Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/fgqcaG4611CeZtyh5_eRm9hmdeU.roa
File: fgqcaG4611CeZtyh5_eRm9hmdeU.roa (raw, json)
Hash identifier: LSqZKBJ7o/0Ct7lNvQchSy21lZxmJlN37JWr47/bwO4=
Subject key identifier: 7E:0A:9C:68:6E:3A:D7:50:9E:66:DC:A1:E7:F7:91:9B:D8:66:75:E5
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019EF8B02BC1779ACE81986CB8DE27245737
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/fgqcaG4611CeZtyh5_eRm9hmdeU.roa
Signing time: Wed 24 Jun 2026 08:12:35 +0000
ROA not before: Wed 24 Jun 2026 08:12:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204154
IP address blocks: 46.8.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:b0:2b:c1:77:9a:ce:81:98:6c:b8:de:27:24:57:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 24 08:12:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e0a9c686e3ad7509e66dca1e7f7919bd86675e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:2f:fc:91:8a:fc:c8:cb:f9:20:53:c4:53:
18:74:a2:0c:7a:a0:ec:a9:db:50:3f:11:16:a5:c6:
9e:c6:8a:64:6c:b9:1c:92:0e:1c:be:08:bb:7a:6e:
ee:6c:16:cc:d8:a9:d3:64:6c:91:3e:13:16:57:e5:
7d:02:f1:5b:ce:40:fc:44:90:46:be:ca:b9:53:7e:
3a:6f:26:7c:8b:8d:dc:5c:aa:72:ba:db:02:b6:11:
fa:7e:53:19:06:28:f4:eb:08:84:44:2e:46:0f:b8:
b3:54:74:fe:0d:8f:01:e5:fc:df:f7:c1:c3:2b:25:
c0:d5:ae:0d:6e:bd:08:20:f9:1e:41:ff:64:ed:98:
98:e5:4e:ad:d3:7e:d2:a1:cd:23:42:76:eb:1d:3f:
a0:a7:a9:6b:0f:91:92:38:b0:75:c3:63:65:b2:3f:
af:59:bd:7a:0a:4c:0c:9e:4d:4a:73:20:d0:9a:bb:
8c:e7:15:01:f7:05:bf:29:04:ed:77:54:f1:79:68:
ff:22:ff:78:78:82:49:c3:cc:ac:80:9d:22:e0:03:
b7:dd:a0:a2:11:1e:63:fd:cb:d3:1b:e2:70:6f:f7:
a3:02:e2:aa:2e:9b:9e:95:e6:75:34:33:1b:60:0a:
85:f0:81:99:a8:99:9b:19:7f:0a:52:2b:62:c7:4b:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0A:9C:68:6E:3A:D7:50:9E:66:DC:A1:E7:F7:91:9B:D8:66:75:E5
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/fgqcaG4611CeZtyh5_eRm9hmdeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.180.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:9f:32:55:99:85:1f:3c:1e:06:a2:aa:8f:58:ef:40:9a:40:
06:f8:a2:ed:43:c4:44:67:06:c8:d4:64:4c:fb:fe:81:aa:91:
b3:4f:ea:11:4c:9a:7d:b0:d5:4d:2a:2b:82:c6:da:e0:b6:79:
42:bd:7c:6c:89:cc:2c:3f:ec:d4:b1:02:d3:65:d5:0d:2f:53:
db:bc:21:d6:1a:32:97:00:a5:84:cf:a6:e6:10:0b:f4:6d:26:
70:0b:a7:35:9e:52:c3:a3:12:41:d1:e1:59:bb:9a:ca:3d:2b:
be:0e:9a:d9:a2:7c:b7:0e:5c:61:2f:b6:b8:d6:ee:d1:dc:a3:
57:0b:a1:7a:14:dc:81:9d:9a:5d:44:7a:33:7d:70:31:37:43:
ad:e3:a4:a1:3a:48:59:28:b5:6a:95:f3:be:22:51:4d:85:eb:
02:1c:db:76:4b:fe:e0:ad:0a:0e:2b:d3:55:45:73:ae:1b:4f:
5c:20:7d:30:45:a9:f3:1e:42:cb:a7:f9:41:fe:a9:96:a5:d9:
b5:22:1a:77:4e:02:42:f0:d8:66:60:ca:86:8c:94:84:b3:ac:
37:28:28:0b:2c:3f:62:8b:77:67:f0:ab:0d:e4:a7:62:46:0a:
07:03:fe:09:6f:73:56:31:a5:dc:8b:a8:2c:af:c7:d6:eb:ff:
3b:58:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:10 2026 by rpki-client