Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/FVHHHiStYazQcaMR-6kWtYOxbzs.roa
File: FVHHHiStYazQcaMR-6kWtYOxbzs.roa (raw, json)
Hash identifier: pJULO84lcrM/sFgnoFFGZDLPLbAu3bVxvObeTRPi3ds=
Subject key identifier: 15:51:C7:1E:24:AD:61:AC:D0:71:A3:11:FB:A9:16:B5:83:B1:6F:3B
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 019B7F15AAE58E4666E965A3D90086C6FA51
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/FVHHHiStYazQcaMR-6kWtYOxbzs.roa
Signing time: Fri 02 Jan 2026 14:21:25 +0000
ROA not before: Fri 02 Jan 2026 14:21:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197872
IP address blocks: 2a00:ad40:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:aa:e5:8e:46:66:e9:65:a3:d9:00:86:c6:fa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 2 14:21:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1551c71e24ad61acd071a311fba916b583b16f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:56:e1:f0:07:fd:18:ac:e6:98:0b:65:ed:63:
a7:9d:54:8d:c9:87:b7:f1:33:1b:fb:44:8f:4e:55:
57:ec:2b:f2:7b:a6:9e:2f:ce:31:58:63:9b:72:28:
0c:2d:0f:e0:90:14:5e:56:42:e6:f3:7b:84:25:fc:
09:64:23:99:f5:f6:1d:86:41:c3:48:43:70:25:0e:
9d:e1:79:63:a5:f1:7e:da:07:98:52:b6:67:05:2c:
b2:31:38:09:94:75:e6:8e:fd:ae:86:0f:73:56:38:
89:3c:95:8a:34:0f:40:82:6a:04:b4:fc:b3:2d:18:
7c:51:92:92:87:3f:c9:42:f3:de:e1:c4:9a:ae:22:
d4:6f:0f:b0:e1:b0:a0:6e:aa:12:d9:f3:4b:ec:56:
4f:c1:4a:7b:7d:4a:2d:35:12:82:6e:58:15:b8:b6:
fd:fd:45:76:64:5e:98:ff:61:f1:cf:a4:ac:cb:3f:
64:32:d3:5f:05:0b:f9:b9:df:05:ea:45:6f:5c:4e:
2c:ae:bf:b7:f1:09:ff:e1:3d:1b:ca:12:ee:3c:de:
28:38:5c:cc:50:e9:c6:1a:0f:7a:48:1b:ba:9c:b7:
ec:bf:6b:fa:3c:2f:18:5b:8d:ca:2d:e8:b6:b2:32:
8c:a8:fc:cd:42:91:87:25:0e:e6:92:6d:f1:8f:28:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:51:C7:1E:24:AD:61:AC:D0:71:A3:11:FB:A9:16:B5:83:B1:6F:3B
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/FVHHHiStYazQcaMR-6kWtYOxbzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad40:20::/44
Signature Algorithm: sha256WithRSAEncryption
21:a9:fd:74:ab:a2:37:ff:66:2b:80:c4:37:74:a1:c7:9f:2f:
fc:b5:b1:bf:6e:a4:2e:a6:3e:4c:8a:a2:84:fd:aa:67:f3:90:
42:b7:01:49:39:fd:69:29:be:91:ab:2f:a2:e1:53:66:24:5a:
41:a7:1b:c8:14:58:c5:21:27:76:3c:f0:22:49:1f:06:5d:09:
65:b6:2d:88:e7:89:9d:26:70:ef:b0:f6:93:66:aa:87:6e:e8:
e2:b4:16:49:38:25:07:cd:3f:a7:dc:45:75:0f:2b:98:33:b0:
af:fb:5f:84:d7:01:c4:44:c5:8e:d6:7d:da:6b:36:53:3b:4e:
56:25:05:cf:d2:c5:35:02:32:fe:d2:93:fc:f0:91:5f:03:45:
8b:fa:c8:32:49:28:da:fc:74:e9:3c:cf:1a:66:c2:e5:2e:63:
85:59:e3:0e:52:a1:2f:e5:8e:1c:fc:01:c5:e6:4a:c0:4c:5d:
02:74:56:0d:ed:ea:21:c3:90:89:a8:a6:bb:a0:c5:b4:28:3f:
4e:01:54:6c:8a:23:9a:16:f1:fe:c7:6e:b1:8e:dd:ff:ef:4f:
58:bc:4d:b3:c5:d8:16:2f:cb:7b:8b:a3:36:f0:36:3d:a5:9e:
16:34:e3:f2:e2:01:ac:40:62:df:a8:22:37:10:8a:de:84:23:
2d:d5:56:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:37:13 2026 by rpki-client