Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FpMFBLVm0PKtlpN9ASSjvu86BRY.roa
File: FpMFBLVm0PKtlpN9ASSjvu86BRY.roa (raw, json)
Hash identifier: WtcDAxZnuZi+FS92nyTJrjTQmTTDFsrONaVlAJy/WU4=
Subject key identifier: 16:93:05:04:B5:66:D0:F2:AD:96:93:7D:01:24:A3:BE:EF:3A:05:16
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A06B8260CF206476456BA655550BAF960F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FpMFBLVm0PKtlpN9ASSjvu86BRY.roa
Signing time: Fri 04 Sep 2026 08:21:41 +0000
ROA not before: Fri 04 Sep 2026 08:21:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213840
IP address blocks: 81.168.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:82:60:cf:20:64:76:45:6b:a6:55:55:0b:af:96:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 4 08:21:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16930504b566d0f2ad96937d0124a3beef3a0516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:75:ee:22:d1:a5:15:27:9e:fe:02:88:1c:
29:0d:82:90:47:0d:5a:8f:28:43:97:f7:fb:fe:96:
31:e8:ba:89:ee:57:30:ef:df:1b:b4:78:a9:53:f6:
71:f2:34:f1:cd:18:5e:99:d7:61:57:6f:42:1b:57:
17:ff:07:02:dc:4c:92:b9:94:83:46:52:4b:ed:31:
8d:69:0c:96:28:c2:0e:5e:e8:31:8c:70:92:7d:48:
db:cc:f9:bc:6c:78:d1:97:e9:37:c0:61:27:f1:f9:
ea:5d:a0:b1:db:65:20:da:79:06:09:48:b1:35:fd:
bc:d5:eb:5b:2f:d3:58:37:ce:72:0c:cc:e8:55:4f:
59:62:fb:7f:7e:97:2f:aa:de:5a:6e:8d:34:81:44:
d7:18:68:3a:86:43:dd:29:a2:da:6a:c7:70:58:68:
90:ed:fb:49:4a:75:04:e2:8d:fc:eb:72:0e:b8:59:
4a:d1:1f:9b:9f:2c:17:5b:a2:7d:9a:76:16:d0:21:
c6:63:e9:cc:53:fe:1f:3b:00:41:12:e5:f9:5d:a2:
d6:af:d2:0a:9f:7d:8a:8e:54:49:6d:47:65:eb:6c:
a1:7a:60:ac:90:c9:8d:7f:39:f8:e1:30:a2:44:a0:
d2:d9:4c:42:bb:fe:a3:d0:85:a2:11:eb:eb:ee:45:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:93:05:04:B5:66:D0:F2:AD:96:93:7D:01:24:A3:BE:EF:3A:05:16
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FpMFBLVm0PKtlpN9ASSjvu86BRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.122.0/24
Signature Algorithm: sha256WithRSAEncryption
09:cf:2b:8e:a4:bb:d1:6e:45:00:f2:a6:1e:48:70:ab:32:fe:
92:eb:36:6e:52:d9:fd:0b:93:79:7f:4c:af:48:4b:10:2d:b6:
34:01:85:6e:14:27:72:f1:aa:74:d8:9d:13:69:ae:ff:e6:a2:
9d:c9:ff:a4:b6:8f:b7:eb:11:b5:7d:ad:bd:45:06:26:c4:a6:
58:50:22:54:fd:17:6c:1d:27:3a:0f:44:e7:db:aa:c3:4e:4e:
55:ab:66:4e:94:77:a3:2a:f5:c4:c2:58:79:e7:46:23:fa:64:
3b:c8:34:75:7b:aa:57:bd:15:49:34:1a:85:81:83:90:fc:6f:
b1:43:74:6b:2e:a3:a8:42:0e:a6:87:e6:4a:7d:c4:cd:13:18:
6c:96:e6:43:66:6b:ac:28:32:cf:24:36:b9:5e:47:c6:1c:ac:
27:36:54:67:e7:9a:24:c0:a5:56:53:cf:09:c7:5a:1d:b7:e6:
f8:45:0d:4c:54:72:85:36:e2:e2:60:c8:38:80:35:88:35:3c:
ef:be:01:27:67:62:d7:31:9c:58:10:e3:50:9b:5a:bb:5e:3f:
fb:6e:56:9d:57:11:66:d4:94:62:be:91:9a:ac:0a:2c:c5:c4:
63:a2:c0:ca:20:2b:a4:45:a8:85:41:e9:4b:09:d7:e5:98:49:
b9:de:ce:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:26:12 2026 by rpki-client