Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/f2uUPGNXC_pxdPQmPP-DpsHFtOQ.roa
File: f2uUPGNXC_pxdPQmPP-DpsHFtOQ.roa (raw, json)
Hash identifier: mFFk7nFev+G1oGZg2IbBid7J61ARFJ8OWPLRJsrECIA=
Subject key identifier: 7F:6B:94:3C:63:57:0B:FA:71:74:F4:26:3C:FF:83:A6:C1:C5:B4:E4
Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Certificate serial: 019F2368CBA31C952EF8C29EE6D4F0310D09
Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/f2uUPGNXC_pxdPQmPP-DpsHFtOQ.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197961
IP address blocks: 89.46.144.0/21 maxlen: 21
103.203.84.0/24 maxlen: 24
155.133.111.0/24 maxlen: 24
2a10:f780:fffe::/48 maxlen: 48
2a10:f782::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cb:a3:1c:95:2e:f8:c2:9e:e6:d4:f0:31:0d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f6b943c63570bfa7174f4263cff83a6c1c5b4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:4c:7d:b1:5c:52:13:c6:12:ac:29:d1:89:
a6:8f:df:e1:4f:13:da:a4:67:99:43:8e:43:62:40:
17:8b:59:75:de:e1:e3:cf:c0:95:51:f9:d6:d1:73:
8f:70:83:7b:95:0c:17:8c:cc:91:d2:3f:e2:12:98:
ad:5e:f5:95:b7:e0:e7:30:67:2e:04:8e:e1:87:2d:
1d:e5:af:3b:72:7e:9e:6c:b1:d4:95:b0:dc:62:8e:
54:be:44:c7:56:8c:84:ac:4e:37:7c:0b:59:31:8d:
ee:17:ee:75:05:e5:b3:1f:99:05:ab:91:8d:62:c3:
35:69:43:94:d6:75:8b:e3:44:b3:14:ce:12:6a:c7:
56:15:98:a4:b3:31:b0:5f:d3:6d:41:3e:48:b8:69:
88:94:c0:9d:4f:66:dd:2d:8f:fb:c4:eb:fd:91:21:
ef:4c:22:25:42:92:19:d7:63:58:3e:d7:00:41:fd:
26:43:83:69:a5:db:28:9e:3c:b4:18:3d:b5:7a:72:
76:df:ae:27:2c:05:eb:6e:32:a2:7e:66:61:d6:63:
c7:96:55:48:c8:6c:78:96:60:96:d8:d3:f1:ae:33:
02:18:ca:8d:5d:54:73:ed:e0:e2:19:dc:4f:52:32:
e5:59:1d:55:6e:eb:22:3c:29:2b:9b:09:3e:36:57:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6B:94:3C:63:57:0B:FA:71:74:F4:26:3C:FF:83:A6:C1:C5:B4:E4
X509v3 Authority Key Identifier:
keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/f2uUPGNXC_pxdPQmPP-DpsHFtOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.144.0/21
103.203.84.0/24
155.133.111.0/24
IPv6:
2a10:f780:fffe::/48
2a10:f782::/48
Signature Algorithm: sha256WithRSAEncryption
23:7a:35:68:b5:70:8f:0d:29:ed:c9:dc:db:fb:1d:f0:25:e7:
90:a7:14:b7:d0:8f:a6:50:3a:62:8c:61:c0:c3:7f:ff:11:32:
8b:67:b3:8d:2d:4d:be:5c:4c:9c:8a:74:98:93:fd:ca:e9:9b:
5d:a1:0c:e7:18:cd:8c:27:77:8d:5f:81:a2:30:e4:9f:16:69:
89:ba:5f:3d:07:cc:21:f1:81:25:2d:28:81:a8:34:f5:8e:28:
fb:ff:55:f3:41:0f:d6:69:13:ce:0a:f0:8b:fd:fc:cb:64:b7:
61:a3:76:58:06:03:1c:12:6c:c7:f6:94:b3:fb:18:95:20:ef:
1b:39:27:57:86:0d:4b:ea:2f:2e:67:19:b2:1b:dd:70:46:34:
b6:16:b9:8f:20:42:db:38:9a:ac:6d:00:ca:c1:1e:02:f3:4d:
46:67:38:20:c5:6f:8a:08:55:5b:4a:2b:94:21:ef:c3:bb:ab:
80:96:b8:29:9f:bf:2b:7f:3f:f7:c6:f1:8d:13:71:0c:3b:ab:
48:ee:e1:11:2d:b8:0c:f1:24:b3:17:22:10:15:84:72:37:d6:
99:72:7c:fc:ac:89:e1:51:ec:af:41:06:4f:0b:7f:9b:40:b5:
50:da:97:ad:8a:39:13:c7:6a:29:38:5d:b0:6c:77:25:9f:1f:
78:f7:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:57:14 2026 by rpki-client