Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Fb8JzaeMHAP7F9xGSztUFikoLr0.roa
File: Fb8JzaeMHAP7F9xGSztUFikoLr0.roa (raw, json)
Hash identifier: 79Ai+Jl7PGdiGoSNtb64oXKOFZD4BIYm/cjp0TIFsjA=
Subject key identifier: 15:BF:09:CD:A7:8C:1C:03:FB:17:DC:46:4B:3B:54:16:29:28:2E:BD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E457C18A9F483AC2C96580228F5143DDD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Fb8JzaeMHAP7F9xGSztUFikoLr0.roa
Signing time: Wed 20 May 2026 13:03:41 +0000
ROA not before: Wed 20 May 2026 13:03:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197371
IP address blocks: 89.144.0.0/24 maxlen: 24
89.144.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 14:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:7c:18:a9:f4:83:ac:2c:96:58:02:28:f5:14:3d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 20 13:03:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15bf09cda78c1c03fb17dc464b3b541629282ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:b0:09:88:e3:89:eb:5c:ac:62:29:fe:bd:
dd:36:8a:84:5e:af:80:48:3f:27:db:2c:66:e0:b0:
48:ba:62:c5:e7:7e:bc:98:03:77:bd:b3:f2:9d:15:
e5:ff:18:92:83:e1:eb:d4:01:85:ed:a1:2b:27:a5:
df:0e:99:82:7b:0a:b7:8a:2d:0e:64:72:b4:82:b8:
d5:ae:65:e7:aa:70:90:92:72:f4:91:86:d3:4b:eb:
25:51:84:f2:52:b6:16:c9:b9:5a:f1:92:b4:7f:6e:
38:d8:0d:67:ca:c7:3a:99:d1:e9:36:ed:67:cd:d2:
1b:f6:0b:c9:1c:d5:32:52:93:0e:38:c7:bf:24:52:
d9:a0:a2:74:c8:d8:4c:5b:7a:cc:0e:f8:a1:fa:f8:
bb:14:3c:66:ff:27:92:6b:89:a2:dd:97:2e:e7:f4:
f4:0b:89:12:16:dc:4f:38:38:bb:c5:30:72:5f:f0:
53:2c:b7:36:bc:c2:cf:a1:e6:72:dc:03:30:a7:15:
09:aa:48:c0:b6:7e:98:d3:23:af:fd:8e:b1:9e:e5:
62:12:4c:6d:b0:9a:c1:37:ed:f4:3f:dc:f7:a7:02:
6b:b0:35:50:b9:4f:2b:4e:ff:9d:6f:46:a5:8f:f2:
4d:ca:ec:64:b8:da:d5:46:c1:a3:4b:12:af:db:4a:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BF:09:CD:A7:8C:1C:03:FB:17:DC:46:4B:3B:54:16:29:28:2E:BD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Fb8JzaeMHAP7F9xGSztUFikoLr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.0.0/23
Signature Algorithm: sha256WithRSAEncryption
27:24:8b:8d:1a:be:1c:ab:85:d0:c0:4e:39:d0:a3:78:0c:d4:
c6:e6:1a:4e:65:b4:2e:3e:5f:17:25:2e:ab:4b:ea:9e:1d:8d:
6b:54:f3:9b:b2:58:11:e3:8e:c7:54:69:1f:a7:7b:c6:61:76:
02:19:cb:2a:c8:5c:76:37:6f:c0:6b:8c:29:69:33:90:2d:2f:
7d:11:5c:f6:da:bc:d0:d7:df:b1:ee:06:76:3a:41:41:53:24:
91:e5:4c:15:53:7f:40:2f:4a:93:9e:87:45:d4:9d:6e:40:60:
e1:19:ac:76:80:92:c3:b3:10:f1:e7:48:6c:f9:f3:66:5c:28:
6d:5c:f9:16:e0:bc:1b:3b:9d:b3:a2:bb:21:7f:c8:cc:a5:15:
60:85:ac:c4:de:59:5f:a3:77:f3:b1:08:43:b0:29:0b:5e:2e:
21:2b:c2:92:46:96:b8:7e:dc:c2:7f:9b:f1:b4:ef:c9:ba:9e:
de:c1:d1:64:09:02:24:db:d4:8e:81:6c:21:0e:ae:b6:44:b5:
56:2e:b7:6b:92:bf:7c:6b:9c:6b:e6:61:57:a7:11:65:d8:02:
dd:82:ed:cd:0a:14:1e:0d:78:0d:18:5a:6c:a5:90:44:63:b9:
80:f4:60:27:5d:bb:91:05:9c:f1:d9:f9:d3:00:bb:83:10:79:
3f:74:60:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 18:09:40 2026 by rpki-client