Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/fmnXU1ZT1DqNXwoSOanY86uzCIA.roa
File: fmnXU1ZT1DqNXwoSOanY86uzCIA.roa (raw, json)
Hash identifier: RflUwTkn2QA2q+soKQDq49YgEy9A5mpRjRTlf0s/d34=
Subject key identifier: 7E:69:D7:53:56:53:D4:3A:8D:5F:0A:12:39:A9:D8:F3:AB:B3:08:80
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01A1158B81810B9D63C984998AC22ABB49AD
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/fmnXU1ZT1DqNXwoSOanY86uzCIA.roa
Signing time: Wed 07 Oct 2026 08:47:06 +0000
ROA not before: Wed 07 Oct 2026 08:47:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16735
IP address blocks: 80.46.130.0/23 maxlen: 24
80.46.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:8b:81:81:0b:9d:63:c9:84:99:8a:c2:2a:bb:49:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Oct 7 08:47:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e69d7535653d43a8d5f0a1239a9d8f3abb30880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:e2:7e:b2:c6:37:42:d5:71:83:a5:66:02:
82:c2:2f:fc:9e:2b:06:5e:1d:12:a4:fd:f6:bf:2c:
f8:a2:db:b8:48:2f:84:7b:ea:6a:e6:7d:9d:5e:a4:
20:8f:41:95:d2:23:21:62:ee:bb:b2:eb:12:07:f7:
aa:50:06:6e:c4:71:3d:5b:d0:5c:17:58:9a:2d:aa:
96:83:31:ec:fc:8c:b2:0f:ff:b9:55:fd:42:4c:e5:
1e:05:bd:d5:8d:b7:c0:a8:d4:9f:09:c9:91:19:ab:
20:98:db:66:f3:26:dc:f9:78:05:dc:0a:e0:89:67:
92:29:0b:4d:cf:1a:1a:04:64:5a:dd:3a:e8:5a:99:
d9:14:2e:60:ae:b2:dd:7d:9e:12:ac:3b:fb:ba:67:
43:30:1b:c6:6e:68:09:fb:fa:0d:20:db:4c:da:be:
23:c5:0a:19:c2:32:c9:33:b3:d6:46:5e:4f:b8:f6:
55:d2:d3:bd:05:5a:91:db:6d:c1:20:27:1f:bd:92:
e4:31:cf:b8:7b:fe:46:7d:61:5a:22:a0:9a:f5:1e:
7b:dc:ac:5f:97:53:34:e4:ef:97:a5:0a:18:fb:5e:
96:c3:96:b7:45:37:1f:d6:71:b9:01:84:b8:e1:8d:
9c:0b:51:39:05:5e:e4:7d:64:2a:a9:15:87:2b:69:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:69:D7:53:56:53:D4:3A:8D:5F:0A:12:39:A9:D8:F3:AB:B3:08:80
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/fmnXU1ZT1DqNXwoSOanY86uzCIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.46.130.0-80.46.135.255
Signature Algorithm: sha256WithRSAEncryption
69:1f:2e:ce:08:0b:74:3c:21:b9:9c:51:f0:65:30:cd:50:0c:
cc:f0:92:ff:9e:9d:a8:9c:f5:bf:44:e1:f6:92:53:9e:54:53:
f5:5e:15:05:0a:3a:9f:4f:66:c3:54:76:25:0d:cf:59:3f:da:
bf:cb:3d:d6:71:87:67:7f:bd:a7:6b:96:52:28:c7:ae:aa:93:
13:56:21:9c:8a:c9:b1:2c:e3:cd:aa:fc:90:1f:9a:24:5a:40:
32:bd:74:cd:7a:7e:bc:0e:1e:b0:4e:ce:5d:4f:3b:03:30:ff:
80:99:c3:2c:92:32:f4:d8:65:f7:6e:a0:4c:5d:92:48:99:2f:
ea:89:b8:98:59:47:ca:34:35:b8:10:93:35:37:90:64:e0:e8:
80:e2:cb:4a:96:df:e0:24:7d:15:92:5f:74:d2:9d:39:46:b4:
1c:bb:80:fa:c3:cc:b7:aa:e8:2e:91:ae:90:1d:cf:89:cb:47:
b7:5f:5e:31:91:4c:7f:00:50:64:48:e8:36:32:cc:e8:6e:e2:
58:e9:6b:50:20:10:45:f8:35:91:43:a4:cb:63:ac:92:1d:89:
07:5c:17:e4:57:4e:2a:4e:d3:67:82:e4:68:b1:00:7f:8d:73:
5d:4c:4a:5b:19:26:72:78:79:75:ce:a3:a6:c6:9d:b1:ff:de:
6f:67:83:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:43:56 2026 by rpki-client