Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fpf9iRhelrotI3htnG48VXG2HIY.roa
File: fpf9iRhelrotI3htnG48VXG2HIY.roa (raw, json)
Hash identifier: LQWX74Yg1ywV1EeA6/i+LNb4uwcsP0gFHqqCB8gAZQw=
Subject key identifier: 7E:97:FD:89:18:5E:96:BA:2D:23:78:6D:9C:6E:3C:55:71:B6:1C:86
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A07D5819A43864B4E247071FD156C8EFD7
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fpf9iRhelrotI3htnG48VXG2HIY.roa
Signing time: Mon 07 Sep 2026 19:28:40 +0000
ROA not before: Mon 07 Sep 2026 19:28:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 91.201.87.0/24 maxlen: 24
91.227.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:58:19:a4:38:64:b4:e2:47:07:1f:d1:56:c8:ef:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 7 19:28:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e97fd89185e96ba2d23786d9c6e3c5571b61c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:74:c3:7d:91:f5:7d:77:27:d8:df:a5:b9:
0b:0a:45:93:40:f8:d9:95:67:15:75:f0:f9:29:2b:
c1:0e:20:f6:c1:fa:65:4a:3f:f2:97:94:1a:b0:8c:
78:1b:a1:48:b2:1e:e8:02:9c:38:a8:9f:aa:aa:6b:
e8:0a:3d:3f:85:fa:96:9c:57:a5:d1:47:4f:29:53:
33:14:23:47:b8:ac:f8:cc:2a:15:28:6f:8f:6d:cf:
ab:22:d6:db:47:96:55:11:ee:56:63:45:bb:11:d3:
7b:2c:27:bc:de:37:69:04:7a:7c:4e:80:de:92:35:
f4:75:77:a2:9c:ec:3c:64:6c:02:42:c9:c9:fc:31:
ca:04:21:93:43:25:59:12:32:c4:61:28:d4:ba:5c:
8e:2d:11:67:b9:74:e5:59:a4:48:81:54:5f:8c:65:
59:a5:10:86:81:c3:b1:f5:ac:59:73:40:7b:6d:d4:
a5:d6:63:85:b6:d6:cd:da:87:ec:df:6c:83:69:94:
a8:95:b5:65:3a:7b:df:7d:42:3e:bc:cd:ba:e5:cd:
1c:6f:10:ed:fa:c4:19:cd:3c:9f:5e:81:ff:2e:0d:
25:3a:c4:d9:0e:78:85:57:de:89:b7:18:d1:1a:e3:
50:23:e9:01:7f:d4:05:b1:3e:54:df:8f:a6:b8:ea:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:97:FD:89:18:5E:96:BA:2D:23:78:6D:9C:6E:3C:55:71:B6:1C:86
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fpf9iRhelrotI3htnG48VXG2HIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.87.0/24
91.227.114.0/24
Signature Algorithm: sha256WithRSAEncryption
94:34:6a:80:59:5b:ae:ac:2e:e5:d3:1a:fc:9f:1d:74:23:d7:
f8:bb:c5:a8:09:44:6b:0c:17:c0:77:33:73:b3:63:71:ee:41:
cf:31:e3:94:c5:67:c3:f0:85:53:e9:a4:9b:c4:62:74:2c:37:
f6:b2:ff:15:8c:fd:0b:ca:fb:7c:59:93:32:17:ca:62:5c:b4:
0c:c0:76:05:b9:22:a7:ca:51:56:ea:c9:5b:47:3f:39:d5:44:
7c:ef:82:d8:4c:39:b2:b6:ba:fd:59:10:52:e3:79:77:31:49:
2a:b5:01:23:ac:7a:ed:bf:f2:f1:a2:c8:b0:f0:7c:75:41:f6:
3a:ac:88:7f:70:5d:8e:c0:4b:c9:48:fb:bd:75:47:bd:65:ea:
a5:95:16:98:6c:9b:22:4a:ec:7f:e8:99:7e:4b:3c:03:a2:a2:
f5:65:4b:65:51:c4:33:f9:be:c9:78:9d:c9:1d:c1:08:0c:0c:
f5:dd:84:71:d4:bd:52:0e:9d:8a:c9:74:81:6f:23:cb:66:e6:
2c:4d:71:8c:60:8c:76:f5:02:19:49:35:e8:16:8a:2f:cd:14:
06:1f:ec:45:39:b8:13:ae:17:5e:6c:d0:e4:e2:ae:97:3f:41:
16:1e:a5:60:ec:d2:ae:16:22:54:ed:c4:76:42:81:ec:1b:a3:
88:83:a3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 03:40:28 2026 by rpki-client