Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/Fy9btS_Xl1WHjSD-O0bOCd0v6Mw.roa
File: Fy9btS_Xl1WHjSD-O0bOCd0v6Mw.roa (raw, json)
Hash identifier: kRh8wQy+oUjV6uFCUFsK1u5mlPGaDKHy0Hj96EJwTnQ=
Subject key identifier: 17:2F:5B:B5:2F:D7:97:55:87:8D:20:FE:3B:46:CE:09:DD:2F:E8:CC
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A1A0F0AE70D845C93AB13041A0310BA4B3
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/Fy9btS_Xl1WHjSD-O0bOCd0v6Mw.roa
Signing time: Tue 03 Nov 2026 10:24:50 +0000
ROA not before: Tue 03 Nov 2026 10:24:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201097
IP address blocks: 132.243.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:f0:ae:70:d8:45:c9:3a:b1:30:41:a0:31:0b:a4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Nov 3 10:24:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=172f5bb52fd79755878d20fe3b46ce09dd2fe8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:27:a3:44:24:55:0d:a6:e6:8a:96:b0:88:
31:f3:1c:e0:ae:cf:04:56:f3:61:77:92:84:f1:f3:
da:59:0c:d8:a8:ee:27:48:5c:00:50:87:7d:5b:ca:
46:11:87:49:89:df:c1:1a:71:f6:96:cf:ff:3e:76:
0b:ed:e5:a5:8c:71:e2:46:ed:fe:d3:27:5b:fb:0b:
a0:2f:f8:6d:a2:23:c2:1b:24:bc:e9:e6:28:26:a1:
72:9f:d1:8d:c3:f7:4f:7d:d7:e2:11:2b:f2:c7:d8:
83:58:dc:cc:41:5b:d1:82:11:35:71:1e:38:ca:47:
1c:e7:64:a0:fa:db:75:68:d7:4f:7b:39:3b:1e:fb:
09:ba:77:87:94:9c:e9:b6:a0:e1:0d:e6:4f:e4:64:
ad:46:9b:10:14:10:8b:bc:76:02:65:73:73:e8:5b:
d0:fa:c9:45:19:a1:f9:47:89:b1:1c:d8:9c:8d:59:
82:7c:25:da:4b:85:46:0b:6a:e8:c9:8d:fa:85:b6:
2d:af:87:dd:69:c5:b2:f2:00:e9:dd:6f:52:ba:5a:
85:20:e1:be:76:7d:d9:65:6f:1b:4c:d7:72:0b:f0:
f7:3a:b3:1e:c4:bf:70:24:5a:2d:87:d5:0d:d4:79:
21:36:10:7b:b4:29:40:a0:47:94:2e:03:e6:72:46:
9d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2F:5B:B5:2F:D7:97:55:87:8D:20:FE:3B:46:CE:09:DD:2F:E8:CC
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/Fy9btS_Xl1WHjSD-O0bOCd0v6Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:22:29:5b:cb:f8:eb:8b:98:60:92:f2:b7:80:f1:ac:57:2a:
0d:fa:9d:67:e0:04:12:58:03:a9:70:5b:f2:d0:96:1c:44:13:
79:4b:53:4d:e1:0e:f2:75:13:6c:83:27:a3:26:32:17:d3:94:
da:29:58:07:86:9b:0f:30:07:23:49:cf:c6:8a:5d:a9:a1:ad:
11:1b:72:49:17:06:3d:f0:12:6e:53:2e:0c:33:cb:96:17:96:
9a:30:9b:49:e5:fe:5f:4a:c5:34:60:fb:c7:3c:ff:f5:e0:ee:
aa:5a:79:80:e1:e9:1c:cf:90:4c:19:c6:e4:8b:2c:84:02:a9:
01:41:88:e2:d9:b5:c0:4d:ef:a2:84:ff:ff:dd:93:6f:33:9c:
0c:dd:c8:d2:10:22:bb:18:e7:9f:20:ea:15:0a:99:b5:b6:53:
91:10:c5:5d:c3:3d:b2:c0:86:90:ea:bd:c0:26:4a:b2:f4:e6:
2b:cb:b9:80:36:cf:6c:ef:e1:e5:59:92:f3:31:b1:8e:5c:39:
41:08:72:02:6c:7a:6c:db:35:bd:e6:f2:a0:32:fe:2c:52:ca:
3e:9a:42:99:7c:d7:1f:e6:25:20:c4:ce:7c:7b:df:26:0d:bf:
65:42:7d:ba:ed:53:c2:5f:0b:13:60:49:3f:59:15:ad:b3:52:
31:1e:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:11:58 2026 by rpki-client