Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/f0XaU3JRJ6K9MeezgzrxaojrB30.roa
File: f0XaU3JRJ6K9MeezgzrxaojrB30.roa (raw, json)
Hash identifier: ZXixPs38PlSZh6YZgQu2MOsCMeK7oZ2WYXWbH9QLltM=
Subject key identifier: 7F:45:DA:53:72:51:27:A2:BD:31:E7:B3:83:3A:F1:6A:88:EB:07:7D
Certificate issuer: /CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Certificate serial: 019F2368E3A39729627149E4296F64BF2204
Authority key identifier: A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/f0XaU3JRJ6K9MeezgzrxaojrB30.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41963
IP address blocks: 91.102.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e3:a3:97:29:62:71:49:e4:29:6f:64:bf:22:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f45da53725127a2bd31e7b3833af16a88eb077d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:98:cb:03:a9:9f:e6:26:c6:47:0f:e2:29:
4a:f1:12:13:26:1c:a0:7c:20:4c:dd:7c:3e:db:32:
5d:87:17:17:ad:e4:d8:f9:10:78:de:8a:d6:7f:48:
94:9b:9e:53:fe:40:78:8c:80:cf:2e:2c:32:2d:6c:
0a:5b:97:82:26:1d:d6:54:19:e3:91:51:38:7b:1f:
b5:0a:5a:fe:26:ed:5e:02:e7:07:6a:0a:8c:73:85:
f4:9b:91:10:d9:96:96:08:ae:32:9c:d7:ed:64:35:
0c:93:57:ec:0d:f5:6d:16:5a:c9:68:07:9d:2a:74:
6c:f0:d5:50:59:a6:28:6c:f0:05:57:1c:18:b8:cd:
6d:43:02:6e:f4:fd:30:19:b1:96:6a:37:64:e0:bc:
27:cf:aa:27:70:64:90:e9:32:b0:e3:a2:b8:e2:d5:
e1:07:cb:f0:bd:77:60:ee:a9:64:45:c6:30:53:6a:
49:86:bb:51:7f:a8:99:f9:53:bd:77:34:02:ff:71:
84:0e:21:73:9e:dc:ad:01:00:54:eb:b8:45:09:ad:
75:94:0b:7e:47:e9:a9:e9:51:a6:4e:70:8f:5e:fe:
19:72:a5:fc:36:78:ba:5d:4e:17:a8:64:4f:d3:d1:
92:ce:c8:28:e1:9e:67:85:98:37:a3:31:30:d3:77:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:45:DA:53:72:51:27:A2:BD:31:E7:B3:83:3A:F1:6A:88:EB:07:7D
X509v3 Authority Key Identifier:
keyid:A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/f0XaU3JRJ6K9MeezgzrxaojrB30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.184.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:92:ff:81:73:1a:a5:e2:a6:54:57:30:34:31:85:be:cc:b1:
db:a4:ed:b1:f3:2f:ef:ba:60:d7:1a:fd:db:5a:00:26:cc:2a:
cc:8a:66:06:4b:b8:a5:08:06:38:45:cf:36:ee:cf:1f:b7:72:
bf:6a:9b:c1:39:ce:bd:0d:83:2b:79:89:5f:74:64:da:f6:17:
b8:44:13:aa:c6:2e:97:19:60:e0:3f:c7:f7:b5:00:4e:95:e2:
db:3f:d6:05:ea:35:ab:e9:53:ff:55:42:f0:33:95:94:d8:a9:
55:17:63:79:d2:00:37:78:4f:2a:ca:66:26:61:08:54:0a:d0:
ce:48:fa:6b:e7:01:3f:2b:f6:6f:07:ec:99:c0:95:81:54:35:
3c:bc:de:77:2b:42:35:28:f1:3f:7c:e2:40:cd:b8:a5:35:7a:
e3:bb:b3:bd:f0:b9:53:f5:83:55:00:39:59:ba:d9:71:d6:3f:
ab:4f:fb:6b:19:be:d0:d9:9e:cf:c6:0f:92:71:fa:79:bb:ef:
57:ba:ee:90:5c:b6:c1:fc:10:46:4f:35:58:b1:5b:26:43:33:
d5:7d:d2:f0:8a:43:bb:a6:a1:3a:73:29:ae:f6:5d:ab:c4:ad:
25:9b:a6:97:6b:ab:34:f9:1d:e5:30:3d:f8:9a:0c:c0:2f:6b:
3e:62:e4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:13 2026 by rpki-client