Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/FB0355xC0x-fyTm8XDohUkPX6TI.roa
File: FB0355xC0x-fyTm8XDohUkPX6TI.roa (raw, json)
Hash identifier: 3BxC0WLa9h3Dul03YM/CUMV1dhCZYZUazgki33dELyM=
Subject key identifier: 14:1D:37:E7:9C:42:D3:1F:9F:C9:39:BC:5C:3A:21:52:43:D7:E9:32
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 01A0BBEB7C010CB9986A31BDDBB6BAE7C955
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/FB0355xC0x-fyTm8XDohUkPX6TI.roa
Signing time: Sat 19 Sep 2026 23:06:07 +0000
ROA not before: Sat 19 Sep 2026 23:06:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219369
IP address blocks: 195.10.233.0/24 maxlen: 24
2a0b:9402::/48 maxlen: 48
2a0b:9405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:eb:7c:01:0c:b9:98:6a:31:bd:db:b6:ba:e7:c9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Sep 19 23:06:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=141d37e79c42d31f9fc939bc5c3a215243d7e932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:92:c0:d4:30:fc:0b:9b:7b:ee:a5:e1:73:
9f:76:b3:6b:f1:73:f6:c8:38:2e:d3:b0:be:a7:42:
a3:ac:a7:eb:3e:5d:61:82:ec:c0:9a:d1:b8:18:4c:
0f:fe:7b:d5:43:49:b3:8f:8d:d5:a9:df:1e:52:fb:
7f:97:62:96:06:de:90:22:df:35:24:13:77:f3:0f:
7a:4d:a6:05:86:aa:0c:7c:d0:3e:87:b7:2c:54:ff:
b2:d7:39:75:ce:2c:24:32:e8:e9:78:1f:a9:5d:1c:
b7:ba:88:03:3b:96:ae:95:9e:30:59:81:b6:90:08:
37:c1:4e:56:94:ba:14:77:36:78:8d:c2:9e:79:6f:
76:7d:9e:31:9d:7c:b8:43:ee:8c:7f:d9:84:bb:1e:
b0:bf:a7:8c:8a:c9:35:15:a8:90:93:c0:7f:6c:97:
75:66:d1:92:aa:c9:8a:b4:6e:af:68:24:8e:33:93:
e0:ba:31:41:b8:b5:0b:16:fb:20:56:36:71:7f:91:
0b:47:3b:76:43:a3:9e:9f:72:14:87:4a:c7:2b:1f:
40:ed:16:8c:94:ba:1b:89:92:78:05:86:e0:46:cb:
90:d8:f3:6f:65:95:cc:cf:24:c1:dd:d7:6d:b1:61:
aa:32:23:18:21:bf:57:10:26:be:fd:ae:97:f1:7a:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1D:37:E7:9C:42:D3:1F:9F:C9:39:BC:5C:3A:21:52:43:D7:E9:32
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/FB0355xC0x-fyTm8XDohUkPX6TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.233.0/24
IPv6:
2a0b:9402::/48
2a0b:9405::/32
Signature Algorithm: sha256WithRSAEncryption
6d:26:d9:6d:10:cb:04:55:e7:4a:ac:d1:5c:a8:d9:cb:c0:f3:
95:b6:f9:a4:48:3e:dc:33:9f:83:0e:2c:4d:65:9a:24:b3:1a:
06:dd:62:27:10:ba:2c:f5:76:11:8a:ad:bc:15:d9:6f:74:4e:
67:22:90:76:6d:a3:68:3f:fc:e4:e6:a8:60:47:a8:36:0c:0b:
53:3d:dd:21:43:97:43:94:f5:b4:cc:ff:83:e9:f6:49:0d:6c:
11:8d:3a:0f:6e:89:b8:04:a5:39:c3:d2:55:a0:31:93:16:60:
b0:23:5a:65:7d:4a:0a:fc:a0:6d:f0:a2:68:c1:d8:db:a8:f9:
e7:71:74:25:ef:23:f7:81:c2:1e:d1:5b:53:7f:5d:b6:73:ad:
2d:5a:3c:f0:d1:16:ee:00:a7:d1:91:dc:6c:71:7a:cf:30:9d:
4e:a4:f6:67:5a:3c:f3:34:1b:5e:47:5e:90:d6:dc:5c:e5:d4:
3a:38:2a:4d:19:e4:19:1c:ec:43:82:ab:da:e4:0e:b7:13:2b:
66:d6:38:4e:c2:e9:4f:22:6d:5f:e6:e4:4e:d6:6d:55:9e:5a:
36:96:6d:51:ca:f5:01:92:42:46:8e:4b:57:83:38:fe:e4:49:
f1:aa:88:33:1a:db:cf:a2:6b:ac:a9:5e:6a:c8:e0:d0:2f:83:
85:04:d0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:01:40 2026 by rpki-client