Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/FJK-9iP3Ic0EwLbHUVL_xkmADlI.roa
File: FJK-9iP3Ic0EwLbHUVL_xkmADlI.roa (raw, json)
Hash identifier: qKdr1x8PgypFhix8ITwgT7yYH8yJtD8vlOTm8XJx/jQ=
Subject key identifier: 14:92:BE:F6:23:F7:21:CD:04:C0:B6:C7:51:52:FF:C6:49:80:0E:52
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019FA27306239B64D8E8342D72D551EB764A
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/FJK-9iP3Ic0EwLbHUVL_xkmADlI.roa
Signing time: Mon 27 Jul 2026 07:21:15 +0000
ROA not before: Mon 27 Jul 2026 07:21:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 87.58.220.0/23 maxlen: 23
87.58.222.0/23 maxlen: 23
150.251.142.0/24 maxlen: 24
150.251.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:73:06:23:9b:64:d8:e8:34:2d:72:d5:51:eb:76:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jul 27 07:21:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1492bef623f721cd04c0b6c75152ffc649800e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:31:88:dd:69:ef:bd:c8:b0:19:ae:71:34:b8:
90:db:b9:ca:dc:db:2c:44:d8:5f:ea:11:91:87:69:
0e:74:e5:22:0c:06:a0:50:1a:d5:b8:16:dc:94:7b:
1c:85:de:c7:c6:58:5a:9a:01:11:76:ea:0c:4a:ea:
68:f5:97:eb:60:e8:4a:e4:bb:84:0e:11:70:8d:11:
e0:dd:4b:b0:bd:a8:8c:e6:3a:8c:44:be:42:88:ac:
83:f8:3d:11:37:b4:65:58:8c:c0:f1:ab:15:cc:d7:
79:f4:88:e0:05:0d:2e:98:81:4b:7e:4c:01:41:24:
87:8a:2d:d6:89:3a:f1:37:7a:82:8b:8d:f7:f2:82:
5c:09:97:16:21:9b:fb:15:41:60:48:ce:f3:43:46:
ce:4e:9a:18:8f:50:64:a0:40:b3:c6:9c:a5:98:30:
1c:70:75:15:06:ad:f4:b2:79:80:1f:87:a2:a9:ea:
6e:96:0b:7b:65:6c:34:fe:d2:92:8f:ba:df:db:c7:
27:db:9e:80:b0:a6:2a:f5:16:31:c9:08:bc:e3:7f:
5b:0e:38:e6:1d:0e:2a:f8:a5:fa:10:7d:20:24:2d:
9d:03:7d:1b:85:44:09:03:ab:24:d4:92:0b:1d:6b:
df:a0:f8:c7:6f:1f:94:45:72:5e:4f:70:92:19:94:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:92:BE:F6:23:F7:21:CD:04:C0:B6:C7:51:52:FF:C6:49:80:0E:52
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/FJK-9iP3Ic0EwLbHUVL_xkmADlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.220.0/22
150.251.142.0/24
150.251.144.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:17:12:9d:17:bd:55:db:98:99:dd:4d:bd:7b:96:67:6d:d7:
26:c8:e0:22:21:f6:a1:3a:3a:09:cc:66:ed:8d:60:82:2d:b8:
ed:a1:20:58:63:a8:82:b1:eb:66:44:8d:4e:b9:02:0a:b3:7c:
71:bc:19:77:e3:bc:6f:11:1a:a2:a7:3b:eb:f7:a2:15:22:72:
ce:06:ec:46:34:bf:78:5a:cb:60:a7:ec:a9:bf:49:ca:5a:68:
c6:a3:55:23:02:e9:90:49:28:b6:64:6a:0a:e2:4d:84:c0:cf:
62:23:31:15:85:4c:ee:2d:60:b1:be:87:59:ac:60:a2:e9:a6:
88:7b:1a:50:e8:25:f6:10:85:62:01:cd:09:26:c8:c6:22:0d:
ef:26:6c:22:eb:bd:a0:24:c4:96:27:9d:94:bb:dd:35:ef:69:
d5:c2:4a:c1:a6:8a:a6:7e:47:22:fb:83:47:77:6c:cd:08:6b:
6f:4a:5e:8d:05:bd:3e:ae:0b:e8:40:3e:5a:c9:1f:e2:e6:0c:
e0:7e:9e:8d:59:f7:60:13:27:b2:3c:55:bc:db:6e:18:2a:32:
cb:e1:fe:3b:32:72:0d:22:be:c9:ca:c1:5f:b7:18:68:37:73:
8e:49:fe:39:ae:8c:be:e4:59:25:e5:0d:8b:e4:19:b5:08:8a:
59:31:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:17:23 2026 by rpki-client