Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/cd0a8f-9dde-47d0-b49b-782133a5a6df/1/FdpVCmybG_yT3DTnCDmEn6nYw6g.roa
File: FdpVCmybG_yT3DTnCDmEn6nYw6g.roa (raw, json)
Hash identifier: kfIoWmmZJXjoUQ5QCEf8DJ+hoqFe+j/QirFZCOX/ZbI=
Subject key identifier: 15:DA:55:0A:6C:9B:1B:FC:93:DC:34:E7:08:39:84:9F:A9:D8:C3:A8
Certificate issuer: /CN=01e163a61659950e2ed6b06e4b1b7284a0dc05ac
Certificate serial: 01A13185406FABD8876ECC756BE18036EA27
Authority key identifier: 01:E1:63:A6:16:59:95:0E:2E:D6:B0:6E:4B:1B:72:84:A0:DC:05:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AeFjphZZlQ4u1rBuSxtyhKDcBaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cd0a8f-9dde-47d0-b49b-782133a5a6df/1/FdpVCmybG_yT3DTnCDmEn6nYw6g.roa
Signing time: Mon 12 Oct 2026 19:09:38 +0000
ROA not before: Mon 12 Oct 2026 19:09:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.196.30.0/24 maxlen: 24
2a13:15c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cd0a8f-9dde-47d0-b49b-782133a5a6df/1/AeFjphZZlQ4u1rBuSxtyhKDcBaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cd0a8f-9dde-47d0-b49b-782133a5a6df/1/AeFjphZZlQ4u1rBuSxtyhKDcBaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AeFjphZZlQ4u1rBuSxtyhKDcBaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:85:40:6f:ab:d8:87:6e:cc:75:6b:e1:80:36:ea:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e163a61659950e2ed6b06e4b1b7284a0dc05ac
Validity
Not Before: Oct 12 19:09:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15da550a6c9b1bfc93dc34e70839849fa9d8c3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:25:d2:a6:78:4e:3a:3a:83:fa:6a:0c:5a:
68:99:d4:1e:42:c1:e1:fd:97:05:4f:99:e9:26:6a:
a5:f0:af:65:7a:c1:7c:33:b8:0e:01:2a:71:c7:a9:
27:75:b4:ff:ed:43:0c:10:be:6b:38:08:34:e5:97:
d0:81:d9:f6:1e:b4:4c:54:7a:8d:6c:4e:3a:23:7d:
a5:2e:97:2d:aa:c9:dc:cb:49:f4:91:69:f3:b5:12:
b9:90:19:7e:c8:c6:ed:08:29:cd:e8:ac:4b:a9:ee:
40:de:76:ee:9b:87:79:1d:4b:a5:b8:4b:88:9b:8e:
9b:4f:ee:76:4f:2b:f4:a6:f4:8f:4c:b1:b1:1c:ee:
c0:15:0e:c6:aa:7e:66:93:72:5e:67:79:26:2b:19:
af:92:4f:03:df:6a:79:14:14:50:5f:0a:db:83:28:
64:b7:67:09:61:3a:63:b5:d4:e3:21:43:97:dc:e6:
57:8d:8f:55:76:56:1a:b5:4a:a0:a7:bb:27:04:8b:
bd:c9:d5:0a:56:d5:77:19:ee:34:79:8d:91:8f:1e:
84:d2:0c:d8:89:19:29:b1:11:75:93:b8:96:20:81:
ae:e6:0f:d9:52:bb:2f:29:1a:09:69:ff:1b:e9:c1:
93:fa:28:e4:37:9c:66:45:36:a0:41:2c:69:40:b2:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DA:55:0A:6C:9B:1B:FC:93:DC:34:E7:08:39:84:9F:A9:D8:C3:A8
X509v3 Authority Key Identifier:
keyid:01:E1:63:A6:16:59:95:0E:2E:D6:B0:6E:4B:1B:72:84:A0:DC:05:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeFjphZZlQ4u1rBuSxtyhKDcBaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cd0a8f-9dde-47d0-b49b-782133a5a6df/1/FdpVCmybG_yT3DTnCDmEn6nYw6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cd0a8f-9dde-47d0-b49b-782133a5a6df/1/AeFjphZZlQ4u1rBuSxtyhKDcBaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.30.0/24
IPv6:
2a13:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
1e:01:c5:a6:67:ed:20:7f:e8:e0:ba:13:86:b0:c4:0b:39:d4:
07:a1:fa:44:b7:93:3f:63:c7:e7:9a:25:9c:d5:96:97:6c:14:
cb:6e:da:0d:91:47:df:19:6d:9d:5c:59:77:83:8e:d1:b7:3c:
9c:65:a2:a2:27:1f:22:c8:14:19:b8:8f:3f:63:f4:fb:80:ba:
b3:c2:b8:dd:f0:bc:8e:7f:b2:fe:33:be:76:16:e7:34:78:33:
2a:c5:4b:b2:9c:ab:e6:a8:ef:fb:99:31:aa:30:20:4d:42:f8:
ca:7b:82:18:39:36:76:17:73:1a:9b:13:ce:9e:b7:b3:01:cd:
4d:fb:ce:e6:67:99:22:1b:05:11:1b:c9:9c:2d:ad:b7:5c:3f:
ba:46:11:ec:b3:5d:4e:49:ce:c7:1f:d1:82:79:d0:d1:41:2a:
07:f2:e9:af:2e:1c:f3:42:56:c1:a0:ed:76:a8:fc:87:a3:74:
e3:2d:7e:4a:f9:2e:6a:8a:1f:2f:88:26:13:ad:de:27:45:8e:
22:da:f4:6b:49:f4:29:a5:82:bd:43:cb:d9:9f:c8:4c:d1:d8:
50:5e:46:ed:2a:eb:59:eb:46:ef:f2:f7:dc:46:a5:ac:bc:07:
26:1f:07:39:c1:f1:77:1c:bd:ba:f4:1b:7e:af:f2:8d:63:78:
1d:45:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:19:10 2026 by rpki-client