Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/FX4K8uvL18Ya_j-jtZW2so9Gc9c.roa
File: FX4K8uvL18Ya_j-jtZW2so9Gc9c.roa (raw, json)
Hash identifier: 4q5Zv7mkQbbSlNQl2wVZY06OF2suCswfRbO5hgu61w4=
Subject key identifier: 15:7E:0A:F2:EB:CB:D7:C6:1A:FE:3F:A3:B5:95:B6:B2:8F:46:73:D7
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019C8FBE6E08B7A5A1316EBCC6F07F3A2B91
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/FX4K8uvL18Ya_j-jtZW2so9Gc9c.roa
Signing time: Tue 24 Feb 2026 13:02:27 +0000
ROA not before: Tue 24 Feb 2026 13:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 213.110.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:be:6e:08:b7:a5:a1:31:6e:bc:c6:f0:7f:3a:2b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Feb 24 13:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=157e0af2ebcbd7c61afe3fa3b595b6b28f4673d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:b9:42:b2:ad:86:85:ca:3c:24:1d:76:6a:
0d:27:c2:af:ed:b4:82:cd:a5:95:b1:79:ff:de:5a:
c2:95:94:b3:05:d5:ef:a0:23:63:27:88:29:7e:c9:
91:06:e0:96:f8:d0:dc:3b:04:75:b2:c2:f4:b0:96:
3c:76:3c:09:b8:23:aa:ce:63:80:c1:f1:90:d3:a5:
4f:e9:bd:c9:af:ca:da:73:c8:84:76:c9:27:dc:c9:
1d:ba:d0:ee:0b:75:65:7d:6b:d9:01:10:58:63:83:
ff:d1:cb:b3:6e:84:22:1b:bc:2b:4d:76:95:22:a9:
ec:67:ba:80:ef:45:70:86:7a:a0:b7:da:70:04:19:
bb:ae:2b:1f:f6:58:14:32:32:4e:d5:f6:91:fe:31:
f8:0d:5d:3d:9c:48:db:a3:23:c2:03:5d:e8:51:65:
f2:72:91:7e:b0:4e:62:d4:54:2d:bf:1c:38:29:49:
2c:cf:59:fd:31:4d:13:04:7d:6e:fd:3d:73:27:f2:
e0:1e:62:fc:29:b5:f0:30:1f:5d:c4:fd:38:e0:cc:
28:0f:55:b4:c1:02:8c:e5:20:e3:d8:71:90:20:4b:
1f:16:fd:63:d2:8a:b5:25:a9:cc:81:87:42:b7:36:
8f:08:73:42:65:7d:04:84:97:c5:03:ef:1f:15:36:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7E:0A:F2:EB:CB:D7:C6:1A:FE:3F:A3:B5:95:B6:B2:8F:46:73:D7
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/FX4K8uvL18Ya_j-jtZW2so9Gc9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.110.68.0/22
Signature Algorithm: sha256WithRSAEncryption
56:33:41:82:0a:68:ef:96:3d:51:a7:4c:52:7c:54:f7:e0:89:
c2:4b:d3:87:9e:6c:0d:7b:9e:a4:bd:31:d0:96:a9:21:0f:04:
de:6b:80:ea:a3:0a:ea:1b:1c:7c:36:da:d2:6d:56:dc:b4:cc:
34:3a:47:64:84:4f:9b:eb:74:b3:2b:c4:2a:97:93:26:61:69:
94:d6:e2:cc:44:38:ad:54:76:26:1e:69:cb:91:4b:de:ec:1f:
91:f7:16:91:d2:05:90:f5:aa:e1:ba:05:a6:de:16:f6:97:2a:
be:bf:ef:f6:72:69:ac:2d:bf:0b:55:01:d0:b9:ed:8b:02:92:
d9:ea:da:62:48:4c:a9:79:87:65:78:cd:20:9d:ab:8a:d4:82:
39:48:09:15:21:88:ab:89:22:20:67:49:a2:db:76:c6:f2:73:
96:52:4d:ac:38:9c:d7:43:e9:2f:81:91:a3:bb:cb:ff:5c:99:
ba:e0:55:d6:a2:1b:79:5a:a9:12:39:ed:b9:4d:21:ae:34:1c:
91:21:87:b4:94:ba:8a:54:c8:69:88:9a:5b:1f:b4:d4:f6:5c:
29:f6:29:46:0f:e4:87:ba:2b:c5:db:51:dc:f9:a4:2c:66:3b:
63:09:25:84:3c:d9:c9:01:d0:6b:9d:d0:2e:6f:19:ee:0c:3f:
15:4c:44:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:59 2026 by rpki-client