Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_L6W4LfMhfWJ09vbzzO7S_GY5-0.roa
File: _L6W4LfMhfWJ09vbzzO7S_GY5-0.roa (raw, json)
Hash identifier: J2rhtfm0oyZ6GIsWYgpAKtYPM/xmQiYzN610SPMqTtk=
Subject key identifier: FC:BE:96:E0:B7:CC:85:F5:89:D3:DB:DB:CF:33:BB:4B:F1:98:E7:ED
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019C33B4313465CFCED993783DDC88D7A1A5
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_L6W4LfMhfWJ09vbzzO7S_GY5-0.roa
Signing time: Fri 06 Feb 2026 16:06:12 +0000
ROA not before: Fri 06 Feb 2026 16:06:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203679
IP address blocks: 5.178.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:33:b4:31:34:65:cf:ce:d9:93:78:3d:dc:88:d7:a1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Feb 6 16:06:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcbe96e0b7cc85f589d3dbdbcf33bb4bf198e7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:4e:df:bc:74:a5:cd:6e:6f:c0:a2:84:06:
e5:5c:bb:06:18:89:6e:d5:21:fc:d5:77:5f:b8:1b:
8b:a0:f8:72:c5:8c:62:3c:2b:ae:6f:24:ae:6e:53:
08:43:65:2f:e5:cb:6e:62:a1:27:ea:96:17:28:2f:
42:7f:62:82:36:7f:98:b2:47:c5:74:03:1e:5b:89:
6f:2d:e4:1f:23:4a:bc:32:82:a8:8d:d8:34:d9:ee:
2e:48:c9:40:ae:1d:17:75:e3:23:c5:9e:ee:b3:3b:
75:89:91:dc:27:85:2a:78:0d:a5:da:6a:05:c5:4c:
54:60:0c:21:e6:a3:e5:fc:bd:22:38:88:f1:5f:93:
c9:d3:56:61:9c:b3:56:0a:30:e6:5e:dc:c8:11:3a:
4a:bd:99:b4:a0:ba:de:78:f1:73:97:5f:ff:ee:07:
8a:87:a3:fe:df:1d:27:7e:d0:85:f4:a0:86:a7:35:
04:31:63:a7:89:91:7a:5f:d7:99:c8:6d:db:9c:a3:
ad:b0:10:d3:ae:2a:d1:27:ed:4a:fd:81:d1:31:af:
0f:5f:15:f7:c5:93:83:8f:9c:26:71:9f:0e:bf:92:
e4:1c:3c:77:34:45:02:fa:aa:d7:70:73:60:c3:aa:
38:fd:9c:91:29:cf:60:3e:58:04:ac:6f:56:45:2e:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BE:96:E0:B7:CC:85:F5:89:D3:DB:DB:CF:33:BB:4B:F1:98:E7:ED
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_L6W4LfMhfWJ09vbzzO7S_GY5-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.99.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f1:48:a1:02:f9:64:86:2c:08:df:c4:29:70:e5:43:09:91:
6b:d6:84:07:b7:d9:64:0f:b9:75:f6:b9:5e:0a:7d:e2:99:52:
11:f4:73:4c:05:1e:d0:3b:84:8d:75:c4:c7:9c:58:0e:80:d3:
d8:0b:ce:d8:26:9c:9f:21:1e:8c:dc:18:f3:ba:5b:32:8a:88:
23:a2:2e:0f:7e:df:58:51:b6:5f:38:9c:48:6c:c9:4c:56:e0:
db:a0:c0:c1:e2:66:ae:63:57:30:1f:9b:ca:a8:2f:93:77:33:
4d:b0:12:d1:81:a2:ca:24:7d:65:13:f4:99:52:33:9b:3f:92:
da:c0:bf:22:df:71:50:68:15:c7:de:cd:43:22:b4:45:4a:f7:
b3:46:70:e2:b5:97:b6:bc:92:94:d6:bd:ec:c3:da:01:68:c4:
87:65:ad:92:85:c9:e9:98:fd:42:6b:c2:fb:16:48:ca:b7:5c:
a2:d4:91:28:b2:dc:5f:65:c1:67:58:9f:4b:09:0d:8c:12:f0:
93:61:f3:1b:fb:00:2c:aa:fe:cb:ab:73:6c:e8:8d:72:bf:17:
a0:26:40:ea:d3:6f:c7:b2:ed:1b:97:ff:d3:fe:c1:bd:da:7d:
91:2a:d8:75:cb:ad:13:e5:04:56:6d:11:86:44:e5:90:60:ff:
50:de:5c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:57 2026 by rpki-client