Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FzSKjbylvb9xgfjjDx5mwbwO32w.roa
File: FzSKjbylvb9xgfjjDx5mwbwO32w.roa (raw, json)
Hash identifier: ++N1CxO3mKyU0dScVpkRfgD7EMPJvJHrB+NphW1RBws=
Subject key identifier: 17:34:8A:8D:BC:A5:BD:BF:71:81:F8:E3:0F:1E:66:C1:BC:0E:DF:6C
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E0DE254DD5FAEAD02BDF24549488C45D9
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FzSKjbylvb9xgfjjDx5mwbwO32w.roa
Signing time: Sat 09 May 2026 17:56:37 +0000
ROA not before: Sat 09 May 2026 17:56:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a05:9a40::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a14:1101::/32 maxlen: 32
2a14:1102::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 17:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:e2:54:dd:5f:ae:ad:02:bd:f2:45:49:48:8c:45:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 9 17:56:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17348a8dbca5bdbf7181f8e30f1e66c1bc0edf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5e:ad:5c:15:89:86:c9:e6:5b:e0:48:04:43:
1b:a1:02:68:b5:97:c4:a5:ed:74:1f:23:be:f2:61:
57:99:af:a1:e0:fe:e6:ef:48:65:4f:bd:fc:2d:f7:
39:36:51:07:0e:e1:43:f7:87:cb:f2:1e:57:ba:30:
9c:16:be:a8:e7:f9:f3:44:02:e3:66:9c:a2:ae:ba:
1c:5b:ae:2b:d0:f9:a8:8c:23:94:c0:28:40:3d:eb:
52:48:59:0e:64:b0:d8:d9:c8:8b:cf:44:d8:80:5d:
12:68:20:1f:d4:78:e8:1e:2e:33:75:a2:2b:b0:2d:
7c:c8:b6:07:74:2d:59:4a:e4:4d:52:85:7a:2f:e4:
b0:07:a6:26:62:40:d5:ea:37:7f:f6:8d:02:b8:3d:
6e:94:cd:be:3d:27:61:bd:4b:a7:aa:d3:b9:23:cc:
7c:3d:96:de:3a:95:15:38:17:0b:54:71:23:ce:4a:
64:d9:45:4a:b4:1b:6c:87:97:01:2c:12:78:74:88:
21:46:ca:5f:3e:9a:a8:b8:66:52:de:47:15:9d:0c:
74:c8:b0:e9:be:af:5a:ba:c4:42:b2:c0:d3:86:14:
97:f2:3a:e0:5f:51:20:2f:9a:a8:88:01:f3:f9:45:
b5:74:05:cb:80:d5:19:20:4b:92:ae:fb:a4:3e:93:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:34:8A:8D:BC:A5:BD:BF:71:81:F8:E3:0F:1E:66:C1:BC:0E:DF:6C
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FzSKjbylvb9xgfjjDx5mwbwO32w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a10:b40::/29
2a14:1101::-2a14:1103:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
77:e0:1d:d5:78:06:06:e5:c1:e3:4b:8c:c6:19:f2:22:4b:44:
a7:68:62:a6:ca:4a:86:9b:73:e2:12:73:c4:39:d4:c6:8b:dc:
28:d4:72:f6:43:33:2a:69:91:bb:a5:aa:9b:4b:a7:b6:e7:61:
8f:92:d9:45:67:7f:fe:71:ed:c5:3d:fa:94:d5:2f:30:70:58:
39:78:52:86:80:79:48:2d:07:ba:22:e9:f6:92:68:73:6c:0c:
3a:8a:d8:36:b1:09:ac:c7:f2:46:2f:fa:d7:8b:0d:cd:a3:9f:
57:e8:b2:1d:c9:c1:68:9b:8d:39:b4:44:58:59:db:70:51:ff:
2b:62:35:70:6e:ad:02:71:10:5f:3e:b1:48:e6:42:11:cf:14:
bc:19:d7:7d:98:b3:c0:e8:b8:5c:86:7e:86:0c:cd:d9:e3:8e:
1e:c5:d2:f4:0a:1a:61:c7:7b:c1:33:a0:32:41:46:f1:0c:66:
cc:33:e2:d9:07:99:12:d4:e4:56:f2:98:31:ff:07:8b:19:58:
f6:0c:22:88:8e:1c:c4:38:e7:08:d2:e2:95:d9:c7:ca:65:49:
c1:00:27:8f:5e:d7:2e:3f:a9:ab:3a:41:76:9b:16:02:99:1a:
81:6e:a4:c2:29:e9:82:c9:e5:64:4f:c7:9d:35:58:8a:40:bf:
e7:e1:90:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 00:20:36 2026 by rpki-client