Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/_frEaY1XPz_zgvnWp1kKnyd22cQ.roa
File: _frEaY1XPz_zgvnWp1kKnyd22cQ.roa (raw, json)
Hash identifier: okh9WBzugciORKvFkzhGVKctYUsJYdr64nkB3piPl54=
Subject key identifier: FD:FA:C4:69:8D:57:3F:3F:F3:82:F9:D6:A7:59:0A:9F:27:76:D9:C4
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019CA9122E08254DA68F3DE7A7255EF5FA73
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/_frEaY1XPz_zgvnWp1kKnyd22cQ.roa
Signing time: Sun 01 Mar 2026 11:04:26 +0000
ROA not before: Sun 01 Mar 2026 11:04:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215305
IP address blocks: 103.200.29.0/24 maxlen: 24
195.78.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:12:2e:08:25:4d:a6:8f:3d:e7:a7:25:5e:f5:fa:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Mar 1 11:04:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdfac4698d573f3ff382f9d6a7590a9f2776d9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:46:a4:8c:98:73:c6:bd:89:6d:17:fe:92:
b4:dd:74:64:b7:91:91:a7:93:f1:99:1d:15:99:31:
91:6e:fc:35:ea:20:65:a2:07:9b:21:e4:97:b5:57:
c8:74:03:71:d2:20:6a:18:d0:0c:15:94:1b:63:58:
5e:55:2e:da:af:00:79:40:cb:10:9b:75:f5:8b:31:
e4:6d:48:19:6b:7c:9e:67:8f:93:30:88:e2:e5:c3:
3a:ff:b3:e8:25:f2:56:02:92:3a:ae:29:b4:60:4a:
9e:27:9f:42:d9:69:d7:b5:fa:66:2a:8d:cf:58:b7:
8b:b9:a2:10:f2:fc:4f:1f:71:05:2c:73:2c:a8:c2:
a3:24:57:b7:63:b5:c6:5a:2c:e7:8f:65:d2:cf:33:
67:b6:c3:55:c7:ed:b7:4e:a5:13:1b:e5:91:ce:bd:
fb:54:8a:81:eb:ab:2a:ee:88:46:b1:de:51:0f:70:
1e:85:db:44:fb:06:33:cd:b5:10:30:a5:25:09:19:
7b:be:1b:a0:b2:a6:e3:6c:0b:7a:e9:b7:e7:fc:77:
b2:16:19:34:d5:34:1b:f9:4d:1a:5c:b7:2b:2a:e7:
de:ea:41:00:5f:60:56:ee:1e:8f:87:0b:78:46:5e:
da:f5:10:a0:07:89:f0:a1:a2:05:2e:65:32:e9:4c:
99:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FA:C4:69:8D:57:3F:3F:F3:82:F9:D6:A7:59:0A:9F:27:76:D9:C4
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/_frEaY1XPz_zgvnWp1kKnyd22cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.200.29.0/24
195.78.49.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:1b:6e:31:88:16:81:20:8f:f9:e7:e1:ba:ba:20:e8:1e:60:
5f:85:2f:b5:f1:6b:0e:1a:24:51:45:fc:f9:80:3a:90:bf:fa:
87:19:c2:f3:10:bb:e2:2a:41:df:dd:19:e1:e4:4a:e5:53:62:
51:ef:88:a5:71:4c:99:93:04:7b:67:62:53:bf:9d:ae:3a:ff:
4b:42:bf:a6:63:fc:24:05:48:60:a6:b7:26:b5:cb:b6:65:67:
86:d5:d4:1b:46:c3:c2:eb:64:b1:85:1c:71:9a:16:ae:b6:00:
c9:88:bf:a6:90:ea:10:e0:36:92:e8:63:4f:a9:4f:d7:c1:09:
88:ca:fc:1f:f7:9f:4e:86:82:84:e9:b6:5d:52:fd:c9:d4:e6:
27:12:60:66:55:97:11:9d:ec:03:8f:b3:1e:62:b4:78:71:b3:
c5:03:51:3a:ee:cb:55:ae:f8:cd:b0:e4:20:2b:86:fe:d0:dd:
1f:6c:32:81:9b:41:05:d6:d5:e9:0d:5d:3c:06:5a:21:d4:04:
4e:90:4f:49:b1:a5:c7:17:03:99:13:2d:a6:87:e5:72:ff:ef:
56:cd:e9:8a:6a:b1:97:41:0d:9a:a2:3b:3f:86:79:09:2a:30:
7d:5b:62:ec:5b:fe:ce:9c:88:c2:f6:78:48:02:35:4c:33:24:
89:5f:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:09:48 2026 by rpki-client