Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Fsm7JzHW7bbB12tM750sMCcSIBY.roa
File: Fsm7JzHW7bbB12tM750sMCcSIBY.roa (raw, json)
Hash identifier: QW0CWjGUxlfLFrijDHCDrH4eoPKffWmZwKpV4qvSIxE=
Subject key identifier: 16:C9:BB:27:31:D6:ED:B6:C1:D7:6B:4C:EF:9D:2C:30:27:12:20:16
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0B451FE691AC6EB3F7AE032CC1E246763
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Fsm7JzHW7bbB12tM750sMCcSIBY.roa
Signing time: Fri 18 Sep 2026 11:41:07 +0000
ROA not before: Fri 18 Sep 2026 11:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59895
IP address blocks: 2a13:c340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:51:fe:69:1a:c6:eb:3f:7a:e0:32:cc:1e:24:67:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 18 11:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16c9bb2731d6edb6c1d76b4cef9d2c3027122016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:7c:06:5f:5c:41:93:12:81:ac:82:e7:cb:
de:8d:18:dd:43:d9:27:aa:0c:fd:d3:60:2e:13:1f:
2d:76:89:1d:e1:d9:86:bc:e6:c5:72:4a:58:b2:88:
15:44:f6:18:4a:0f:d7:a5:4e:34:0b:24:68:00:a4:
5d:cf:93:27:36:90:75:96:45:bf:4f:d6:1c:b3:4e:
f9:19:dc:c3:ed:60:6b:ff:d1:2f:85:3b:70:71:5f:
93:75:4c:b0:a8:4c:e1:38:9f:15:d6:9a:f7:e5:d0:
5c:1a:4b:cd:47:00:63:87:6f:47:19:ad:e9:6e:99:
dc:d1:13:fc:a5:c7:25:3e:c2:38:1c:f4:91:7a:e1:
98:10:22:b4:33:43:70:fc:bb:35:04:ea:6d:c5:8a:
bc:25:a6:30:e7:bc:91:53:ab:1a:86:a4:aa:e8:b2:
d6:bc:3e:f6:54:a3:8e:59:d1:4d:79:79:e7:cc:00:
9a:cf:15:57:17:b8:18:35:5f:c9:63:35:96:34:5f:
cf:cf:b7:ae:77:e7:bd:e9:a6:8c:c7:89:6b:47:78:
e6:59:0c:a3:4f:78:af:17:13:30:af:aa:9e:95:8f:
e6:98:53:02:7b:4c:1b:08:70:52:0e:67:3d:78:13:
bf:7f:63:02:48:2c:1e:d4:99:d2:be:69:a1:77:5b:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C9:BB:27:31:D6:ED:B6:C1:D7:6B:4C:EF:9D:2C:30:27:12:20:16
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Fsm7JzHW7bbB12tM750sMCcSIBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c340::/29
Signature Algorithm: sha256WithRSAEncryption
0f:c8:7b:84:41:37:db:c3:23:ee:b1:1f:95:35:f5:7a:a3:94:
67:a8:ba:4a:cb:5e:03:59:49:e1:e1:e6:bd:b4:29:f6:f1:ae:
40:79:0f:5d:2b:6f:8d:0d:e9:dd:9e:ef:f7:7d:58:a8:17:91:
aa:90:22:86:63:18:a9:88:65:82:36:35:c2:dd:c8:94:c4:5c:
a9:9e:ed:97:7a:9a:52:d7:6f:6e:ef:86:e4:7f:4c:50:48:9f:
bb:28:82:19:ea:38:a7:72:a2:7d:c6:d5:97:39:c9:e9:c4:01:
c0:a5:52:c6:14:ac:26:30:db:a8:87:32:bc:9c:89:62:f2:83:
9b:6d:e3:6f:80:2a:e4:f6:1d:99:49:b1:a0:c0:d3:ac:2c:17:
50:ba:df:f1:04:92:67:79:a8:9b:35:a9:1b:20:79:99:93:a3:
67:ab:5d:07:4f:32:48:a3:47:27:94:90:76:0d:22:1f:59:5e:
f1:07:e3:94:6e:a6:f5:30:f6:3e:36:23:7e:44:e5:df:6a:ac:
c6:18:98:be:7a:a7:23:6f:e6:d1:07:30:f2:28:ba:5e:7d:7f:
6a:61:45:34:fd:60:86:28:a5:b5:d3:ac:6f:17:be:c0:50:8b:
e2:d5:4a:67:68:77:85:33:4a:54:02:ba:64:92:87:4c:4a:1d:
2d:8a:5b:5e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaC0Uf5pGsbrP3rgMsweJGdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwOTE4MTE0MTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmM5YmIyNzMxZDZlZGI2YzFkNzZiNGNlZjlkMmMzMDI3MTIyMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7F8Bl9cQZMSgayC58vejRjdQ9kn
qgz902AuEx8tdokd4dmGvObFckpYsogVRPYYSg/XpU40CyRoAKRdz5MnNpB1lkW/
T9Ycs075GdzD7WBr/9EvhTtwcV+TdUywqEzhOJ8V1pr35dBcGkvNRwBjh29HGa3p
bpnc0RP8pcclPsI4HPSReuGYECK0M0Nw/Ls1BOptxYq8JaYw57yRU6sahqSq6LLW
vD72VKOOWdFNeXnnzACazxVXF7gYNV/JYzWWNF/Pz7eud+e96aaMx4lrR3jmWQyj
T3ivFxMwr6qelY/mmFMCe0wbCHBSDmc9eBO/f2MCSCwe1JnSvmmhd1vn3wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBbJuycx1u22wddrTO+dLDAnEiAWMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvRnNtN0p6SFc3YmJCMTJ0TTc1MHNNQ2NTSUJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPDQDAN
BgkqhkiG9w0BAQsFAAOCAQEAD8h7hEE328Mj7rEflTX1eqOUZ6i6SsteA1lJ4eHm
vbQp9vGuQHkPXStvjQ3p3Z7v931YqBeRqpAihmMYqYhlgjY1wt3IlMRcqZ7tl3qa
Utdvbu+G5H9MUEifuyiCGeo4p3KifcbVlznJ6cQBwKVSxhSsJjDbqIcyvJyJYvKD
m23jb4Aq5PYdmUmxoMDTrCwXULrf8QSSZ3momzWpGyB5mZOjZ6tdB08ySKNHJ5SQ
dg0iH1le8QfjlG6m9TD2PjYjfkTl32qsxhiYvnqnI2/m0Qcw8ii6Xn1/amFFNP1g
hiiltdOsbxe+wFCL4tVKZ2h3hTNKVAK6ZJKHTEodLYpbXg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 06:21:38 2026 by rpki-client