Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/FdWFirL6GIIaCVMzknYeXMEJ57A.roa
File: FdWFirL6GIIaCVMzknYeXMEJ57A.roa (raw, json)
Hash identifier: 88CqXYdD4wouQ/bHfv40jUfLuo9HHpTt4V/WmhYSptQ=
Subject key identifier: 15:D5:85:8A:B2:FA:18:82:1A:09:53:33:92:76:1E:5C:C1:09:E7:B0
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019C0F87E6DC84F5B9CDD9DAB817098D1F56
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/FdWFirL6GIIaCVMzknYeXMEJ57A.roa
Signing time: Fri 30 Jan 2026 15:31:30 +0000
ROA not before: Fri 30 Jan 2026 15:31:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35682
IP address blocks: 45.92.173.0/24 maxlen: 24
176.101.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0f:87:e6:dc:84:f5:b9:cd:d9:da:b8:17:09:8d:1f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 30 15:31:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15d5858ab2fa18821a09533392761e5cc109e7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:08:d2:d8:7f:52:fb:90:7e:53:6e:83:bf:
f8:5b:04:e6:6b:ba:58:03:ed:59:29:8e:d4:37:ae:
13:c6:ab:39:f4:ab:2f:fa:48:c0:98:9b:a7:2d:c4:
89:6a:8d:32:c0:33:c7:29:39:e9:54:97:8d:3d:47:
32:7a:e2:2b:f1:ce:fb:7f:49:22:fc:9c:07:3a:84:
aa:90:80:e2:9e:29:d9:bc:81:e4:4a:6b:d7:55:45:
ed:f8:2e:26:63:7a:9a:50:fb:38:0c:12:b5:6d:71:
4e:78:63:60:fb:92:fc:6e:7c:bf:d4:b5:23:ed:c5:
c6:1c:d0:69:d9:ab:f5:6b:e2:e1:7a:11:c6:4e:26:
fd:13:9d:86:7f:ed:72:95:90:14:7c:96:b3:ad:ff:
7b:49:19:57:92:42:1a:45:fe:b9:36:13:8c:1e:47:
a5:16:14:aa:ea:36:68:73:b3:ba:3f:39:5e:03:d1:
6b:ec:f8:ae:db:54:04:8c:fd:73:7d:9c:78:d9:0a:
60:9b:dd:55:76:1a:05:d4:f4:0a:f9:1d:a3:f2:33:
3f:fb:e5:2b:bd:aa:70:68:19:7e:62:22:a4:6b:87:
e4:08:a6:31:67:0d:43:07:d6:7f:3f:10:37:fb:50:
0f:06:72:3a:c3:c4:02:2b:53:f1:ea:a4:b2:c9:23:
eb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D5:85:8A:B2:FA:18:82:1A:09:53:33:92:76:1E:5C:C1:09:E7:B0
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/FdWFirL6GIIaCVMzknYeXMEJ57A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.173.0/24
176.101.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:cd:04:0c:b8:81:4f:ff:95:4f:21:1f:ff:c7:b3:45:25:91:
84:5c:8d:6b:d0:7b:9f:7e:ca:0a:70:78:f9:aa:11:fe:5f:20:
fe:9e:8f:5d:63:eb:d9:80:73:ce:d2:39:97:91:de:15:f2:44:
f3:f3:ff:06:8d:fe:90:c6:6b:e2:13:83:ef:3a:cd:5c:b3:f2:
cc:0d:15:ad:e4:15:6f:77:0c:5e:be:7f:0d:6a:59:40:1d:86:
5e:4b:21:0e:e6:82:94:5e:a4:7a:2c:48:c1:da:19:43:e7:19:
b9:08:48:e4:d3:0f:00:6a:c6:9e:57:7f:de:04:eb:6f:e1:bb:
54:58:45:67:8d:28:08:67:b0:66:c3:38:51:d0:ae:1e:e5:bc:
8f:f8:a4:f5:c3:4f:43:ac:4e:b5:39:43:ba:b0:f9:2f:ed:32:
3c:4f:ab:5b:4a:d7:d0:ed:c4:da:bb:8e:33:6e:4f:01:0a:3c:
4c:a8:84:b6:80:d5:4a:28:43:9f:c6:04:1d:8e:0f:ba:91:72:
63:f7:d9:39:4b:6c:3e:4e:43:63:c8:fc:72:14:75:1a:30:6f:
a4:3b:51:2b:4f:62:0e:4e:39:02:6c:20:8f:ca:1c:a2:46:1b:
b8:71:aa:1d:12:f3:de:7c:d7:46:29:91:09:70:37:e9:8d:71:
33:b6:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:31:24 2026 by rpki-client