Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/fbal2Br98lSXtg0RnGPPTjowGa0.roa
File: fbal2Br98lSXtg0RnGPPTjowGa0.roa (raw, json)
Hash identifier: RIojxTuuDh3dUT1tXWggbfWitD+sBxAZGS6Rfs/+xC8=
Subject key identifier: 7D:B6:A5:D8:1A:FD:F2:54:97:B6:0D:11:9C:63:CF:4E:3A:30:19:AD
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 019F0591E8FBD1A86B78D036D1A268E03805
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/fbal2Br98lSXtg0RnGPPTjowGa0.roa
Signing time: Fri 26 Jun 2026 20:14:36 +0000
ROA not before: Fri 26 Jun 2026 20:14:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215625
IP address blocks: 46.235.12.0/24 maxlen: 24
46.235.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:05:91:e8:fb:d1:a8:6b:78:d0:36:d1:a2:68:e0:38:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Jun 26 20:14:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7db6a5d81afdf25497b60d119c63cf4e3a3019ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:64:2a:b8:c7:2d:26:b5:14:ae:d7:eb:5c:
76:26:22:7e:af:18:91:1f:50:63:ed:c2:ab:1e:59:
93:32:a1:e8:ca:2a:2c:00:d4:53:d5:82:ea:59:af:
87:33:e4:33:aa:1b:07:ef:72:dd:97:0e:ac:f1:98:
35:15:0d:dc:b5:fa:b5:34:9f:16:fd:e3:ce:3e:d5:
c8:25:95:61:14:c2:ea:e4:e3:3d:a8:91:ec:e4:a1:
5d:c4:95:9b:3f:7a:d6:2f:20:70:9b:14:69:20:f3:
7f:e8:1e:b2:a5:fc:77:2a:09:dd:69:db:34:b9:62:
1b:7a:00:42:e9:bf:35:5b:6f:45:87:7f:72:9b:78:
f1:96:2c:eb:55:d1:2d:cd:7b:c2:15:5e:30:cf:ae:
03:00:9b:2e:23:46:6c:2b:f6:26:77:d6:9b:4d:3f:
eb:a2:b6:31:f4:83:72:8d:9b:2d:cf:56:5d:b9:19:
aa:8c:bd:bf:b2:6f:84:9c:1b:2f:8b:4a:a7:0a:23:
78:d7:ea:66:38:96:5f:84:43:e9:0e:b4:41:0d:39:
5f:48:34:0a:c0:2c:69:4a:52:ba:e4:a5:34:ee:7d:
f3:cb:b9:3b:be:0b:57:2a:74:63:17:13:e0:ca:63:
39:73:81:c6:f6:1e:58:70:2b:fb:c5:e3:40:ac:bf:
5a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B6:A5:D8:1A:FD:F2:54:97:B6:0D:11:9C:63:CF:4E:3A:30:19:AD
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/fbal2Br98lSXtg0RnGPPTjowGa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.12.0/23
Signature Algorithm: sha256WithRSAEncryption
88:5e:1e:0c:9d:12:5a:d3:2a:c8:35:03:d7:85:24:dd:32:bf:
61:df:57:4f:f6:a7:79:cb:f0:fc:8e:d8:56:d0:71:97:21:73:
de:a6:a2:a6:7b:a6:56:9f:4d:f8:cd:b8:ff:c5:57:f5:52:c8:
82:30:62:39:5b:74:eb:63:b9:83:95:9f:6f:e3:67:73:0d:d2:
8c:49:88:19:6e:9b:d6:fe:45:39:6a:94:1a:49:ef:5c:00:81:
ed:bc:9a:7a:40:4d:02:77:2e:70:d7:ca:c2:f4:91:b5:6e:cf:
f5:82:42:eb:03:49:93:07:80:79:d1:ea:52:ea:31:94:9b:7c:
62:7d:3c:89:3e:86:dc:de:3e:68:e3:cc:72:d2:40:ff:d7:6d:
95:28:25:e1:52:b7:9d:59:ab:23:27:06:c3:77:a4:34:a3:d3:
1b:cc:6e:7a:76:fc:22:5d:6b:28:60:ca:e5:ad:fb:33:5a:4b:
03:25:d3:0d:74:ad:a9:5c:bc:e4:14:79:c6:88:e3:2f:a0:f1:
28:70:6b:b5:4c:07:9d:3e:4e:c3:97:ec:71:ee:96:f8:5f:da:
60:9c:c7:54:6c:8b:dd:0f:65:96:c8:0d:65:79:f3:86:93:66:
a2:e5:59:e3:b5:78:2f:cd:d4:57:5d:fe:82:fe:3e:4a:85:90:
68:d7:17:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:29:03 2026 by rpki-client