Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/FfymfK-iuzb1JdnYXMOl5pLstXI.roa
File: FfymfK-iuzb1JdnYXMOl5pLstXI.roa (raw, json)
Hash identifier: 18RDi8Fy7lRWFVvvAwZefboYWg4G8IK1O4pRO4KNCd0=
Subject key identifier: 15:FC:A6:7C:AF:A2:BB:36:F5:25:D9:D8:5C:C3:A5:E6:92:EC:B5:72
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A04E9E517F6230AB4683774F138F903246
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/FfymfK-iuzb1JdnYXMOl5pLstXI.roa
Signing time: Sat 29 Aug 2026 17:43:13 +0000
ROA not before: Sat 29 Aug 2026 17:43:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218885
IP address blocks: 2a06:9801:f9a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4e:9e:51:7f:62:30:ab:46:83:77:4f:13:8f:90:32:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 29 17:43:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15fca67cafa2bb36f525d9d85cc3a5e692ecb572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f7:32:10:d3:5e:dd:24:95:2d:5f:f6:e8:31:
21:5d:47:47:55:15:d9:02:fd:6d:8c:e8:e3:30:29:
df:91:29:e1:e4:98:92:a2:ca:91:f1:bb:52:a1:96:
82:73:41:17:c7:c3:1a:b4:9b:fa:6e:5e:30:cd:64:
50:75:db:60:a8:c6:89:69:fa:05:52:dd:54:8c:f3:
6b:3d:5d:60:b3:7b:b0:c0:cf:01:fc:7f:35:fa:f0:
e8:e7:f3:c0:c4:9b:80:40:dd:49:8c:81:a6:57:03:
bd:21:2b:90:e9:9b:0b:11:45:ca:f9:b2:3a:49:db:
d9:b4:68:4c:22:7a:d8:2b:86:5c:bf:5c:12:a9:72:
dc:cd:bb:8c:e0:ec:ac:ca:93:d6:07:76:94:be:05:
90:65:79:21:9b:1d:88:25:3f:55:4b:f6:6e:bd:bc:
29:75:c4:7b:6f:c1:6e:0e:fe:fc:7f:81:1a:07:90:
16:67:d0:f7:0f:7a:c4:3b:67:eb:05:4c:63:2b:87:
14:a3:da:ee:52:62:1f:9f:59:d6:f8:72:cb:40:79:
49:84:58:fa:8f:52:a0:b0:0c:d9:00:56:13:02:e4:
06:40:3e:cc:ed:cd:e6:fa:1c:f0:69:ac:5d:25:86:
a0:cb:c8:0d:5f:76:f5:f9:d8:72:9e:92:3d:69:d6:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FC:A6:7C:AF:A2:BB:36:F5:25:D9:D8:5C:C3:A5:E6:92:EC:B5:72
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/FfymfK-iuzb1JdnYXMOl5pLstXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f9a::/48
Signature Algorithm: sha256WithRSAEncryption
82:c8:33:58:ea:d9:0e:84:c9:34:4c:7c:8a:85:ed:0b:e5:31:
45:f7:87:0f:61:e6:ea:88:7b:fe:32:39:64:04:63:e1:f9:9d:
a0:61:f1:5e:04:30:27:0c:8b:13:6b:89:f3:64:c4:43:1d:17:
78:6a:27:32:3b:ad:17:d7:c0:fe:48:48:09:7f:b3:a4:2d:7c:
19:1b:8d:92:da:70:20:ad:c0:6c:c0:f1:b8:2b:8e:4a:8b:12:
5a:b9:fc:48:9a:24:56:a2:da:ba:ec:e1:03:c6:57:6a:01:a2:
2d:77:3e:27:94:a3:be:0d:e3:7a:99:01:8e:e3:2a:1a:d8:85:
18:8d:98:16:af:71:dd:aa:49:ca:48:88:ae:f2:c0:60:f1:6a:
d8:af:71:ae:a5:84:44:e6:37:3c:03:ee:36:5c:ed:3d:4f:a9:
d0:d8:16:6e:07:6b:c1:64:b1:b5:8b:c6:1c:73:8e:8d:ac:18:
09:a1:1a:96:0c:d9:e7:e1:94:e3:a4:1b:a9:f2:eb:3f:31:41:
bb:eb:cc:20:ca:bb:aa:4c:18:12:f8:f0:ed:11:e2:66:20:6c:
61:0f:92:7e:35:88:55:16:c4:9d:00:91:18:5a:61:f1:5c:85:
7d:5b:66:56:59:11:31:6f:91:1d:8a:0e:d3:f1:1f:77:b5:9f:
de:14:ce:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:45 2026 by rpki-client