Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/FOFTEst8oF0q0X3OdQgxLZ9oed8.roa
File: FOFTEst8oF0q0X3OdQgxLZ9oed8.roa (raw, json)
Hash identifier: g3Bb+RZcj9ZCWcwsCCB0Hz+Q7AkmMt0+i5iC3617N+w=
Subject key identifier: 14:E1:53:12:CB:7C:A0:5D:2A:D1:7D:CE:75:08:31:2D:9F:68:79:DF
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019E30F6BBA05543C616966E9BD496467E6E
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/FOFTEst8oF0q0X3OdQgxLZ9oed8.roa
Signing time: Sat 16 May 2026 13:25:36 +0000
ROA not before: Sat 16 May 2026 13:25:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 195.238.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:f6:bb:a0:55:43:c6:16:96:6e:9b:d4:96:46:7e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: May 16 13:25:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14e15312cb7ca05d2ad17dce7508312d9f6879df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:d6:b2:ee:ee:de:3b:1c:e4:bf:e2:93:aa:
d8:da:eb:dc:66:5a:f3:4c:cc:53:bf:eb:24:a1:d3:
15:c7:83:c7:0c:f1:58:af:e9:42:4b:54:d5:89:7e:
e5:fd:39:30:22:24:12:03:27:24:6b:08:78:22:c6:
09:e7:00:d8:57:10:3d:c8:e8:b7:11:f4:55:75:f4:
32:a3:1d:07:54:4c:00:3c:c4:17:a8:5c:5a:b7:73:
9c:b1:c1:7c:70:5f:c0:72:92:62:dc:b1:e3:ad:9d:
f9:b2:55:8e:f7:ad:6b:92:6a:ba:81:c2:98:21:13:
27:96:48:6f:5a:ff:85:e7:45:b7:1d:70:7b:db:35:
75:9d:7f:28:a7:3f:c1:13:92:b8:47:a9:57:50:28:
20:96:28:0e:56:c1:08:da:c7:6b:0a:e4:59:60:70:
fb:39:07:f4:9f:ae:39:3b:1a:51:c7:be:c4:06:99:
7f:ca:33:79:85:d3:35:34:a9:8a:eb:ca:af:46:85:
c8:e4:76:99:62:61:19:e8:56:61:be:66:bb:e6:ae:
97:0b:b7:ff:f3:5a:5f:00:aa:f2:49:27:fa:25:6d:
f5:0d:29:58:37:a6:35:2c:d1:17:ea:d1:3a:82:57:
c1:12:6b:33:4f:8e:2c:47:3f:ae:18:b3:86:3f:de:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E1:53:12:CB:7C:A0:5D:2A:D1:7D:CE:75:08:31:2D:9F:68:79:DF
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/FOFTEst8oF0q0X3OdQgxLZ9oed8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.96.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b0:a9:82:21:51:56:8c:7b:7c:57:18:88:8a:16:eb:a5:54:
2e:04:da:24:1b:13:63:ba:c3:fc:8c:ec:8a:3a:36:a4:73:b0:
d6:d5:a8:48:68:ad:dd:eb:17:18:5b:71:5c:ad:c9:33:fd:1f:
5b:c6:2f:19:a7:97:a2:86:5b:f1:b9:f8:52:ba:d8:36:fa:42:
15:d3:0e:4a:26:d6:52:b1:ae:b5:db:d1:8f:7d:b8:39:17:ee:
74:24:65:01:cd:ba:7e:b3:6b:53:87:c6:0a:bd:b6:8a:e2:50:
69:5a:9e:fc:10:c1:4f:c1:4f:fd:7c:30:af:2e:7d:c0:44:95:
06:53:06:6c:a7:5f:2c:f0:2c:24:bd:15:2c:73:f1:6f:b4:d5:
c8:6b:94:bc:d1:72:ac:4d:a5:d5:85:f2:7f:a9:f4:7e:1a:fa:
4a:b4:5e:fa:c6:3c:50:cc:87:cd:78:b7:a1:46:fb:ef:c9:47:
75:b9:a5:c3:70:63:cb:c1:0f:33:5d:45:80:6e:bf:b8:97:cd:
26:14:e1:34:68:18:bb:f3:33:9a:af:38:4a:1e:f2:ab:bc:59:
e1:03:96:b5:f4:e4:25:cb:1e:57:b8:0f:84:27:f3:cd:ab:2d:
19:3f:f2:12:f2:a0:50:bd:c3:51:89:ad:33:b3:d4:1e:98:6c:
53:15:21:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 07:54:14 2026 by rpki-client