Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fnetDBrDR2OL-8Zff0C1crgRRaQ.roa
File: fnetDBrDR2OL-8Zff0C1crgRRaQ.roa (raw, json)
Hash identifier: rvuRNNz0YjfBoF0lEGwqhEelORqrFHMfqUzTqReKAII=
Subject key identifier: 7E:77:AD:0C:1A:C3:47:63:8B:FB:C6:5F:7F:40:B5:72:B8:11:45:A4
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019FFEBB7D6209192ACA49E49100DA0D7E2D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fnetDBrDR2OL-8Zff0C1crgRRaQ.roa
Signing time: Fri 14 Aug 2026 05:25:27 +0000
ROA not before: Fri 14 Aug 2026 05:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6206
IP address blocks: 45.88.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Aug 2026 13:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:bb:7d:62:09:19:2a:ca:49:e4:91:00:da:0d:7e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 14 05:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e77ad0c1ac347638bfbc65f7f40b572b81145a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:c7:b4:cc:a7:cf:d0:c1:4f:60:7c:87:30:
7c:7a:24:cd:ee:c5:a7:bf:2b:ca:ed:95:f0:34:8e:
f8:86:6d:2f:d9:9b:40:30:fb:45:7f:b4:98:d4:4e:
11:04:c6:69:e4:7c:f1:04:43:06:b6:33:67:24:d1:
66:36:87:32:d5:5d:65:3c:0a:0d:70:cd:b7:2c:bc:
25:22:1d:7e:a9:ef:aa:b4:6d:22:50:0e:25:6b:00:
a0:09:bd:f3:63:a3:bb:9a:bb:40:75:5a:10:84:5e:
66:fa:ef:ac:06:6c:3b:82:75:0e:49:7b:c7:4b:84:
86:8d:77:e9:a4:aa:bf:c9:f4:1c:e2:1d:f6:d3:8d:
b3:13:cb:b4:a9:25:f4:d4:ef:f2:b0:5a:9f:e7:22:
ef:93:22:af:b4:35:54:61:18:8c:3a:df:9c:c6:57:
11:97:a7:68:bb:e1:30:e3:38:c7:e6:1d:02:3a:90:
d0:4c:50:d8:a1:04:4c:04:04:2b:03:e6:24:8a:7d:
3a:de:00:f3:5f:ae:c3:c9:7a:4e:36:d2:6c:53:1a:
80:f3:75:3f:9e:2d:30:99:69:f6:14:e1:34:ec:87:
a1:37:1a:4e:14:0c:f2:32:42:42:c8:ad:c3:f0:37:
2a:93:11:6c:96:2d:54:bf:58:8a:4a:f8:46:3d:a0:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:77:AD:0C:1A:C3:47:63:8B:FB:C6:5F:7F:40:B5:72:B8:11:45:A4
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fnetDBrDR2OL-8Zff0C1crgRRaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1b:e4:fb:2f:11:68:73:2d:e5:ae:ce:06:7b:12:e3:99:1c:
23:93:52:af:bb:e6:60:6c:a4:0d:38:a1:2b:34:94:0a:48:ba:
e4:a8:04:0d:9f:78:a8:b8:59:03:38:a8:05:6b:e8:35:f8:2e:
9d:f3:b5:8a:72:d8:40:87:12:3d:d1:71:56:70:c3:38:b0:73:
c9:e0:8d:17:7e:e4:3a:b0:e6:6a:92:76:5a:15:5e:83:32:37:
ad:25:73:3d:ef:54:5e:10:93:93:7e:c9:4c:7f:16:fe:46:ab:
9b:4a:45:cd:61:01:32:ce:aa:99:96:b1:9b:48:55:5b:c2:bd:
15:a8:7a:ba:3a:97:e3:4d:5b:f9:ff:27:f4:60:cd:d1:3b:a0:
b5:da:a7:53:bf:53:73:42:73:b9:21:08:ac:15:6d:c0:3d:95:
2a:2f:21:b5:94:28:cf:74:ae:bf:3e:bc:a3:f3:46:30:4a:4f:
16:25:fd:f0:27:22:32:03:18:40:b2:df:8d:f2:2e:73:5d:b2:
81:7b:19:69:45:68:be:06:6c:c1:a9:b8:83:f9:10:02:90:7e:
1c:03:55:80:29:1b:76:8b:39:89:5a:da:1e:37:a4:08:64:5c:
23:c1:42:33:b0:34:c0:21:1a:44:71:99:bc:c4:01:e4:5a:36:
22:72:a1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 21:30:56 2026 by rpki-client