Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/FitX3sWQ_iHXagZBIm2G09JUo5s.roa
File: FitX3sWQ_iHXagZBIm2G09JUo5s.roa (raw, json)
Hash identifier: KV5mxaj5PQdSSjX+1QS/5L4FU+fN0JBB9CsJ5gF5o/o=
Subject key identifier: 16:2B:57:DE:C5:90:FE:21:D7:6A:06:41:22:6D:86:D3:D2:54:A3:9B
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 019D6DBBD7B637AE70D4C8785089A392D2D3
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/FitX3sWQ_iHXagZBIm2G09JUo5s.roa
Signing time: Wed 08 Apr 2026 15:35:20 +0000
ROA not before: Wed 08 Apr 2026 15:35:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31595
IP address blocks: 2001:4be8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:bb:d7:b6:37:ae:70:d4:c8:78:50:89:a3:92:d2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Apr 8 15:35:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=162b57dec590fe21d76a0641226d86d3d254a39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:09:57:81:81:ba:52:8d:1f:30:02:75:b2:
f7:56:af:a1:f1:b0:fe:a1:94:34:a3:56:9d:50:3b:
16:29:40:d2:c9:ca:cb:46:fc:9c:e3:35:70:92:d3:
38:86:1a:6b:14:10:5d:df:77:78:88:3a:47:52:e1:
08:ca:a1:d0:cd:e8:f8:b5:8a:4d:e6:80:24:06:f8:
2f:6e:57:37:e6:13:ab:78:0f:0e:34:03:c4:82:92:
97:88:a6:54:7d:70:a6:60:38:61:90:20:0d:1e:3f:
56:9b:7b:6c:8c:5e:9e:b6:28:cf:57:e3:99:a8:03:
50:d3:cd:c2:fb:41:61:fd:81:b0:95:ba:1c:d9:d5:
b5:cc:25:53:32:4d:da:65:b9:7f:25:31:87:e4:c3:
79:37:4c:3d:b5:46:77:46:83:52:f8:45:f5:7b:6c:
8f:51:11:d2:0f:1c:2b:2a:cf:62:ed:dc:c8:3f:07:
19:4c:a7:b4:57:98:c8:79:71:fe:07:95:e2:31:a2:
20:0c:09:1d:e6:7b:d8:9a:c8:d4:19:d8:39:7e:df:
b8:f9:b6:01:d8:74:4a:3f:85:b7:c3:8e:81:55:80:
14:bd:e2:72:b6:61:6a:99:71:03:cd:dc:a6:3d:ad:
a2:58:be:ac:d9:28:cc:b2:06:f7:a3:57:ef:7a:48:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2B:57:DE:C5:90:FE:21:D7:6A:06:41:22:6D:86:D3:D2:54:A3:9B
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/FitX3sWQ_iHXagZBIm2G09JUo5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4be8::/32
Signature Algorithm: sha256WithRSAEncryption
1d:7d:1a:36:b8:54:0d:18:0a:80:e4:18:7b:b1:b0:c3:49:65:
2d:17:5c:2f:37:66:48:9b:f2:2d:31:b7:52:71:33:9d:c2:8a:
fd:30:67:0a:a3:fe:96:2a:4f:27:96:a3:e6:c2:ef:af:06:18:
bf:9c:30:ae:e0:51:f8:f9:8f:4c:c4:d2:23:b3:6c:3f:eb:26:
85:aa:52:a2:34:f2:27:a0:31:b2:d2:6c:b4:d7:d8:67:c6:63:
4b:e7:b9:75:f4:e5:1f:91:9a:43:25:c1:05:c2:1a:d2:23:39:
5d:ad:45:d7:d1:73:53:1d:ab:75:7f:44:34:28:3c:8d:bd:f0:
df:de:89:9b:7d:0b:df:8b:c5:4a:aa:ce:cc:0d:e5:7a:b3:20:
7d:4b:a8:2c:66:c7:a4:2d:17:e0:5b:0d:5c:4b:bb:a0:d9:13:
d8:df:69:37:45:ac:8f:ff:40:bb:22:98:3e:a4:f7:eb:f5:ad:
3b:6f:07:1d:90:19:73:48:50:ff:e9:38:87:bc:c6:bc:ab:c0:
eb:03:9d:d0:0f:c1:c9:b4:a3:bf:0a:a6:4a:71:08:23:4a:4d:
14:72:50:11:53:b0:a1:46:8c:d6:a7:69:72:59:76:69:51:ba:
8d:4d:da:9b:d5:af:e2:69:8a:ea:3a:f7:65:c7:36:06:be:d5:
8f:92:ad:65
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ1tu9e2N65w1Mh4UImjktLTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZTZmNzdjYmRhMTAxOTg3ZDlkZmM4NGJlOTBiNmZiYTY2
YWRjOWYwHhcNMjYwNDA4MTUzNTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjJiNTdkZWM1OTBmZTIxZDc2YTA2NDEyMjZkODZkM2QyNTRhMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDIJV4GBulKNHzACdbL3Vq+h8bD+
oZQ0o1adUDsWKUDSycrLRvyc4zVwktM4hhprFBBd33d4iDpHUuEIyqHQzej4tYpN
5oAkBvgvblc35hOreA8ONAPEgpKXiKZUfXCmYDhhkCANHj9Wm3tsjF6etijPV+OZ
qANQ083C+0Fh/YGwlboc2dW1zCVTMk3aZbl/JTGH5MN5N0w9tUZ3RoNS+EX1e2yP
URHSDxwrKs9i7dzIPwcZTKe0V5jIeXH+B5XiMaIgDAkd5nvYmsjUGdg5ft+4+bYB
2HRKP4W3w46BVYAUveJytmFqmXEDzdymPa2iWL6s2SjMsgb3o1fveki4PQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBYrV97FkP4h12oGQSJthtPSVKObMB8GA1UdIwQY
MBaAFJbm93y9oQGYfZ38hL6QtvumatyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDkt
MzIwOGRlMzljMDlkLzEvRml0WDNzV1FfaUhYYWdaQkltMkcwOUpVbzVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDktMzIwOGRlMzljMDlk
LzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFL6DAN
BgkqhkiG9w0BAQsFAAOCAQEAHX0aNrhUDRgKgOQYe7Gww0llLRdcLzdmSJvyLTG3
UnEzncKK/TBnCqP+lipPJ5aj5sLvrwYYv5wwruBR+PmPTMTSI7NsP+smhapSojTy
J6AxstJstNfYZ8ZjS+e5dfTlH5GaQyXBBcIa0iM5Xa1F19FzUx2rdX9ENCg8jb3w
396Jm30L34vFSqrOzA3lerMgfUuoLGbHpC0X4FsNXEu7oNkT2N9pN0Wsj/9AuyKY
PqT36/WtO28HHZAZc0hQ/+k4h7zGvKvA6wOd0A/BybSjvwqmSnEII0pNFHJQEVOw
oUaM1qdpcll2aVG6jU3am9Wv4mmK6jr3Zcc2Br7Vj5KtZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:42 2026 by rpki-client