Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FzLDgDlLPxFAelUxYhCXM6BUhdU.roa
File: FzLDgDlLPxFAelUxYhCXM6BUhdU.roa (raw, json)
Hash identifier: OejdV8mtye0SeayXxivkT1mcW8Gcn4leBhGL5t1yvok=
Subject key identifier: 17:32:C3:80:39:4B:3F:11:40:7A:55:31:62:10:97:33:A0:54:85:D5
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019FEC6A843A84C869BA4B11E4EBBE822B66
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FzLDgDlLPxFAelUxYhCXM6BUhdU.roa
Signing time: Mon 10 Aug 2026 16:03:51 +0000
ROA not before: Mon 10 Aug 2026 16:03:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 87.232.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:6a:84:3a:84:c8:69:ba:4b:11:e4:eb:be:82:2b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 10 16:03:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1732c380394b3f11407a553162109733a05485d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:35:53:e9:77:a7:58:49:06:91:fd:e7:37:
92:aa:3d:40:11:87:56:71:f6:95:e3:c6:5c:f7:29:
cf:4b:57:41:50:b6:66:49:7d:b7:3c:be:f4:50:9d:
16:9b:14:cf:13:79:1e:d7:a4:b2:81:67:55:fc:31:
cb:f6:c1:e0:16:fc:23:a3:ba:f9:b1:72:26:d5:bd:
34:de:c2:0f:b1:f8:f9:b7:30:3e:ae:09:91:89:d3:
e6:84:24:e3:56:c0:21:58:1d:47:e5:3c:78:28:ec:
17:18:5c:1b:7b:54:f0:ff:e1:ea:54:22:d0:e5:24:
87:0b:8e:df:f9:38:07:f8:d0:98:b9:55:44:23:c5:
9c:f3:32:58:1f:eb:5f:81:1c:88:d1:d2:85:24:d7:
70:0c:2f:3f:e8:5a:14:a1:c5:b3:7a:f9:36:5f:db:
ee:ea:6d:f8:a3:3a:d1:9c:40:32:af:d7:b6:c6:cb:
25:65:05:b9:09:32:9b:8c:7a:e5:00:9a:aa:4e:cc:
65:31:40:92:53:a2:fd:b3:d2:8c:2f:26:d3:63:03:
2b:35:05:d4:79:5b:6b:eb:1d:e1:47:92:4c:b1:ba:
ad:4b:d3:cc:10:de:9a:71:79:d9:d0:ce:2a:2d:af:
7e:55:31:9f:52:9b:21:38:b3:94:f7:eb:34:30:64:
f2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:C3:80:39:4B:3F:11:40:7A:55:31:62:10:97:33:A0:54:85:D5
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FzLDgDlLPxFAelUxYhCXM6BUhdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0b:8c:9a:47:e3:43:ac:96:ba:0d:1b:6e:5e:6b:e2:90:ba:
c1:56:8f:38:cc:0d:dd:f5:30:96:33:8c:99:b2:a0:bd:97:ba:
a9:72:dd:70:75:db:52:ca:42:fa:ec:4b:65:3c:34:ec:79:05:
3f:0c:27:b5:b7:da:12:45:3e:ad:c8:f8:45:5c:79:95:b0:12:
7c:8a:45:7f:ae:c1:41:34:da:2e:a4:02:2e:b4:97:23:ff:51:
1a:cb:42:d7:6d:47:c7:02:85:14:3e:33:a1:fe:57:da:d1:ae:
4b:30:c0:fd:25:90:91:eb:dd:c1:61:9e:ba:f0:99:d4:b3:78:
a5:83:21:3f:a6:fd:9f:ae:c5:af:c4:82:b5:17:ad:d0:78:17:
b2:4e:a4:cc:f9:33:a8:d7:34:35:cc:86:08:df:81:5b:0c:c0:
7b:20:32:53:ca:e6:de:59:b0:01:25:cd:09:36:c6:96:db:3f:
d7:23:2f:ff:37:9d:dc:16:48:ad:19:64:b4:cd:62:e3:93:73:
c7:11:1a:77:0e:f0:e5:b3:fa:f1:9a:2b:53:9d:b7:a7:e7:9d:
44:cf:86:bc:89:9e:0d:3a:b7:54:14:00:28:74:f8:44:d0:d0:
b4:35:dd:48:ee:30:e7:e0:fd:e6:14:df:11:c0:ad:9a:83:ba:
db:69:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:57 2026 by rpki-client