Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/aMmAT04Fng3KRcATi2yyAEaYSwQ.roa
File: aMmAT04Fng3KRcATi2yyAEaYSwQ.roa (raw, json)
Hash identifier: lAvJ/GiNFtquJnb2YbKyar0uxyjC9nvwVgo4miLsClo=
Subject key identifier: 68:C9:80:4F:4E:05:9E:0D:CA:45:C0:13:8B:6C:B2:00:46:98:4B:04
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01A0340904A09C05C89C341B8A17316EA692
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/aMmAT04Fng3KRcATi2yyAEaYSwQ.roa
Signing time: Mon 24 Aug 2026 13:50:01 +0000
ROA not before: Mon 24 Aug 2026 13:50:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12993
IP address blocks: 193.200.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:09:04:a0:9c:05:c8:9c:34:1b:8a:17:31:6e:a6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Aug 24 13:50:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68c9804f4e059e0dca45c0138b6cb20046984b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:02:b3:2c:22:ee:66:d9:4a:78:16:f8:2c:
c5:1b:00:59:b6:f1:3a:39:94:5d:4d:38:9d:54:6f:
e4:46:06:6e:36:87:c3:5e:94:62:32:ff:15:7a:38:
ea:80:07:2d:a5:fd:fc:44:9c:b1:af:77:fd:7c:9c:
86:70:93:99:f3:03:3f:6f:8a:c3:e3:fb:b6:12:3c:
93:28:2c:94:44:bf:4d:41:12:95:7d:54:de:a4:2a:
81:38:f3:3c:3a:c7:c1:74:4a:fb:66:46:c9:4e:c9:
ee:48:4a:26:26:de:75:61:90:78:d8:db:ab:77:8c:
f5:e2:3d:02:82:d9:74:fb:74:1f:da:05:da:38:ac:
f4:53:a0:32:38:b3:bc:5e:5d:03:2c:de:13:2d:db:
64:6a:2b:f1:b6:bb:9a:72:1e:11:10:ba:67:e4:76:
38:13:00:ec:d2:4e:60:65:b3:f2:f2:3b:de:d3:37:
d7:f3:7d:13:34:ec:fa:ae:9b:d4:76:3b:f0:f2:57:
c5:08:09:1d:57:e2:be:68:10:1e:2c:8d:36:ee:8f:
de:5a:7c:b7:5e:07:0c:19:73:1f:b1:36:1a:93:ba:
b4:c6:a7:95:59:2d:7e:0c:47:66:2b:be:76:6d:82:
8f:6f:9f:bd:f1:00:01:a4:21:48:c8:30:77:48:fd:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C9:80:4F:4E:05:9E:0D:CA:45:C0:13:8B:6C:B2:00:46:98:4B:04
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/aMmAT04Fng3KRcATi2yyAEaYSwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.96.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:40:ee:da:ae:9e:68:fa:0b:e4:0f:26:48:df:e7:e9:bd:da:
28:65:2e:3c:5d:78:6b:8f:00:c2:d6:70:c6:7c:ba:9f:01:00:
24:30:19:1d:82:9b:ea:56:9b:94:c2:f9:fc:29:c2:8d:05:38:
13:42:b3:01:17:9d:62:e3:df:5a:ba:9a:c9:3c:d5:a1:7f:c0:
2f:84:43:87:80:32:b0:f1:d8:02:4c:6d:1c:77:46:15:5a:ea:
91:b9:93:ca:bd:88:6f:53:f3:8e:96:78:11:68:e6:e9:d8:72:
7e:ab:60:2b:7c:67:47:f2:f4:25:42:73:17:f2:24:e7:82:01:
a0:03:17:97:60:61:46:d8:14:40:3d:4b:e7:9c:46:52:7d:d3:
2b:0f:08:92:3f:cd:df:3f:16:df:60:65:c2:22:a5:4e:ab:d2:
01:1c:76:49:be:80:6f:76:d9:c6:81:10:6b:30:59:8a:87:c7:
3e:86:ab:0b:4f:35:8a:27:9a:c4:a1:d0:f8:38:00:63:a8:56:
3e:ff:14:8f:75:fd:04:d5:64:61:f8:fb:64:db:fb:2b:38:06:
f7:5d:8f:8d:bd:b7:3d:3c:b7:c3:8f:1b:a1:ac:39:50:e4:f4:
c0:65:ef:41:4d:ab:2b:d4:7d:64:6b:70:28:13:cc:02:58:26:
8a:81:2e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:43:17 2026 by rpki-client