Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FaeelxEPsE0nIixI6sIJzuWY6O8.roa
File: FaeelxEPsE0nIixI6sIJzuWY6O8.roa (raw, json)
Hash identifier: +yBrlcHCFnPhkOcELg6qA7pp2HCMIGXInPFmzHLD+b8=
Subject key identifier: 15:A7:9E:97:11:0F:B0:4D:27:22:2C:48:EA:C2:09:CE:E5:98:E8:EF
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FA9815EBEB0DA07330D50E493493E013C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FaeelxEPsE0nIixI6sIJzuWY6O8.roa
Signing time: Tue 28 Jul 2026 16:14:15 +0000
ROA not before: Tue 28 Jul 2026 16:14:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198180
IP address blocks: 201.10.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:81:5e:be:b0:da:07:33:0d:50:e4:93:49:3e:01:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 28 16:14:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15a79e97110fb04d27222c48eac209cee598e8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:84:d0:e3:a8:ad:cf:86:86:47:9c:70:4e:
f6:cc:e3:9d:b5:12:81:85:1a:df:12:73:64:ec:56:
68:4a:85:ac:40:09:86:fd:1e:54:bc:32:a1:3e:97:
cc:6a:c6:ab:37:6d:cb:ce:9b:45:aa:73:75:f2:69:
31:8d:29:46:13:33:27:e0:75:9d:32:67:08:36:bb:
5a:b1:ca:5a:5a:73:8c:20:b5:73:20:62:7f:9b:11:
1f:b7:8c:18:34:b5:57:1f:16:4e:fd:ef:90:6a:45:
66:57:2d:0f:04:3e:b8:9b:e7:cf:67:33:70:b6:da:
6c:bb:33:4d:0a:f7:a5:24:bb:98:69:a8:1e:8a:f1:
3f:69:44:44:7e:0f:24:25:07:29:7d:d7:ed:80:3b:
5b:93:15:7b:51:19:27:97:f6:80:0d:3d:87:8f:4a:
68:74:f1:7e:df:f9:43:bb:1d:d8:c6:d4:37:59:f4:
e5:17:bc:9e:be:ae:cd:65:f3:d5:a9:7e:59:f0:f5:
80:9c:d2:3e:c1:2c:78:c7:83:dd:6e:87:0d:b1:44:
cf:c7:6f:d5:20:2b:05:b2:66:a8:cf:1a:7b:b6:09:
da:02:1a:b9:bd:08:cc:a4:8d:1e:92:9b:5a:f9:88:
6a:26:4e:46:e5:7b:c1:23:c9:85:72:29:15:89:4f:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A7:9E:97:11:0F:B0:4D:27:22:2C:48:EA:C2:09:CE:E5:98:E8:EF
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FaeelxEPsE0nIixI6sIJzuWY6O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.10.86.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a8:3f:a1:0c:2f:be:2a:21:31:8d:54:2a:1a:3e:f1:b5:87:
b3:47:b5:ed:8c:d8:ee:f7:75:ed:e4:12:35:46:d8:2f:f8:5e:
db:9c:c2:b4:e6:ed:00:fe:9d:25:88:95:cf:a4:ed:0d:72:e7:
e7:d0:ad:48:c2:c6:12:53:70:7b:66:92:0e:65:11:a0:a5:b3:
cd:b7:2e:20:8d:01:4f:d9:e1:3a:58:2e:3d:9d:d4:38:e4:c6:
df:ed:98:0f:67:58:2e:e7:a1:9b:a0:d4:b2:c4:3f:d7:d7:fe:
eb:f0:08:b6:ec:4b:05:72:5e:e3:0a:0c:03:6f:26:e5:46:6a:
13:be:f6:8d:0d:4e:1e:b7:0d:33:47:4d:e1:4b:d9:ee:28:12:
f3:a2:47:6f:6f:16:e7:4b:5a:99:51:a6:61:16:a4:90:8f:8e:
e0:e8:7f:ab:5a:ef:93:4e:ed:35:f0:3a:01:27:8b:8c:02:5e:
d1:a4:8c:c9:78:0f:fa:08:50:01:9a:5e:e5:34:eb:ce:eb:82:
ae:85:d5:b9:72:33:a5:53:d0:16:ff:f9:68:0d:b8:f8:1f:98:
2c:b4:22:68:d8:7b:3b:58:29:6c:7c:29:26:16:ae:c2:60:9d:
e2:7d:0a:20:be:76:93:23:a8:c7:c3:b9:f5:0c:b7:cd:42:4a:
b2:05:0f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:36:55 2026 by rpki-client