Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fLLHNtTDfcdAeR7jarBKrPvpmtc.roa
File: fLLHNtTDfcdAeR7jarBKrPvpmtc.roa (raw, json)
Hash identifier: ZFhuCX61ptmyKiYRist4InQVk2htXYdopdZnFiQ57zI=
Subject key identifier: 7C:B2:C7:36:D4:C3:7D:C7:40:79:1E:E3:6A:B0:4A:AC:FB:E9:9A:D7
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A1336412991A000E70ACFFB755911073D7
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fLLHNtTDfcdAeR7jarBKrPvpmtc.roa
Signing time: Tue 13 Oct 2026 03:52:38 +0000
ROA not before: Tue 13 Oct 2026 03:52:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218751
IP address blocks: 2a0e:4001:f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:64:12:99:1a:00:0e:70:ac:ff:b7:55:91:10:73:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 13 03:52:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cb2c736d4c37dc740791ee36ab04aacfbe99ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:c6:cb:00:c6:44:7e:1c:ce:d6:f5:dc:10:
8f:39:46:3d:4b:bc:76:d6:60:99:63:36:34:d0:b1:
6a:c8:84:35:55:2d:67:af:be:06:72:c4:25:b7:7c:
39:d9:c3:b7:9f:e3:ab:24:98:75:e8:d2:66:fc:6f:
7a:41:03:e4:1d:4f:6c:91:66:3f:94:00:f1:ad:d2:
0d:8d:6f:69:50:60:92:6e:1c:36:83:8e:7f:46:2e:
14:25:9b:42:74:d5:25:8e:c1:26:c3:b2:ad:6d:a8:
eb:75:0a:4c:97:fa:05:d0:b1:3f:2b:8b:df:d8:19:
ed:43:f7:2e:f0:24:78:ad:6b:b9:f3:68:eb:68:40:
f0:8a:f8:f1:ad:76:e2:d0:ba:01:53:b7:02:40:88:
78:48:08:ac:15:fd:6b:23:15:e9:2d:8a:fe:0a:81:
43:81:75:da:4d:e3:cb:8d:19:6a:20:10:7a:37:79:
96:3a:76:91:51:e3:2b:bb:9b:27:62:6c:6b:0c:67:
d6:2b:55:92:79:b2:c7:db:f8:b8:e5:a0:29:8c:b4:
e5:17:10:6f:ff:4f:15:80:b5:08:68:d2:c4:54:73:
e0:ba:33:89:ac:88:31:b8:25:f8:7e:94:38:72:f4:
ad:65:37:b8:5f:9d:a5:b5:ac:38:9c:96:0f:99:94:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B2:C7:36:D4:C3:7D:C7:40:79:1E:E3:6A:B0:4A:AC:FB:E9:9A:D7
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fLLHNtTDfcdAeR7jarBKrPvpmtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:f00::/40
Signature Algorithm: sha256WithRSAEncryption
3a:5a:14:8f:62:86:45:d2:6a:8b:ff:06:eb:30:2f:74:c3:33:
61:5d:fc:ca:16:6b:7e:45:72:a0:99:9a:3d:eb:24:d9:6a:c1:
ef:c6:b6:11:52:bf:91:38:8a:29:1b:2f:49:cb:52:14:87:a4:
bd:a6:db:a4:b5:fc:e7:55:7a:53:f5:6d:39:35:e2:0e:2a:21:
c6:8a:be:ad:9f:5f:e6:32:4d:3c:8d:27:76:a8:f4:99:a5:5b:
51:40:28:4a:9a:c6:af:5a:00:44:bb:06:43:03:bb:11:00:cb:
30:85:96:cf:ed:d2:7f:e2:21:5d:25:51:79:79:d0:f5:73:4a:
47:8e:6e:df:d4:b6:85:3c:3c:c1:5f:fc:0f:72:cd:a0:d7:13:
cc:d4:7e:8d:03:06:42:85:de:30:82:bb:02:e3:03:94:3e:96:
e1:81:f4:5d:79:a6:4b:d7:af:ed:47:38:d9:99:24:55:b4:4e:
e4:01:c1:96:10:9b:d1:d2:e4:3e:7e:41:98:a3:13:37:ce:e3:
59:c9:d9:1e:92:b6:c9:94:29:75:f0:24:a8:2c:d4:24:04:b0:
ca:ff:95:1c:ed:37:f7:92:55:eb:81:ad:8e:e4:34:7d:08:88:
8e:ed:4b:01:a4:07:2f:9f:cf:e8:c7:52:e7:cd:6c:b3:f7:f6:
23:c9:b4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 02:43:28 2026 by rpki-client