
2c:a5:80:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:02:22 2026 by rpki-client