Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/fbTsMOTb-p22OeyWYaznGGMH3Is.roa
File: fbTsMOTb-p22OeyWYaznGGMH3Is.roa (raw, json)
Hash identifier: 3xgYR3jORQJHO2miHfCovdOK9oxftmKjYh8y4mgjkz8=
Subject key identifier: 7D:B4:EC:30:E4:DB:FA:9D:B6:39:EC:96:61:AC:E7:18:63:07:DC:8B
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0C447FC877DF30D56A176E667C29DA4C9
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/fbTsMOTb-p22OeyWYaznGGMH3Is.roa
Signing time: Mon 21 Sep 2026 14:04:07 +0000
ROA not before: Mon 21 Sep 2026 14:04:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57635
IP address blocks: 193.203.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:47:fc:87:7d:f3:0d:56:a1:76:e6:67:c2:9d:a4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 21 14:04:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7db4ec30e4dbfa9db639ec9661ace7186307dc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:86:0a:3f:ab:bd:33:06:53:b0:35:2b:22:
83:a0:0e:c7:04:19:da:c7:95:07:91:b0:97:08:83:
3a:eb:19:36:6b:d7:8a:4c:a2:f2:b0:76:62:4b:3b:
cd:a1:89:7a:34:b7:91:71:69:bc:a8:35:d9:ff:62:
6d:4a:37:40:e0:de:ac:7d:85:e0:d2:8a:e8:b4:c3:
3a:c8:25:28:f5:0d:e1:3f:cf:97:e1:31:48:68:ef:
91:eb:1c:8a:2b:cb:72:fb:ae:ce:37:a7:2f:48:f5:
97:2d:09:e7:5b:9d:a5:db:56:c2:ba:4d:db:3e:b8:
01:8a:9d:87:45:ff:bb:f0:fd:fd:d2:68:d1:80:10:
92:79:34:3a:d7:ca:87:03:87:f5:8b:55:fa:2a:34:
28:60:55:98:81:c3:da:81:4f:00:ea:44:de:be:1a:
6e:13:b5:3e:fa:a1:59:e2:11:13:43:da:b3:6e:45:
ec:91:68:67:c9:06:f1:d5:19:5e:3c:1a:b9:94:a2:
82:01:88:00:68:1d:5d:b7:b4:d7:db:61:a1:79:cb:
08:56:89:c5:b7:3b:c4:5a:a1:9c:74:ce:2d:25:1b:
a0:83:63:7e:8a:ba:b1:65:75:65:cb:6d:18:35:19:
72:68:07:7f:d0:59:8c:8a:7d:41:d2:32:29:0c:7f:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B4:EC:30:E4:DB:FA:9D:B6:39:EC:96:61:AC:E7:18:63:07:DC:8B
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/fbTsMOTb-p22OeyWYaznGGMH3Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.38.0/24
Signature Algorithm: sha256WithRSAEncryption
04:04:3d:f6:8a:95:ad:c0:93:c7:93:a4:16:56:d4:32:cd:56:
42:c7:a6:3c:c4:00:85:74:46:15:d3:f4:aa:44:a3:28:12:a4:
75:30:9b:d9:a4:0d:32:45:de:75:df:75:0c:b0:44:06:f0:4d:
d0:61:c1:56:a2:20:2d:5f:9a:4e:7c:3f:78:ed:71:9b:2e:e9:
8f:f4:25:1b:2e:c1:ae:74:82:60:2b:3b:7b:83:35:5f:cb:de:
e9:55:4b:2b:92:30:a0:dc:c3:b1:40:96:53:33:4b:6e:5f:54:
bb:55:87:de:51:ff:09:35:6a:7a:be:ea:88:e2:17:ef:27:bb:
f1:5a:54:e6:f4:90:71:a3:9d:69:d1:a9:b3:d7:f1:ee:64:96:
3e:29:58:31:fa:c8:52:70:4c:19:f6:f3:4d:c7:37:71:7a:de:
1b:2b:c9:53:dd:08:39:89:1b:39:9f:c8:d9:59:90:a1:06:ac:
bc:95:de:65:e8:90:39:06:9d:1c:ab:59:f8:32:cf:df:04:76:
cd:d2:78:20:42:f4:57:77:8a:25:78:9a:7d:51:e8:3b:de:c5:
d2:e2:12:2f:2c:89:73:68:96:36:67:62:ae:bd:30:89:76:af:
99:16:f2:b3:3e:01:3f:e1:82:6f:45:d4:bc:61:5e:ba:72:76:
b9:ff:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:40:04 2026 by rpki-client