Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/FpRKTtq_1KcjnJLKujWjVSxXxFY.roa
File: FpRKTtq_1KcjnJLKujWjVSxXxFY.roa (raw, json)
Hash identifier: uGBpIJ0Q8NXhQZM9sN2dTmAH+QjPVwXcHcBV4ouKmJk=
Subject key identifier: 16:94:4A:4E:DA:BF:D4:A7:23:9C:92:CA:BA:35:A3:55:2C:57:C4:56
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019F7FD10CD72D48DCAD856D216A2F679521
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/FpRKTtq_1KcjnJLKujWjVSxXxFY.roa
Signing time: Mon 20 Jul 2026 13:57:14 +0000
ROA not before: Mon 20 Jul 2026 13:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41289
IP address blocks: 2a02:11f8:80::/48 maxlen: 48
2a02:11f8:90::/48 maxlen: 48
2a02:11f8:a0::/48 maxlen: 48
2a02:11f8:b0::/48 maxlen: 48
2a02:11f8:c0::/48 maxlen: 48
2a02:11f8:d0::/48 maxlen: 48
2a02:11f8:f0::/48 maxlen: 48
2a02:11f8:110::/48 maxlen: 48
2a02:11f8:120::/48 maxlen: 48
2a02:11f8:121::/48 maxlen: 48
2a02:11f8:130::/48 maxlen: 48
2a02:11f8:140::/48 maxlen: 48
2a02:11f8:150::/48 maxlen: 48
2a02:11f8:160::/47 maxlen: 47
2a02:11f8:1b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:d1:0c:d7:2d:48:dc:ad:85:6d:21:6a:2f:67:95:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jul 20 13:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16944a4edabfd4a7239c92caba35a3552c57c456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:af:17:87:4e:71:75:63:4f:0d:1a:54:34:
3c:20:0d:ea:0a:43:82:1b:7a:fe:08:d3:70:c3:5e:
02:fa:88:e8:ed:96:02:49:3c:ca:0f:32:ea:b5:5e:
9a:66:71:77:c1:60:74:cb:88:db:e9:d5:16:b0:59:
fd:e5:c3:8c:4a:9a:8c:65:a9:26:a4:76:6d:c6:14:
78:c7:19:de:5c:f1:19:af:f7:47:22:43:93:21:b5:
ff:6e:60:31:1c:b8:c2:26:ef:26:51:6a:3e:fc:0a:
f6:74:38:c2:0d:3d:96:fb:8c:7a:3f:65:bb:4e:4c:
2c:06:ae:a4:44:3b:73:63:bf:d6:86:53:97:90:31:
82:24:33:a4:64:bf:d4:be:08:36:00:e2:a8:3a:f3:
8a:41:01:2a:03:f1:9c:88:97:76:dc:69:10:49:60:
56:d1:fc:f6:03:52:f7:60:7b:de:a2:ce:32:33:e5:
9e:d9:e0:e6:ca:a2:e2:fb:2b:2b:22:6f:41:70:5b:
ef:a2:38:80:b4:f9:d8:4f:21:67:96:0b:d9:cd:4d:
f4:17:66:45:06:f1:31:fc:f0:63:1e:a8:ca:b9:18:
e8:97:ca:fa:5a:70:05:13:cb:c1:ba:2b:8b:a4:03:
fe:8d:41:a4:e5:b4:71:98:dc:3e:f7:12:64:be:80:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:94:4A:4E:DA:BF:D4:A7:23:9C:92:CA:BA:35:A3:55:2C:57:C4:56
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/FpRKTtq_1KcjnJLKujWjVSxXxFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:11f8:80::/48
2a02:11f8:90::/48
2a02:11f8:a0::/48
2a02:11f8:b0::/48
2a02:11f8:c0::/48
2a02:11f8:d0::/48
2a02:11f8:f0::/48
2a02:11f8:110::/48
2a02:11f8:120::/47
2a02:11f8:130::/48
2a02:11f8:140::/48
2a02:11f8:150::/48
2a02:11f8:160::/47
2a02:11f8:1b0::/48
Signature Algorithm: sha256WithRSAEncryption
43:5d:e5:0f:68:78:9a:be:da:37:6f:72:e0:63:3f:f9:05:f8:
c4:73:7f:d5:ea:bf:58:cc:0a:60:9e:fb:c7:df:f3:c0:53:0c:
8c:f6:41:fb:b4:61:42:ba:82:bb:1a:dd:0b:a2:34:88:cd:99:
3a:97:c8:40:ab:b0:9f:9a:79:0a:15:e9:71:ae:16:69:b1:e8:
7d:71:b5:cc:43:22:8d:25:65:55:1a:1f:2f:67:c6:ec:42:3b:
b0:e3:cd:23:0f:3d:5c:c4:a6:37:1c:00:87:2c:41:86:48:94:
02:8e:e7:eb:93:39:68:b5:65:58:d2:4c:6c:17:9a:e7:14:fa:
14:85:97:ab:1d:6f:5e:66:02:fc:71:06:64:0b:4e:a9:8c:80:
49:2a:d6:66:51:70:61:96:db:8f:77:6d:06:2c:36:26:7a:72:
08:ac:be:7b:18:87:56:ae:82:88:d8:56:2a:c5:83:f9:0f:7d:
88:fa:0f:a2:a7:4b:d2:4e:d1:b1:e5:ea:81:9a:70:9a:37:fd:
a1:c5:a5:04:7a:50:da:84:94:30:9d:9b:3d:c4:4a:30:03:5b:
71:3f:02:a1:13:da:25:9f:59:c1:cf:91:f8:d7:da:db:14:0d:
ab:db:07:2a:72:95:bf:9a:32:cc:00:ab:c7:0d:0f:db:53:cd:
66:fe:77:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:50 2026 by rpki-client