Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-FuYsbw3PtN6RSCCIreMvOiEBvc.roa
File: 1-FuYsbw3PtN6RSCCIreMvOiEBvc.roa (raw, json)
Hash identifier: LcUqDvDIF+dS1rO59QJwzMS/rR1Ec+AWaOwx0W19I+c=
Subject key identifier: F8:5B:98:B1:BC:37:3E:D3:7A:45:20:82:22:B7:8C:BC:E8:84:06:F7
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019D9A30C8202079E8C1393810BA42D83385
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-FuYsbw3PtN6RSCCIreMvOiEBvc.roa
Signing time: Fri 17 Apr 2026 06:46:21 +0000
ROA not before: Fri 17 Apr 2026 06:46:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213918
IP address blocks: 213.220.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:30:c8:20:20:79:e8:c1:39:38:10:ba:42:d8:33:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Apr 17 06:46:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f85b98b1bc373ed37a45208222b78cbce88406f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:89:14:6c:c0:c3:10:22:33:a0:d8:c8:0b:
2f:18:bb:f9:02:df:40:44:b4:d1:bb:e4:8b:28:2b:
49:6a:a9:4f:7a:01:ee:6b:45:7f:89:f8:1b:35:b7:
45:9d:ac:9a:4c:50:2d:cf:0c:e1:bd:cb:a1:df:22:
46:36:f6:06:f4:57:ca:68:f6:32:3d:98:4b:02:a1:
87:f3:e4:24:dc:b3:0b:86:15:ad:d5:c3:f9:32:e1:
fc:f5:a4:bf:2e:70:93:4d:97:3f:d0:a3:b5:5c:00:
03:80:95:57:a5:79:70:c1:2a:b8:31:6b:40:5b:11:
c0:97:e3:7d:39:44:7e:55:9d:1d:11:e5:2d:22:0f:
de:c4:e0:17:a3:ad:2a:72:cf:57:94:2e:f6:e7:89:
bc:52:cd:62:4b:90:2f:a8:0e:ef:3d:1b:6d:bb:0b:
30:49:e6:b9:62:5c:67:9e:b1:0f:ba:c6:04:86:d0:
a5:d2:70:66:92:fd:d0:dd:56:30:78:8c:38:3f:92:
7e:a6:75:2b:b1:23:8d:32:36:15:a5:b7:d7:78:29:
4f:e1:e9:eb:e4:b9:18:7a:2a:ea:47:f7:fe:75:b2:
d9:3d:b6:17:da:44:29:1a:c1:48:79:b9:e6:f7:99:
81:68:b3:cb:e8:08:f9:98:3d:20:ef:3c:41:20:46:
a4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5B:98:B1:BC:37:3E:D3:7A:45:20:82:22:B7:8C:BC:E8:84:06:F7
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-FuYsbw3PtN6RSCCIreMvOiEBvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:3b:f1:28:8f:27:d3:a3:00:47:27:0a:91:a0:71:00:a5:7f:
9a:c4:75:23:81:d5:da:f9:27:e2:8a:02:9f:3d:54:d3:3a:f5:
6b:c5:dc:da:c0:f2:65:03:d8:b9:90:dc:82:ee:21:28:02:4f:
8b:01:6c:25:2d:45:09:55:8f:a9:43:5d:d0:00:81:2f:47:bf:
54:c8:b7:4a:1e:a5:c0:44:0a:2b:ac:d9:32:bd:96:79:b0:7a:
1e:46:a6:94:b7:8c:61:b7:bc:92:d2:58:d2:7b:1d:ff:10:b8:
53:73:fa:79:d4:d5:29:48:88:fc:1e:a8:1a:c4:a9:10:84:49:
5f:47:05:6e:da:82:8f:27:28:4b:21:52:d7:aa:97:9f:29:d8:
75:47:8f:13:db:6b:3c:d1:22:af:5c:1d:ad:1f:53:70:22:9d:
bd:b6:21:ce:d6:c5:5a:23:97:40:e9:c9:6d:90:d4:08:9b:c9:
6f:cb:da:49:cb:19:bb:69:dc:87:46:30:0e:69:d7:cf:f3:f2:
15:6c:47:08:70:ce:4a:5b:93:20:30:25:bd:1a:36:a6:38:29:
1a:8d:88:e0:60:54:de:e2:be:5a:00:e2:9f:87:64:6c:c2:15:
8c:01:46:1e:4f:17:33:f0:0c:7c:4f:36:6b:2e:5f:23:80:13:
25:fc:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:48 2026 by rpki-client