Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/fMgYj9DD4dOJYe1i0R8sHeqon3U.roa
File: fMgYj9DD4dOJYe1i0R8sHeqon3U.roa (raw, json)
Hash identifier: Tey0s10khELxWjSsS7ZpMDeAznnIJfv4ldyu7Cq4Kg4=
Subject key identifier: 7C:C8:18:8F:D0:C3:E1:D3:89:61:ED:62:D1:1F:2C:1D:EA:A8:9F:75
Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial: 019ED006986DC400E4A6168D798EAD238B8E
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/fMgYj9DD4dOJYe1i0R8sHeqon3U.roa
Signing time: Tue 16 Jun 2026 10:42:33 +0000
ROA not before: Tue 16 Jun 2026 10:42:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215638
IP address blocks: 91.217.229.0/24 maxlen: 24
2a14:f700::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:06:98:6d:c4:00:e4:a6:16:8d:79:8e:ad:23:8b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Validity
Not Before: Jun 16 10:42:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cc8188fd0c3e1d38961ed62d11f2c1deaa89f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:33:4f:56:e9:00:b2:1f:59:b4:21:56:4c:
8c:36:b6:19:4a:06:fd:b5:a0:10:25:48:76:c6:c2:
c1:6c:d9:3e:e2:a3:60:08:b3:b5:8a:d8:31:f5:a7:
2d:b2:d5:8c:bf:4f:96:1c:d8:33:f8:61:d9:10:e5:
de:24:5c:5f:25:26:44:e5:99:35:74:8c:82:ca:e6:
ce:09:86:0a:13:1c:19:dd:4b:73:d9:8e:e0:c0:0b:
2e:31:58:d5:0b:37:81:7a:5d:68:30:ab:6e:05:29:
e7:6a:d0:e8:16:d5:ff:8a:e2:9c:09:e4:1d:c7:1e:
b7:dd:ec:2e:e5:73:8b:1c:34:e3:83:81:3f:9d:69:
58:9e:a5:35:86:29:70:d5:a1:13:86:d7:00:9b:97:
f8:d2:90:8a:32:bb:f2:b4:5e:e4:4e:9e:64:55:7d:
92:bf:b7:99:56:1c:a8:55:cf:7a:66:91:6a:2b:ff:
3d:23:d5:f1:ed:77:db:6f:b0:01:2d:78:37:b6:5b:
a6:70:b6:91:8f:0d:20:4d:3c:ab:1e:50:f2:e4:e2:
a5:74:10:10:0f:63:f8:3f:0f:d8:88:8a:90:a9:87:
63:df:81:23:03:73:1f:6a:8a:ab:ef:5b:c6:d0:72:
2c:16:3e:64:12:99:3c:f3:07:ec:b6:44:98:62:4f:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C8:18:8F:D0:C3:E1:D3:89:61:ED:62:D1:1F:2C:1D:EA:A8:9F:75
X509v3 Authority Key Identifier:
keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/fMgYj9DD4dOJYe1i0R8sHeqon3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.229.0/24
IPv6:
2a14:f700::/29
Signature Algorithm: sha256WithRSAEncryption
0d:c6:1f:24:57:a8:5c:22:52:7a:37:96:0e:49:53:fa:6f:9d:
4b:d2:17:50:86:0f:a7:95:55:24:e7:af:23:f1:36:95:d3:55:
57:26:fb:56:8d:e0:f6:62:ab:e8:78:48:4b:7e:71:3b:8a:3f:
95:9c:15:40:67:85:20:b9:a3:9b:86:07:cc:7f:42:08:76:01:
e8:fb:5b:d3:e8:d8:5a:c1:5f:af:d7:ea:89:0c:a4:d1:b6:59:
4f:9f:d4:f7:f7:d2:f5:0c:99:7c:18:9a:3b:0c:fd:86:be:98:
d9:bc:98:bd:11:7e:4e:d9:af:19:fa:8e:ac:10:50:f4:e6:4d:
f6:fa:e5:4e:b6:f1:57:8d:24:b3:83:c9:fc:22:e9:be:d4:65:
f9:67:c6:bf:87:82:1c:3b:00:3f:70:aa:3d:de:ed:8f:db:01:
1f:fd:cc:ef:74:d1:17:1a:c3:91:cb:c8:6c:39:74:e8:d2:71:
de:27:a5:e8:56:60:80:3e:01:85:01:0f:97:6d:71:98:a1:07:
02:16:f7:a0:8c:be:b4:c2:a9:36:f8:ce:9a:f6:12:9c:a1:1e:
d7:be:4c:98:89:56:9a:c0:c2:52:a9:19:95:c9:60:8d:3f:22:
1a:72:33:13:03:4d:d5:bf:38:a3:6b:cd:94:7e:91:5f:37:3a:
5e:f1:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:35:06 2026 by rpki-client