Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FR7fWmWg-eY5pnLSAp6MhkdYvo0.roa
File: FR7fWmWg-eY5pnLSAp6MhkdYvo0.roa (raw, json)
Hash identifier: 9wC7y1dB5Pm/S2YHEXDpkFBxq5jwwzscTrAUMXlXOEk=
Subject key identifier: 15:1E:DF:5A:65:A0:F9:E6:39:A6:72:D2:02:9E:8C:86:47:58:BE:8D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019CE2F854F62125F9D0B331719D8FB0FE3A
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FR7fWmWg-eY5pnLSAp6MhkdYvo0.roa
Signing time: Thu 12 Mar 2026 16:54:11 +0000
ROA not before: Thu 12 Mar 2026 16:54:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211507
IP address blocks: 2a06:5fc0::/29 maxlen: 29
2a14:42c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:f8:54:f6:21:25:f9:d0:b3:31:71:9d:8f:b0:fe:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 12 16:54:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=151edf5a65a0f9e639a672d2029e8c864758be8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:74:6b:dd:04:9a:d3:ab:7f:af:d9:80:3b:
7d:88:b8:05:13:cc:ba:41:91:55:af:9f:0b:7e:88:
d1:11:39:04:0e:3f:56:f1:f4:23:d0:39:96:3f:3a:
5d:cc:ee:ea:88:ea:15:f0:65:29:5b:e9:de:5b:68:
57:68:34:94:41:da:76:f5:05:20:38:4e:47:a9:a8:
5a:11:76:4d:22:93:1d:48:23:51:25:8e:6c:44:a8:
bf:52:9c:21:2a:f9:a1:d7:1c:e9:f6:94:99:8c:f1:
89:31:7c:a5:41:9c:54:8c:92:54:5f:e4:3c:1c:af:
d1:1c:39:e9:8b:f5:96:cb:05:8e:10:9d:8d:e9:b4:
f5:56:44:6d:c2:0d:cb:46:1d:69:d7:5b:0b:28:5a:
e9:12:8a:3c:ad:e6:b8:c7:5c:eb:6d:34:cb:a0:98:
5f:36:88:e8:95:80:83:8f:c8:05:ab:b3:de:e6:48:
4b:25:03:21:01:50:e2:45:4b:1b:21:07:ad:9f:87:
51:05:d4:43:57:1e:75:71:28:02:67:70:67:d4:51:
45:18:c8:0f:31:df:cb:d3:ee:dc:7a:b3:c4:02:70:
94:26:ac:18:5a:56:61:11:04:a9:ff:12:8c:65:f1:
b2:99:ff:8e:51:75:9d:78:64:14:fa:7e:1d:c0:71:
93:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1E:DF:5A:65:A0:F9:E6:39:A6:72:D2:02:9E:8C:86:47:58:BE:8D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FR7fWmWg-eY5pnLSAp6MhkdYvo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/29
2a14:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
67:41:e6:d5:60:e9:f8:22:6e:ee:24:13:ed:68:ea:f3:e7:74:
ae:f3:cd:72:36:6e:67:31:40:96:c6:c2:e6:dd:d0:07:5b:12:
67:27:fe:1a:0e:f9:73:0e:11:5f:71:af:38:1b:53:86:c6:0a:
46:83:6a:36:c6:d7:33:66:7a:e0:e9:6f:41:86:6a:19:33:31:
cb:11:ec:74:07:08:d1:01:c3:dd:2f:a3:fa:b7:68:c0:b1:d8:
d5:d1:1f:35:f1:0d:36:4c:18:4a:3e:61:67:50:40:1b:41:18:
13:76:da:55:ca:11:23:21:ff:43:1b:8c:48:eb:63:20:13:e0:
67:fe:6c:d5:58:8d:8f:f5:04:74:c3:21:25:e4:17:68:ff:bf:
bd:65:f2:17:24:e8:4d:c6:17:37:4a:66:01:30:36:3d:7a:f2:
b5:f6:e1:6e:1a:cc:9f:4b:62:75:9d:c8:d7:10:46:a7:56:e4:
98:fd:44:82:79:dc:5a:09:09:81:33:eb:18:4f:ea:08:24:11:
c1:0a:37:35:78:49:e9:18:fc:79:bc:00:14:30:ed:cb:50:78:
04:15:59:55:b8:74:3f:ae:85:6b:d7:81:1c:cd:72:5e:71:07:
76:22:2a:a9:be:db:72:64:6c:fe:15:1d:db:2c:39:e4:3a:b2:
7a:05:1d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:52:59 2026 by rpki-client