Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/FmSrEZp3tDSXvABfvx76g1-j4CU.roa
File: FmSrEZp3tDSXvABfvx76g1-j4CU.roa (raw, json)
Hash identifier: TtuPT5WCO1RiZ8N+22aCXvueUhhBM1hCkL8i8yv12Ak=
Subject key identifier: 16:64:AB:11:9A:77:B4:34:97:BC:00:5F:BF:1E:FA:83:5F:A3:E0:25
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019F562FD7CBCAB64EC8A63D887CE9781181
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/FmSrEZp3tDSXvABfvx76g1-j4CU.roa
Signing time: Sun 12 Jul 2026 11:56:43 +0000
ROA not before: Sun 12 Jul 2026 11:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 212.180.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:56:2f:d7:cb:ca:b6:4e:c8:a6:3d:88:7c:e9:78:11:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Jul 12 11:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1664ab119a77b43497bc005fbf1efa835fa3e025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:32:e2:6e:27:42:78:b3:9e:43:90:3b:90:
ec:03:e5:96:74:df:b6:3c:04:01:35:55:d1:2e:88:
63:16:00:a8:47:c2:e2:f8:47:82:c8:56:55:b9:ad:
06:6e:52:39:16:1e:06:aa:db:c5:bd:71:78:51:47:
71:dc:ef:b3:54:4c:3e:70:b4:8e:bf:d1:cb:a2:69:
20:2c:7d:a7:e2:80:a5:b3:fb:84:51:14:e0:fc:6d:
11:c2:b4:c9:0f:e3:dc:d9:07:9f:1e:49:e4:fc:ff:
29:4c:08:91:40:5c:15:93:b8:24:12:1f:db:e2:ac:
55:5a:5c:c1:04:b7:bc:15:0d:59:9a:3f:b4:1b:44:
8a:4f:11:de:6c:4c:0f:ea:62:85:96:b7:4a:9a:b3:
b1:0f:60:1f:0a:c6:12:15:9f:56:60:9d:59:c7:1c:
f6:b9:16:ef:c7:ac:a8:e8:e1:f6:79:f7:cc:25:8e:
1b:f7:36:73:ef:16:36:c0:8c:ce:01:fa:13:2d:af:
ad:53:d6:ae:5f:44:28:ad:ef:a2:5d:f9:e7:9d:13:
38:8c:85:04:38:1d:f7:02:7e:48:1b:fb:99:1f:af:
60:a8:53:d9:4c:45:6f:93:43:d1:9a:38:2c:4a:2f:
33:ab:39:c4:a4:d3:ec:a3:39:ee:aa:5f:fc:29:90:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:64:AB:11:9A:77:B4:34:97:BC:00:5F:BF:1E:FA:83:5F:A3:E0:25
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/FmSrEZp3tDSXvABfvx76g1-j4CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.180.127.0/24
Signature Algorithm: sha256WithRSAEncryption
81:0a:43:22:bd:02:a4:69:9c:4e:a0:0b:e6:3b:c1:8b:ed:88:
35:e4:86:63:44:08:5a:15:c2:98:32:a4:0c:be:0b:c9:f0:db:
d5:22:33:70:fc:33:77:35:7e:ca:1f:4b:92:c9:e0:4b:03:bb:
01:65:d3:f2:41:d2:32:52:07:4f:3c:b1:0a:c3:3e:26:71:0c:
59:1f:07:f8:9d:b5:35:35:f7:cf:ff:d4:f3:82:02:6c:08:7d:
70:b0:e6:cd:66:76:54:87:7d:4a:eb:88:43:32:ca:22:e1:21:
44:c2:a6:63:d8:81:c7:da:6b:3f:e0:28:6c:bf:9e:f8:c6:c1:
f8:57:dd:7c:92:7d:a4:a7:a4:a0:31:e5:6c:be:3d:57:fe:6a:
c7:b7:d9:30:7f:6e:ae:4c:e2:57:f4:66:31:d3:f3:79:df:36:
5d:f0:ad:b6:f9:9e:8e:3d:08:b1:bb:1a:e0:f5:93:34:a1:f1:
07:b3:2c:c5:28:cf:ec:3c:2a:cc:4e:fa:e2:3c:9a:31:7c:ab:
ed:a4:92:68:4f:c0:10:cb:e8:61:c5:cf:4c:b6:d0:5e:0a:af:
8c:ff:2a:6e:4e:0c:7d:a1:52:76:81:21:23:8e:17:92:c2:f8:
a9:f1:2b:47:b0:b8:06:ae:20:c9:90:30:8f:b5:68:24:84:63:
3e:fa:a2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:26 2026 by rpki-client