Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/fTMIdoB4kQzu02mFfH9z8btZ5uM.roa
File: fTMIdoB4kQzu02mFfH9z8btZ5uM.roa (raw, json)
Hash identifier: 5eDUcm8uO6+nohQB/UiadkgP4q7oAy/sELIvvCPSQxA=
Subject key identifier: 7D:33:08:76:80:78:91:0C:EE:D3:69:85:7C:7F:73:F1:BB:59:E6:E3
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 01A0AAA5CC4160F1F454C85482D7A460302F
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/fTMIdoB4kQzu02mFfH9z8btZ5uM.roa
Signing time: Wed 16 Sep 2026 14:36:27 +0000
ROA not before: Wed 16 Sep 2026 14:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206787
IP address blocks: 178.175.174.0/24 maxlen: 24
178.175.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:a5:cc:41:60:f1:f4:54:c8:54:82:d7:a4:60:30:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Sep 16 14:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d3308768078910ceed369857c7f73f1bb59e6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:8f:71:41:6c:77:37:87:23:31:ca:b1:c6:
bf:4d:41:28:61:9d:0e:d6:bd:be:13:72:cf:f1:75:
ad:28:1d:6b:f5:42:90:f7:1e:9f:50:f1:96:9e:f1:
2d:4b:ab:f9:37:90:73:d1:0c:3c:1e:e1:11:06:0a:
d9:48:a2:f0:66:b0:93:74:37:2e:02:e0:55:5e:dd:
aa:14:2e:bd:fa:a5:9e:03:02:e6:b9:ef:35:30:d8:
c8:7b:c8:81:86:6d:c4:6a:5e:3c:06:fc:fa:ea:c3:
1a:a7:6d:d3:ca:d0:9b:43:b3:7d:a4:e2:37:c9:90:
cf:4c:86:64:f6:ce:e8:88:81:23:b9:b1:7f:05:78:
92:cc:16:ff:76:5c:e3:ce:d1:d7:78:6e:55:e9:34:
77:32:01:79:94:8c:e3:2f:ed:fd:15:f5:9e:1e:0b:
aa:a4:54:54:d3:0c:66:d3:f9:41:73:72:2d:3b:3c:
00:4c:fd:18:8a:d4:c5:a1:ff:89:bd:7c:c4:59:a5:
28:cf:d6:9f:fd:ae:de:d3:76:43:77:62:3f:7b:25:
e8:ea:eb:52:27:b3:a5:d8:3e:15:0a:b9:bd:84:f4:
b3:c5:1e:86:a9:db:a3:2d:26:df:4d:da:8d:eb:a3:
df:dc:ba:d9:20:fa:9e:e9:b0:59:e4:9d:b4:29:2b:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:33:08:76:80:78:91:0C:EE:D3:69:85:7C:7F:73:F1:BB:59:E6:E3
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/fTMIdoB4kQzu02mFfH9z8btZ5uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.174.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:e6:65:a0:1c:ef:f6:76:a4:5b:26:7a:6a:fd:7f:4e:dc:2b:
11:22:18:a3:01:8d:1d:2b:54:57:58:7c:6b:fa:52:10:d4:70:
52:c0:60:df:55:fd:d7:70:9a:a7:20:aa:c2:19:b0:6a:84:89:
0a:9a:2f:e1:45:72:a6:c7:5a:f5:51:64:05:34:96:93:30:d4:
f0:dd:f5:c5:89:b9:7f:a5:16:68:f0:ac:7f:8a:71:1f:ea:48:
9e:16:e1:d0:4a:56:31:f4:8e:42:65:36:39:2d:8b:f5:08:f2:
19:59:4b:66:fd:4a:4c:91:40:a9:a5:f6:fe:55:3a:97:5b:82:
3c:89:61:4b:fd:9b:54:62:60:1b:14:08:21:a4:3b:77:df:ee:
8f:24:1b:10:ad:08:95:e0:83:81:0f:f4:88:d3:a4:04:f2:2b:
b0:b5:6d:90:e0:97:d0:28:05:58:fe:13:de:b1:24:f3:59:1f:
44:f1:7e:22:d1:4a:7a:8d:8d:36:4e:0f:62:33:43:71:1c:f5:
8d:fa:36:be:40:83:5c:cf:81:44:d1:f6:b5:ac:f8:6f:fd:fb:
d9:5d:24:e8:d2:b4:b9:c0:04:3f:b3:f4:a5:fe:54:d0:90:5d:
a8:0a:37:2d:50:67:a4:fc:4f:5f:cb:88:83:2b:4c:58:50:85:
95:2d:5a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:46:31 2026 by rpki-client