Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fvP8_8TU48J6IMiREwiDhO3tYLk.roa
File: fvP8_8TU48J6IMiREwiDhO3tYLk.roa (raw, json)
Hash identifier: 3D1JK3jjDZ3dw6xUSf+wo+DL5MerbJPcmtMrr884SG8=
Subject key identifier: 7E:F3:FC:FF:C4:D4:E3:C2:7A:20:C8:91:13:08:83:84:ED:ED:60:B9
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019C40D8C11D82BD9F47F43B54C6C52B85C7
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fvP8_8TU48J6IMiREwiDhO3tYLk.roa
Signing time: Mon 09 Feb 2026 05:21:12 +0000
ROA not before: Mon 09 Feb 2026 05:21:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44066
IP address blocks: 5.10.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:d8:c1:1d:82:bd:9f:47:f4:3b:54:c6:c5:2b:85:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 9 05:21:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ef3fcffc4d4e3c27a20c89113088384eded60b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:16:58:60:d4:9d:1b:2f:90:51:76:9d:07:
2d:c7:90:2f:ac:d2:5f:b9:e4:ce:e7:48:6a:7a:5f:
83:fe:5e:85:94:63:dd:3c:54:9b:3f:92:b7:7a:51:
7a:a5:5c:d8:a5:dc:50:30:db:a7:83:79:fd:f2:ff:
c6:e1:34:13:5f:c1:ee:28:2a:1c:13:86:62:ff:22:
ad:dd:c5:a8:58:90:3d:f4:54:d4:04:d6:68:0b:02:
f1:12:ba:25:e5:d3:1a:fd:f7:f9:52:d5:f6:9a:0e:
b6:f9:cd:ba:6e:3d:e9:aa:80:71:22:0b:26:88:cc:
af:6b:60:33:8a:d0:da:92:4d:ca:d5:be:1c:b3:2d:
8b:9c:b5:1e:44:d4:0f:53:cd:56:04:9d:de:4a:c3:
6e:44:1b:fa:d2:a3:90:c1:6e:60:b9:0d:bf:ce:a8:
c7:fe:f7:22:cd:39:2a:9f:e3:79:74:1b:4f:36:c4:
3f:de:e6:71:f3:7d:c6:c7:a5:6c:46:f8:45:81:d2:
01:79:f4:f5:85:3a:5c:9a:02:f2:fc:7f:28:9f:a0:
b0:f1:ca:c8:f1:14:6f:3a:7f:a9:d2:cb:b9:58:06:
07:b0:d0:0e:e4:bd:b0:50:85:dc:72:4f:cb:99:ce:
0a:93:bd:f7:69:a8:de:0e:ad:b9:41:4c:b9:ca:be:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F3:FC:FF:C4:D4:E3:C2:7A:20:C8:91:13:08:83:84:ED:ED:60:B9
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fvP8_8TU48J6IMiREwiDhO3tYLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bd:98:db:aa:a6:48:b9:f1:c9:38:a0:19:b1:3e:03:97:ed:
d9:b4:0b:6e:11:a1:c5:8a:e0:c0:da:33:1b:09:bc:13:2d:f9:
4c:2d:83:ba:d6:7a:65:b7:74:a5:83:b2:d5:4d:a2:c9:80:12:
3a:be:37:16:53:70:7d:dc:cf:91:df:15:c6:1e:42:d5:25:7f:
59:a4:b0:ae:c6:9d:58:17:3f:1e:d0:0b:45:e8:da:a8:e2:b0:
78:5e:47:65:89:e2:27:4c:ae:95:42:f9:1b:5b:45:95:81:77:
94:f8:f6:40:1b:e5:16:ff:68:6c:78:ea:11:12:d7:7b:e5:31:
f9:4e:72:39:5d:73:0a:43:7a:86:2b:c5:7d:95:e1:dc:92:e4:
17:38:4d:4c:36:d1:8c:4a:dd:c6:5f:13:c7:f8:38:c2:4b:29:
58:65:95:1b:01:3a:65:7f:bc:15:38:d5:4b:91:1e:06:34:e3:
27:22:78:31:73:b0:fe:98:58:06:b1:77:ae:f4:14:b9:8c:b6:
29:99:94:d8:c2:95:e4:66:04:32:4f:5a:dc:0b:c0:f1:a9:80:
2e:23:d5:0f:5d:e9:ff:e5:d8:71:f9:bb:2b:05:47:94:2b:19:
25:c8:66:91:a0:76:b7:23:a5:b2:29:bf:53:ad:88:55:b7:1c:
68:7a:78:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:16:58 2026 by rpki-client