Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/fp6ictf1RPii-adx7W70IlYl6fU.roa
File: fp6ictf1RPii-adx7W70IlYl6fU.roa (raw, json)
Hash identifier: la/94xMKQ4s79JrZBaZczox0+eCbLMhzaojbkXnVslo=
Subject key identifier: 7E:9E:A2:72:D7:F5:44:F8:A2:F9:A7:71:ED:6E:F4:22:56:25:E9:F5
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A1265CC1647E881EB2CD2284E97B06BC56
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/fp6ictf1RPii-adx7W70IlYl6fU.roa
Signing time: Sat 10 Oct 2026 15:09:35 +0000
ROA not before: Sat 10 Oct 2026 15:09:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 194.38.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:5c:c1:64:7e:88:1e:b2:cd:22:84:e9:7b:06:bc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 10 15:09:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e9ea272d7f544f8a2f9a771ed6ef4225625e9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:73:2f:13:17:fa:34:87:0f:a3:58:6c:8f:
8d:95:81:4d:b8:1e:0e:89:2f:ad:c5:80:5f:61:bf:
5b:93:b9:1b:d6:42:a6:60:de:0d:9e:7a:ac:08:41:
08:ea:71:73:4c:8e:b8:5d:71:64:f4:a9:f7:08:0a:
ed:44:ea:30:a3:b7:26:50:78:b7:a2:e1:e5:52:b5:
33:e8:8d:7f:11:e6:04:fb:a6:87:02:4c:4b:05:b5:
9d:2d:2c:e0:65:7b:3a:4e:ef:62:a5:aa:06:a4:f4:
6d:f3:7e:19:75:e5:3a:05:0c:0e:28:4b:80:c2:98:
6b:21:a0:18:82:35:2c:64:22:c3:60:08:55:08:92:
d1:e4:fd:89:5f:1d:b3:ec:46:2c:54:ad:9b:34:4d:
47:10:b8:6e:7e:6f:5f:a4:b2:9e:4f:9b:fc:2d:bf:
cb:2f:13:ba:6b:ba:21:c2:5b:4a:29:37:67:ac:3b:
7a:05:ca:59:86:44:be:42:81:85:16:83:e0:34:df:
57:47:9f:5c:df:97:9e:46:c4:7c:a7:9f:b5:ca:c0:
96:5c:6c:d5:bf:f0:eb:b8:79:63:d5:65:c6:0e:55:
95:97:37:21:93:f5:6b:56:ab:82:64:2a:3c:c5:06:
f2:dd:43:72:9f:e5:92:9d:ec:9a:e3:61:1c:82:e6:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9E:A2:72:D7:F5:44:F8:A2:F9:A7:71:ED:6E:F4:22:56:25:E9:F5
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/fp6ictf1RPii-adx7W70IlYl6fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.50.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:35:58:c5:a0:d6:c8:64:0b:b9:3f:4b:88:97:88:25:72:ce:
20:77:41:84:56:43:07:1f:bf:4f:61:f6:23:53:d1:cd:fc:9e:
a3:47:c6:3d:b9:be:e8:f6:2b:25:52:84:a5:11:72:bb:e0:04:
cb:a8:2a:1d:c8:3c:46:78:53:57:f9:a1:30:75:0e:23:75:8d:
f2:a5:46:0a:ad:56:4a:97:03:32:25:94:f9:c0:94:35:1f:b4:
7d:4a:61:5d:29:30:77:33:ec:c4:9e:1b:3d:69:8f:bc:1c:36:
f1:b8:b6:11:77:6f:cb:2f:75:e6:9d:b3:8e:01:b4:46:fd:10:
5d:af:0b:ca:78:c3:e4:11:19:57:c7:b9:6e:8d:bd:a4:df:2e:
3a:5f:84:18:af:6f:3f:73:e2:30:e2:d7:0c:c8:0a:eb:01:2f:
d1:41:e8:e3:77:b6:8e:4d:fb:60:91:e3:57:01:7d:a9:82:86:
b6:08:eb:c5:c8:a6:b5:27:1b:dc:a8:5c:81:f2:c1:ce:1a:e2:
98:c6:48:40:b6:25:cc:68:b9:f9:84:47:7d:f3:3e:af:28:03:
9c:8a:1d:36:74:3d:c8:9f:71:ed:7e:dc:11:c7:70:1b:c2:0d:
0b:c2:32:59:b6:39:a7:41:a0:67:86:ba:7a:22:a0:0d:44:d5:
21:68:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:11 2026 by rpki-client