Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FUzcMWDvHJrMx1XDN3dIOCUzlgA.roa
File: FUzcMWDvHJrMx1XDN3dIOCUzlgA.roa (raw, json)
Hash identifier: /kl8GgbuNUmLyr2NCycK3D8OV5aA3xWCUr2pS40D0ZU=
Subject key identifier: 15:4C:DC:31:60:EF:1C:9A:CC:C7:55:C3:37:77:48:38:25:33:96:00
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019FD8ECF434E25B62707C9FBDF63F72D633
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FUzcMWDvHJrMx1XDN3dIOCUzlgA.roa
Signing time: Thu 06 Aug 2026 21:13:55 +0000
ROA not before: Thu 06 Aug 2026 21:13:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215330
IP address blocks: 2a11:77c3::/32 maxlen: 32
2a11:ab86::/32 maxlen: 32
2a12:e86::/32 maxlen: 32
2a12:bc87::/32 maxlen: 32
2a12:d803::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:ec:f4:34:e2:5b:62:70:7c:9f:bd:f6:3f:72:d6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 6 21:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=154cdc3160ef1c9accc755c33777483825339600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:28:50:52:76:76:2e:5f:d2:7c:c6:53:eb:
eb:60:95:b7:eb:e2:ea:1c:ac:5b:70:05:d4:70:2c:
4e:76:87:c2:5f:20:fa:ac:55:50:0b:06:8a:9d:1e:
59:5d:6d:0a:89:eb:bf:e9:34:1a:82:70:1a:b2:eb:
58:3b:42:45:3b:55:f3:88:0c:cf:8a:73:22:f7:cc:
10:4f:6d:74:fa:1b:57:7c:b7:f5:4d:30:95:7d:3b:
db:c0:ee:3a:e0:b5:34:89:75:e6:c4:6b:d1:2d:9b:
3d:2b:62:4d:f5:af:5c:be:ca:b2:0a:d2:48:4f:9e:
59:60:0b:10:c1:4a:3b:70:76:bb:03:5f:eb:8a:0d:
c8:f2:36:5a:6c:28:b7:0e:d8:f5:3a:8a:53:27:19:
97:10:34:9b:f5:40:6c:ae:af:45:e3:59:a6:cc:46:
e3:16:02:e3:da:fd:6e:57:0f:36:4c:e1:7b:20:be:
9f:36:77:7e:1b:11:fb:3a:4f:3c:7a:88:8d:57:0d:
67:7f:89:cf:1d:70:0d:04:39:be:b6:82:2f:a6:85:
d3:19:4d:b7:03:c6:4b:c8:d0:de:9b:cc:0b:6f:d0:
99:7d:2c:a7:c4:38:fb:cc:cd:33:f9:36:e0:7a:1d:
b3:c3:16:53:27:aa:fd:ee:80:56:69:7b:b4:92:e0:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4C:DC:31:60:EF:1C:9A:CC:C7:55:C3:37:77:48:38:25:33:96:00
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FUzcMWDvHJrMx1XDN3dIOCUzlgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:77c3::/32
2a11:ab86::/32
2a12:e86::/32
2a12:bc87::/32
2a12:d803::/32
Signature Algorithm: sha256WithRSAEncryption
9f:c7:85:a2:30:90:17:8a:81:9c:1d:43:66:f5:29:33:5e:1e:
f6:e5:88:44:34:6b:ef:20:85:99:07:ba:3a:41:8b:ee:ff:24:
72:b2:98:8b:b6:7e:96:c9:00:58:97:0c:d6:8b:14:86:8b:23:
60:25:f1:d5:09:30:fd:28:c6:27:ae:11:46:5e:db:f1:77:17:
5e:15:e4:b9:02:7b:56:c4:7c:ab:df:87:65:3a:fb:ef:90:62:
48:d3:44:99:52:12:cc:0e:0d:de:00:37:b1:48:a1:78:f2:66:
77:fe:13:4a:20:cc:8e:79:c5:a1:59:78:ac:ae:d8:9f:af:f9:
2a:7e:e7:9b:40:ca:3a:fd:e7:ae:54:f7:40:8b:52:89:02:14:
d6:01:71:97:30:7b:e5:a8:01:37:cd:aa:b5:22:19:d3:25:76:
32:ec:13:47:bc:89:eb:a3:1f:81:a9:00:0b:19:68:a6:ee:ea:
b6:99:8c:01:7c:07:2e:6e:90:d8:2c:00:a8:cf:0a:88:4a:04:
85:77:eb:3d:72:97:0c:30:11:98:fe:1e:b8:ec:4e:46:87:7f:
d9:ec:ec:7b:e2:04:84:b9:97:bd:ce:43:6f:8d:00:14:dd:94:
8a:24:1c:2e:9a:89:83:0c:a3:85:48:46:a3:ad:eb:e0:ec:d4:
aa:52:1f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:03 2026 by rpki-client