Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fCIIjCzR14do1xCeHcVIxLStLbU.roa
File: fCIIjCzR14do1xCeHcVIxLStLbU.roa (raw, json)
Hash identifier: HCdC0u8y/wrHMyAuBedtz6USGypEvfS1r4TQ/Hwg6Ck=
Subject key identifier: 7C:22:08:8C:2C:D1:D7:87:68:D7:10:9E:1D:C5:48:C4:B4:AD:2D:B5
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019D6148FB1114F063D526609BDAD20E0415
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fCIIjCzR14do1xCeHcVIxLStLbU.roa
Signing time: Mon 06 Apr 2026 05:34:25 +0000
ROA not before: Mon 06 Apr 2026 05:34:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60542
IP address blocks: 193.107.217.0/24 maxlen: 24
202.71.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:61:48:fb:11:14:f0:63:d5:26:60:9b:da:d2:0e:04:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 6 05:34:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c22088c2cd1d78768d7109e1dc548c4b4ad2db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:bf:da:3a:88:2c:cc:ff:ff:ac:0f:32:28:
3a:33:e3:78:a3:bc:4b:f8:72:d0:d6:f4:ad:02:bf:
e2:06:6b:80:e7:da:df:11:7c:1e:5e:fe:d5:d5:86:
f7:a0:ea:c0:39:6f:59:22:4b:14:a5:05:50:34:3a:
e1:7a:b9:52:1d:14:b4:d9:54:41:c5:05:6b:d4:bb:
56:b7:bb:0a:58:ea:8c:48:48:37:63:12:43:0d:30:
34:97:0a:d7:d3:e1:15:e7:07:0a:90:e1:59:42:df:
53:28:25:fb:99:7d:02:2b:ee:f7:57:91:2d:c7:53:
b1:1f:cf:1c:7f:87:fc:17:c0:78:93:8b:93:ec:93:
c2:7e:04:ea:61:2d:78:03:44:37:fe:72:1c:0f:03:
2a:ca:04:a6:f8:f9:4c:db:01:99:8c:6d:17:ea:3e:
e7:c9:8e:b5:40:41:73:50:70:28:a0:62:4f:13:2a:
a5:90:20:03:dc:5b:91:86:3e:44:ba:12:6c:90:d7:
5d:1e:28:be:59:fb:a5:cb:41:94:f8:3d:ed:ec:b0:
3a:b2:fe:0e:5c:e8:0a:a4:b0:df:96:1c:b7:96:ff:
2b:eb:64:f9:c3:0a:72:bf:4b:17:a0:3d:83:15:7e:
39:7d:8c:ab:60:e1:a9:0e:b9:33:02:11:df:07:5e:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:22:08:8C:2C:D1:D7:87:68:D7:10:9E:1D:C5:48:C4:B4:AD:2D:B5
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fCIIjCzR14do1xCeHcVIxLStLbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.217.0/24
202.71.8.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a2:5a:3b:6b:8d:89:a6:a6:49:6a:dc:ab:c2:6b:86:28:8d:
35:aa:c0:96:23:a6:b6:11:d3:9e:87:5c:e1:41:b9:00:9d:8f:
39:67:bc:1b:b7:ab:f0:12:39:74:c5:34:04:47:95:2d:9b:18:
38:fe:5b:f4:c2:57:4a:5f:71:8e:16:b2:7f:b7:4f:7d:46:ff:
9e:41:4e:2e:02:93:66:41:9b:cb:7f:a1:bc:c1:37:1f:ed:ac:
8e:ac:93:48:d4:4c:a7:e4:fa:f7:39:6e:9d:68:5e:b9:fa:09:
dc:42:bc:cf:30:72:e4:31:27:2b:0a:87:6b:d2:69:a8:6d:f5:
22:ec:a4:e9:ee:b4:f3:c3:41:01:0b:b0:4b:e5:cc:41:10:16:
8e:4f:d8:88:ef:fd:53:6c:13:65:80:bb:eb:fc:ea:49:44:90:
07:ad:7e:0f:bd:12:cc:19:12:84:c0:d0:65:03:a4:d0:79:b4:
74:d2:c3:3f:a6:35:94:88:c1:cf:58:02:aa:3b:a6:6d:26:65:
49:1d:8c:ad:31:7e:2d:71:e6:9c:10:8e:b7:ee:aa:10:07:bb:
5f:19:f2:a3:b0:a2:5e:c4:b4:97:36:b0:ab:cf:17:70:55:0f:
4c:64:7c:47:20:56:b0:49:bd:dc:ae:9f:cc:57:a1:e2:25:7d:
91:a2:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:19:33 2026 by rpki-client