Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/fBLcny0ja9m12ai0oiySwNym0rg.roa
File: fBLcny0ja9m12ai0oiySwNym0rg.roa (raw, json)
Hash identifier: 1utn4nFSOxe8h7yS6+DYmf8E4PN+yCh22SCNNxTO+fw=
Subject key identifier: 7C:12:DC:9F:2D:23:6B:D9:B5:D9:A8:B4:A2:2C:92:C0:DC:A6:D2:B8
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E967F11E7DFEEB8DB9CA2EB85E76B4693
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/fBLcny0ja9m12ai0oiySwNym0rg.roa
Signing time: Fri 05 Jun 2026 06:36:10 +0000
ROA not before: Fri 05 Jun 2026 06:36:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53356
IP address blocks: 158.173.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:96:7f:11:e7:df:ee:b8:db:9c:a2:eb:85:e7:6b:46:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 5 06:36:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c12dc9f2d236bd9b5d9a8b4a22c92c0dca6d2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:d4:48:7f:cc:8b:f1:ca:7c:4c:27:db:a0:
52:80:df:2d:23:22:35:02:5c:a4:fb:3e:6f:c2:63:
a8:a4:f1:2e:80:80:64:9e:41:7a:9a:d1:28:78:d3:
c2:32:b4:68:d5:87:dd:a7:54:09:8b:5e:76:e7:ad:
ed:78:42:c4:58:3e:10:55:de:c6:d4:ec:ee:77:2c:
ec:97:ec:00:22:95:53:eb:9f:a5:79:88:41:a4:6a:
a1:a8:f5:c1:2a:cc:3e:2e:56:e1:68:45:d1:13:4a:
5a:c5:6d:82:70:62:74:4b:fd:99:79:1e:42:6c:92:
42:02:d5:c4:0f:52:38:e1:38:ef:e1:48:ed:2f:85:
67:ff:27:0e:00:2a:b8:f5:19:be:d6:de:fd:4c:e1:
31:7b:f1:da:55:d5:56:bb:24:cb:61:19:58:8e:95:
a1:6a:2e:ed:7a:e8:77:01:c6:6d:78:54:ff:d5:09:
c7:f9:ed:3b:87:29:96:96:30:7b:fd:36:84:a3:09:
24:27:9d:2b:9b:fe:4f:81:71:9a:6c:88:2f:b7:8c:
aa:33:b8:d3:ac:22:8e:74:46:8c:79:7a:75:85:f9:
0c:69:98:cf:62:53:78:44:7c:3a:f6:a4:6d:13:70:
44:e8:c5:ed:5d:fe:46:01:db:ed:35:31:3e:a2:57:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:12:DC:9F:2D:23:6B:D9:B5:D9:A8:B4:A2:2C:92:C0:DC:A6:D2:B8
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/fBLcny0ja9m12ai0oiySwNym0rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:cf:df:07:34:d6:1f:5b:55:70:a5:f6:4c:f2:b3:97:06:13:
c5:4c:bd:39:23:1e:16:05:a2:88:74:f6:8b:d2:d9:c5:69:b0:
22:36:22:b3:07:6b:ab:dc:e1:35:c7:66:0e:5a:5e:6b:d7:d7:
b1:c8:52:7c:25:ba:a2:fd:f9:fe:65:5d:b1:5f:b2:36:b3:82:
bb:e0:28:f5:48:7b:4e:ef:77:6a:22:48:14:ea:cf:21:03:4e:
0e:38:1f:62:08:f5:e1:74:01:b7:04:de:b8:6b:c6:b9:32:f3:
0b:df:10:57:5f:1e:80:e4:84:09:61:37:de:03:b7:f7:52:d7:
0f:f4:37:3c:52:3f:4d:50:d9:2e:62:fd:5d:b6:91:03:f0:18:
8e:ea:71:82:8f:2f:d8:3a:4a:76:98:35:3a:d6:80:df:92:0d:
06:2e:73:82:14:c1:a3:17:b0:9e:0c:7c:06:f7:67:75:e4:be:
e2:83:9b:f1:46:6d:ef:06:37:83:ad:c2:1d:da:79:ce:47:85:
57:66:1e:fc:b2:fe:e5:72:c4:40:a1:5c:8c:61:cd:ea:b3:a9:
a3:c4:5c:b1:f2:67:20:9d:7d:9d:4a:ca:69:ec:9a:f6:cf:75:
d3:19:f0:4c:07:33:cb:a1:59:5a:04:28:3e:ee:3a:b4:74:11:
fc:83:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 00:46:28 2026 by rpki-client