Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/FZLaWkBIwrGy7b5sa2FUu7tUsLU.roa
File: FZLaWkBIwrGy7b5sa2FUu7tUsLU.roa (raw, json)
Hash identifier: uP0qS88Ow0YKTdHouAaFIOYyarCdKdajGODyt4I4d0U=
Subject key identifier: 15:92:DA:5A:40:48:C2:B1:B2:ED:BE:6C:6B:61:54:BB:BB:54:B0:B5
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019D91942CDD0C5E28223FFB7EB6038AA15E
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/FZLaWkBIwrGy7b5sa2FUu7tUsLU.roa
Signing time: Wed 15 Apr 2026 14:38:20 +0000
ROA not before: Wed 15 Apr 2026 14:38:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58136
IP address blocks: 170.168.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:94:2c:dd:0c:5e:28:22:3f:fb:7e:b6:03:8a:a1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Apr 15 14:38:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1592da5a4048c2b1b2edbe6c6b6154bbbb54b0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:cb:16:ba:da:46:ee:f5:ee:08:34:cf:58:
3e:86:fc:22:a3:09:ff:6c:3b:9f:e9:fb:15:1d:f8:
dc:29:37:5e:b2:c9:47:f4:91:1d:0d:63:fc:77:6d:
59:40:41:5a:96:e0:61:e2:31:82:9f:02:ef:96:65:
3a:bd:4a:fe:83:f1:b0:22:03:e4:90:bf:a2:b1:a6:
96:f7:e0:3c:7d:94:b1:05:e9:29:db:1e:cc:29:45:
51:1f:69:9e:8c:52:67:71:e5:4b:28:9e:42:f1:d4:
20:7a:fe:ce:23:c6:5c:c5:eb:62:87:be:1f:0d:25:
cf:7e:18:69:a3:86:bd:b7:54:69:93:35:24:2b:13:
62:39:c0:f7:0e:36:27:91:78:07:41:91:cb:7b:ff:
18:b1:e1:3b:ce:55:fb:4f:3f:b3:cf:1f:02:82:07:
95:c2:b0:7a:29:71:93:5c:66:5d:92:8b:31:0e:52:
c4:32:d8:90:12:6d:2d:72:23:d3:e5:b7:64:62:f0:
cb:8a:34:b5:42:c8:7b:49:d7:cc:db:d1:90:a6:34:
89:19:c6:c0:fa:31:bd:2e:fa:d4:3d:58:aa:8d:17:
8d:09:71:d9:a5:f1:ca:76:f3:e0:d0:fb:8a:6c:0e:
9b:d6:e7:c4:d8:6f:5b:ae:92:33:0c:41:e7:22:5d:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:92:DA:5A:40:48:C2:B1:B2:ED:BE:6C:6B:61:54:BB:BB:54:B0:B5
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/FZLaWkBIwrGy7b5sa2FUu7tUsLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b2:03:1f:d0:39:0d:be:f9:1d:d6:07:eb:d6:a6:44:d7:5a:
71:d0:2a:15:61:bd:68:33:5c:44:6d:26:7f:02:de:20:3c:11:
41:69:b3:9d:cf:9f:7a:e7:28:0e:c3:c8:87:08:ec:05:92:87:
fe:ed:88:73:d7:aa:45:ec:7e:39:7c:e3:64:ac:d7:4c:3d:6c:
c4:5d:ec:dc:ed:ef:ef:b0:e7:99:82:0b:b1:3d:e4:5b:c1:f8:
96:b5:47:29:1a:f8:8b:f0:fb:dd:3b:3a:83:68:57:1b:de:c8:
01:0a:40:d9:c6:73:f4:60:7c:b4:b7:5d:5a:b7:1c:29:f9:e6:
e6:b3:e8:7f:43:b6:4d:44:ad:29:bf:43:62:86:1b:fc:7f:02:
af:23:e6:8b:21:d8:4d:aa:c5:bb:f3:9f:c9:2f:a0:e9:ee:51:
49:62:f3:bb:1e:55:39:e4:12:a4:f0:89:02:4c:a5:2c:5b:19:
d4:fa:45:78:7c:e3:90:64:4f:b7:a9:0a:b9:70:ce:07:14:ce:
be:f2:d4:8c:ed:e5:b4:bf:e8:ad:b3:ec:78:93:be:00:32:5f:
59:64:55:df:45:04:cf:70:c6:58:46:c1:6e:da:b1:eb:09:0a:
7e:8e:ae:7c:e7:01:2e:a3:b2:26:9e:8a:30:e8:a7:57:11:39:
58:68:c0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:47 2026 by rpki-client