Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/FZ2f92Yx1P8FuW9L83SaK0nZGI4.roa
File: FZ2f92Yx1P8FuW9L83SaK0nZGI4.roa (raw, json)
Hash identifier: SOp6FmNQwKe5awPkwCN8XsDRwjQMyGX3OeocNtPC8cc=
Subject key identifier: 15:9D:9F:F7:66:31:D4:FF:05:B9:6F:4B:F3:74:9A:2B:49:D9:18:8E
Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial: 01A08A59AB83DCCCF4D5F06039FB7A80F137
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/FZ2f92Yx1P8FuW9L83SaK0nZGI4.roa
Signing time: Thu 10 Sep 2026 08:05:27 +0000
ROA not before: Thu 10 Sep 2026 08:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 2a0c:b840:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:59:ab:83:dc:cc:f4:d5:f0:60:39:fb:7a:80:f1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
Validity
Not Before: Sep 10 08:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=159d9ff76631d4ff05b96f4bf3749a2b49d9188e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:5d:05:61:f8:df:17:7c:a6:3e:e2:ff:71:
d1:13:33:60:e8:d3:fa:e7:e2:7b:1d:ab:f4:56:3d:
24:ee:1a:0a:16:61:74:f1:cf:0a:5e:2a:14:6e:f7:
83:1a:f6:67:2a:b8:5d:c0:eb:13:fe:63:51:24:f7:
6a:c2:1d:d6:19:f1:9f:be:76:0f:27:4c:53:a1:1a:
56:aa:14:50:c8:72:0d:76:25:4b:99:b5:e1:bc:4c:
46:8d:7a:b8:f5:b5:b0:b4:3d:3c:eb:83:ba:c1:fe:
a6:78:36:60:2a:ca:ee:18:50:ac:09:e2:83:fc:fd:
74:f7:3b:94:40:38:5b:35:ce:61:0d:c0:1c:6e:31:
48:f0:9d:24:dc:5b:de:d8:25:db:70:03:ef:92:8e:
a7:af:f9:43:67:e8:ba:33:91:04:7b:06:dd:86:3c:
6a:30:a2:88:6d:07:97:aa:2c:7a:84:3e:d4:1f:2c:
10:94:04:c2:d2:e6:d8:bc:9a:e9:d1:1d:c5:11:fe:
73:ae:54:c2:f6:a2:5c:c7:9c:bf:b6:be:34:39:44:
e4:6b:bd:6b:dc:04:ad:a1:53:69:40:c3:b2:0b:c4:
87:8c:cb:41:d9:fd:82:7a:b2:fc:f4:a2:b4:a5:6f:
c7:53:2a:a7:ff:c3:59:6d:cc:96:26:90:80:56:c9:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9D:9F:F7:66:31:D4:FF:05:B9:6F:4B:F3:74:9A:2B:49:D9:18:8E
X509v3 Authority Key Identifier:
keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/FZ2f92Yx1P8FuW9L83SaK0nZGI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b840:2::/48
Signature Algorithm: sha256WithRSAEncryption
cf:02:69:c0:fc:9d:71:39:67:b9:ea:28:e1:99:1d:0c:f4:35:
ce:e3:69:07:53:4d:c1:a3:8d:a4:e1:d3:1e:53:2e:10:46:39:
4d:2d:74:ae:bd:8f:9d:a4:ee:41:4e:6a:a3:77:48:c2:e3:0d:
41:88:7d:11:1b:5b:75:88:96:a7:86:b0:b0:1a:44:5b:b5:39:
be:5e:72:64:0e:ca:d1:db:e6:ce:7c:b9:4d:53:7a:a0:be:df:
ff:59:a9:91:ef:09:7c:7a:44:63:d0:8c:13:81:9a:5e:fe:c1:
69:13:7e:78:77:84:39:54:97:a6:bc:18:9c:03:43:60:17:dd:
b1:4c:f9:34:88:40:f2:5b:f8:ec:fa:43:56:98:56:92:1f:15:
97:e5:cf:14:8c:6f:ec:8c:63:99:ef:cb:61:da:c7:a6:ae:2c:
16:f3:90:f6:af:f6:10:0a:22:c1:e5:11:16:ec:b6:7e:88:1f:
83:c7:a5:81:4e:61:8e:6c:b3:e2:d0:80:89:14:50:60:69:e7:
7c:1c:8a:73:fd:f4:ae:ba:bb:6d:4f:9c:9f:4d:c4:6a:50:e3:
38:ab:c4:f4:b5:63:c7:10:85:d9:15:26:e4:fc:a7:1c:a8:2d:
0a:9a:86:00:58:0f:72:91:6b:a9:8a:ad:1b:83:50:a6:65:37:
1a:81:41:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:44 2026 by rpki-client