Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fmCqOYOkgfo8rn-1v67rlyD3wnc.roa
File: fmCqOYOkgfo8rn-1v67rlyD3wnc.roa (raw, json)
Hash identifier: LIqa+VU06QVL/85lhyLr2T+4QB2f1getLV2fFSR4lC0=
Subject key identifier: 7E:60:AA:39:83:A4:81:FA:3C:AE:7F:B5:BF:AE:EB:97:20:F7:C2:77
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019F4E3AD2BB49D8E75F456A940CF12AFAB5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fmCqOYOkgfo8rn-1v67rlyD3wnc.roa
Signing time: Fri 10 Jul 2026 22:51:45 +0000
ROA not before: Fri 10 Jul 2026 22:51:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200950
IP address blocks: 2a10:ccc0:100::/48 maxlen: 48
2a10:ccc0:101::/48 maxlen: 48
2a10:ccc0:102::/48 maxlen: 48
2a10:ccc0:103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 22:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4e:3a:d2:bb:49:d8:e7:5f:45:6a:94:0c:f1:2a:fa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 10 22:51:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e60aa3983a481fa3cae7fb5bfaeeb9720f7c277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:50:f9:2b:7d:59:37:59:61:bb:6f:8e:27:
b2:3f:70:b8:6a:43:a1:80:d0:95:c4:52:1f:a8:3b:
26:b5:af:9e:a6:f4:8e:03:b2:c4:01:a2:4e:c3:df:
c9:63:61:ca:9d:79:47:66:0d:42:c9:a9:21:f2:f1:
bc:2b:6f:36:38:e8:65:74:53:c7:dc:c5:c1:e6:5c:
32:4d:36:ab:ff:3b:d7:15:14:84:4a:1d:e8:f8:59:
05:a6:d8:0d:b9:a7:22:f9:12:fa:ac:2c:bc:8c:7b:
d2:05:f6:f4:62:a4:31:f4:92:cb:c4:12:7f:da:af:
e4:75:98:95:3a:99:b7:38:72:02:56:d6:de:b7:b3:
5a:f2:92:d9:10:0c:23:f1:60:0e:88:a0:a3:e7:e7:
c4:96:b5:04:9b:8b:54:5c:f6:8e:97:62:59:a5:3f:
fa:46:15:4e:11:d6:03:57:62:82:b3:01:95:1b:9f:
9a:f7:21:4f:c8:f7:8a:dd:a1:ef:53:0c:18:1e:40:
d2:58:e4:e8:6a:0a:eb:51:09:f6:cd:44:fb:57:e7:
75:31:fd:c0:02:db:f3:f1:61:64:f1:81:77:bf:20:
4f:c5:cd:1d:6a:30:3f:06:66:93:e2:a3:b9:79:b4:
36:c8:6d:6e:45:c2:f7:de:60:a7:9f:64:ad:a0:7c:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:60:AA:39:83:A4:81:FA:3C:AE:7F:B5:BF:AE:EB:97:20:F7:C2:77
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fmCqOYOkgfo8rn-1v67rlyD3wnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:100::/46
Signature Algorithm: sha256WithRSAEncryption
b6:65:c0:37:85:d7:60:2f:fb:a4:fe:7b:67:82:0d:37:ca:f5:
3c:62:cd:c8:be:0f:09:b9:b6:64:99:d6:44:01:2f:dd:f5:7b:
8c:33:cc:eb:12:b6:29:a6:59:1d:85:7c:2b:34:c8:0d:8f:80:
63:6f:b5:53:80:8e:40:09:83:1b:c5:24:96:81:e5:77:42:95:
f5:e2:a6:1f:a3:ba:7a:01:6f:9a:98:03:6b:5c:0b:aa:39:2b:
12:d3:9d:47:fe:df:60:2d:e3:a1:65:4a:d2:5a:e0:f8:96:6e:
8f:25:65:0f:87:57:d0:55:c0:2f:90:22:51:b6:cc:95:ca:b4:
91:72:29:44:7b:31:f6:cb:08:3b:40:d3:fc:04:c1:27:0d:ff:
40:04:e7:57:68:35:97:07:67:d5:48:c6:e0:40:2d:12:a0:0b:
2f:d6:22:d9:f4:37:77:d5:04:7e:f5:dd:65:54:6f:d9:9b:23:
e9:34:65:ff:c6:42:7f:00:d7:39:b5:12:16:c1:14:a6:8c:ea:
20:1d:ca:5f:eb:d6:d2:82:1e:c0:46:71:6a:ae:29:88:9f:f9:
31:8a:bf:6d:3e:82:43:ff:69:cb:fa:0c:73:b9:d4:7a:7a:4a:
b6:03:57:b4:20:b4:02:be:1b:0a:f7:01:91:93:70:e3:bf:14:
71:00:e4:29
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ9OOtK7SdjnX0VqlAzxKvq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwNzEwMjI1MTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTYwYWEzOTgzYTQ4MWZhM2NhZTdmYjViZmFlZWI5NzIwZjdjMjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHRQ+St9WTdZYbtvjieyP3C4akOh
gNCVxFIfqDsmta+epvSOA7LEAaJOw9/JY2HKnXlHZg1Cyakh8vG8K282OOhldFPH
3MXB5lwyTTar/zvXFRSESh3o+FkFptgNuaci+RL6rCy8jHvSBfb0YqQx9JLLxBJ/
2q/kdZiVOpm3OHICVtbet7Na8pLZEAwj8WAOiKCj5+fElrUEm4tUXPaOl2JZpT/6
RhVOEdYDV2KCswGVG5+a9yFPyPeK3aHvUwwYHkDSWOToagrrUQn2zUT7V+d1Mf3A
Atvz8WFk8YF3vyBPxc0dajA/BmaT4qO5ebQ2yG1uRcL33mCnn2StoHyKuwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH5gqjmDpIH6PK5/tb+u65cg98J3MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZm1DcU9ZT2tnZm84cm4tMXY2N3JseUQzd25jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKhDMwAEA
MA0GCSqGSIb3DQEBCwUAA4IBAQC2ZcA3hddgL/uk/ntngg03yvU8Ys3Ivg8JubZk
mdZEAS/d9XuMM8zrErYpplkdhXwrNMgNj4Bjb7VTgI5ACYMbxSSWgeV3QpX14qYf
o7p6AW+amANrXAuqOSsS051H/t9gLeOhZUrSWuD4lm6PJWUPh1fQVcAvkCJRtsyV
yrSRcilEezH2ywg7QNP8BMEnDf9ABOdXaDWXB2fVSMbgQC0SoAsv1iLZ9Dd31QR+
9d1lVG/ZmyPpNGX/xkJ/ANc5tRIWwRSmjOogHcpf69bSgh7ARnFqrimIn/kxir9t
PoJD/2nL+gxzudR6ekq2A1e0ILQCvhsK9wGRk3DjvxRxAOQp
-----END CERTIFICATE-----
Generated at Sat Jul 11 03:51:55 2026 by rpki-client