Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fftz6l_G9gskZQ2llilvAHpclk8.roa
File: Fftz6l_G9gskZQ2llilvAHpclk8.roa (raw, json)
Hash identifier: rSjugnGes6gyzfzTSoEFZg3H7WizwT4rkwI5SOxvgLw=
Subject key identifier: 15:FB:73:EA:5F:C6:F6:0B:24:65:0D:A5:96:29:6F:00:7A:5C:96:4F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019ED6B5F581F52670AF875D53496FA22737
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fftz6l_G9gskZQ2llilvAHpclk8.roa
Signing time: Wed 17 Jun 2026 17:51:49 +0000
ROA not before: Wed 17 Jun 2026 17:51:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214243
IP address blocks: 2a06:de00:7f1::/48 maxlen: 48
2a0e:97c0:471::/48 maxlen: 48
2a0e:97c0:4c0::/44 maxlen: 48
2a0e:97c0:4c1::/48 maxlen: 48
2a0e:97c0:4c2::/48 maxlen: 48
2a0e:97c0:4c3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:b5:f5:81:f5:26:70:af:87:5d:53:49:6f:a2:27:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 17 17:51:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15fb73ea5fc6f60b24650da596296f007a5c964f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:9e:4c:30:5e:3b:b5:83:17:07:b1:94:32:
16:05:5e:84:52:76:9b:8c:c0:01:0c:23:eb:3a:11:
ba:d4:88:7b:ca:93:fd:ba:52:70:85:50:86:b8:f8:
27:1c:3b:45:f8:e9:9e:8a:69:d2:fe:bd:69:94:9a:
b0:ad:90:ff:af:fe:c2:ef:2b:fb:ca:57:d1:49:90:
b1:ec:99:44:54:a3:4a:33:b8:fc:c1:14:08:a4:6d:
c7:02:81:c3:16:b0:8e:89:f0:39:da:e0:46:cf:5f:
fd:2f:0c:20:29:4a:8f:55:05:21:2f:f9:6c:31:15:
fd:9c:eb:d1:3d:2e:a2:bf:71:87:cd:b2:20:c7:1c:
f3:d7:db:22:d0:4c:6a:9a:87:45:6a:a7:45:9b:ba:
1c:bc:65:ad:40:46:90:92:0e:b0:1d:bd:db:34:af:
05:57:75:21:c8:34:81:85:3c:6b:18:84:6b:22:2f:
e8:96:4f:f6:dd:69:4f:40:bd:8a:cf:df:4b:88:c7:
9f:e5:c6:8f:b9:0e:9d:65:05:d4:13:4f:af:cf:39:
a6:0b:f6:6e:cd:80:18:71:51:cd:aa:f9:98:07:cc:
e3:c4:a7:75:51:ab:9a:db:c5:4e:7f:fe:a7:0c:67:
dc:ce:2f:e0:0b:ca:a0:5c:af:68:f1:f1:f7:31:8a:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FB:73:EA:5F:C6:F6:0B:24:65:0D:A5:96:29:6F:00:7A:5C:96:4F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fftz6l_G9gskZQ2llilvAHpclk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:7f1::/48
2a0e:97c0:471::/48
2a0e:97c0:4c0::/44
Signature Algorithm: sha256WithRSAEncryption
17:8f:05:b1:3a:e5:05:d9:89:32:3f:7a:a7:b0:65:95:48:99:
e1:d0:b5:0d:fd:43:b7:d2:98:c8:db:85:e1:62:35:32:5f:03:
6b:f6:0d:2a:c6:34:ca:9e:86:62:42:35:f7:02:af:4d:c6:5e:
36:2f:7d:1f:12:eb:0d:d9:53:2c:c8:2b:22:5d:46:3e:fc:22:
86:e5:46:dc:32:cb:50:65:83:47:15:f7:5d:29:a3:7b:61:8f:
be:c4:0b:95:3b:c4:22:0f:39:a4:f3:a2:2f:dc:d4:11:ed:a7:
ca:41:93:32:0d:f4:07:90:4b:65:53:f1:d5:9e:f3:0b:39:46:
d4:d2:a8:b5:9e:74:aa:a4:54:8b:61:fa:27:4c:a8:e5:b1:b3:
2d:35:71:ec:c4:26:12:82:af:cd:aa:45:ae:96:87:60:e7:09:
68:1e:9a:b4:8e:7d:c6:4a:d3:81:f9:82:90:62:26:48:91:b0:
b2:6b:94:1c:91:e7:ca:9c:f6:a6:c7:14:c6:60:eb:7d:94:74:
b3:6b:b1:c2:51:05:f2:8d:6b:bf:47:23:2b:46:45:ab:cb:50:
5c:c0:1f:c3:63:95:02:88:57:df:2d:76:49:57:50:c7:cc:b5:
c9:b5:7e:db:d9:1b:db:78:67:67:3a:6f:1d:03:e1:88:7e:9b:
34:4a:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 06:31:39 2026 by rpki-client