Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/FjAjA5JSu9iSdMI9FTN4lABeYFw.roa
File: FjAjA5JSu9iSdMI9FTN4lABeYFw.roa (raw, json)
Hash identifier: kvmXzF7dgjne11SruvyJWpKtLvX+cnEpTrh80qXwd0A=
Subject key identifier: 16:30:23:03:92:52:BB:D8:92:74:C2:3D:15:33:78:94:00:5E:60:5C
Certificate issuer: /CN=a50caf9c361def48c0933321be05183a83a7bfc9
Certificate serial: 019F23688328113DB6A7512702C875BEAC10
Authority key identifier: A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/FjAjA5JSu9iSdMI9FTN4lABeYFw.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33011
IP address blocks: 185.235.236.0/22 maxlen: 24
2a0d:8100::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:83:28:11:3d:b6:a7:51:27:02:c8:75:be:ac:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50caf9c361def48c0933321be05183a83a7bfc9
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=163023039252bbd89274c23d15337894005e605c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:96:6a:4a:58:f3:54:3e:5d:d3:98:41:2a:
7b:04:97:7a:86:4b:ce:df:5e:03:d3:e6:f0:fc:7e:
6f:df:9e:3c:4e:1d:2d:84:11:ce:10:2b:94:d5:b4:
32:25:b7:84:71:bc:a2:e5:35:b1:81:93:5e:32:fb:
c9:c7:e0:b6:f8:46:4c:64:a4:7f:e5:c9:18:c9:3e:
a7:b6:3c:73:ea:0f:06:58:62:bf:8c:ca:bf:a3:a6:
ad:1b:1d:f5:eb:64:d6:c7:6d:b3:c5:30:11:e6:be:
d7:10:1c:ae:01:9b:51:bc:00:a4:db:f6:bd:4b:6b:
5a:ea:ce:bb:e6:3b:34:ab:c8:b5:2a:70:34:20:8d:
19:3b:aa:b6:a0:1f:07:48:bb:4a:7c:f2:06:8e:81:
a4:da:0d:c2:01:01:49:d6:84:ff:72:41:51:41:1c:
b2:c3:65:73:ff:5b:db:36:06:0a:5d:34:d3:87:e7:
0b:05:ed:1b:69:3a:80:d9:35:5b:d4:c9:77:6f:be:
d7:f2:55:76:b4:d8:20:2e:6b:78:70:dc:a8:13:62:
30:07:eb:57:ac:3d:66:a0:63:0e:e2:02:79:fa:97:
1f:fc:95:56:c2:10:a1:5f:ac:54:61:90:76:ab:d8:
84:ab:cc:0a:10:f0:bd:8b:79:65:77:2b:8e:bb:79:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:30:23:03:92:52:BB:D8:92:74:C2:3D:15:33:78:94:00:5E:60:5C
X509v3 Authority Key Identifier:
keyid:A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/FjAjA5JSu9iSdMI9FTN4lABeYFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.236.0/22
IPv6:
2a0d:8100::/32
Signature Algorithm: sha256WithRSAEncryption
d7:30:44:ad:7f:10:d6:ee:04:a9:df:70:a3:6c:be:ef:17:5c:
a1:1a:02:c9:a2:cf:5f:d6:42:b8:64:bd:3c:b0:d4:75:e6:fa:
35:d3:c6:f1:3e:67:13:55:94:e9:7b:60:90:dc:c2:50:1e:5e:
b9:43:cd:b3:ee:64:c5:7d:f0:da:cb:15:99:f6:2b:63:f4:a9:
c6:e8:01:bf:94:8f:c6:31:dd:8b:17:f6:2d:bd:3e:0d:f2:ae:
6b:1b:69:19:3e:27:ea:9f:71:3f:24:60:c6:6c:43:c0:2f:0d:
fd:6a:fb:93:4f:1f:19:96:78:6b:ba:7c:b8:e3:4a:e9:34:59:
cd:b8:b7:88:60:e5:ea:7c:9a:1c:6d:7e:aa:ad:cd:03:40:05:
4e:b3:a2:7a:70:fd:fb:67:81:a2:7f:ee:c4:f0:28:b4:49:f2:
d3:eb:cc:35:9b:58:b0:75:ef:fc:01:31:bc:f7:f9:6f:24:4f:
98:91:d6:6a:ba:a5:59:8a:a7:76:c1:a6:e9:f7:ed:75:46:6d:
9a:7b:31:66:f9:98:95:45:8a:a3:1d:13:1e:b1:6b:c9:da:b1:
26:fd:aa:82:c4:1b:a6:4f:75:5d:dd:b4:50:25:ca:cf:ff:56:
56:04:77:4d:62:3f:35:ea:37:94:88:42:49:a6:f5:33:de:2f:
57:47:5a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:11 2026 by rpki-client