Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fgWFccIFXkQzt31AjXE45UOLsjI.roa
File: fgWFccIFXkQzt31AjXE45UOLsjI.roa (raw, json)
Hash identifier: pwJEMljGW+BTOjoQFCM4jMMCNmBxofjGfCf3RVtFO7M=
Subject key identifier: 7E:05:85:71:C2:05:5E:44:33:B7:7D:40:8D:71:38:E5:43:8B:B2:32
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E8C824351C791C6D5B34CE761922681F4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fgWFccIFXkQzt31AjXE45UOLsjI.roa
Signing time: Wed 03 Jun 2026 08:03:27 +0000
ROA not before: Wed 03 Jun 2026 08:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132541
IP address blocks: 104.143.217.0/24 maxlen: 24
206.245.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:82:43:51:c7:91:c6:d5:b3:4c:e7:61:92:26:81:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 3 08:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e058571c2055e4433b77d408d7138e5438bb232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:05:ac:55:3f:16:b3:cd:23:48:0f:63:5b:
3f:5f:fe:23:a5:5e:62:7a:2e:00:2a:60:55:c7:71:
21:67:e2:33:f8:16:7d:6c:42:f0:7a:2d:83:a0:b0:
dc:86:7b:82:03:99:bf:4e:40:0e:fb:23:b0:e2:f2:
4b:f7:53:b4:17:ff:2a:82:b5:82:68:99:cc:59:3e:
3d:2d:64:2b:5a:38:9e:63:2e:74:ae:ff:b7:bf:bd:
e7:27:e2:94:1f:7c:9f:19:8b:16:a5:58:a3:71:23:
b0:ae:43:88:a8:d0:69:22:8f:16:70:3a:d5:f3:10:
b2:88:91:6a:21:7e:85:8a:8e:97:55:49:44:d8:9a:
d0:96:0e:a1:db:ce:9b:b6:24:14:45:5b:91:66:ba:
a5:6d:e6:c6:e2:6d:25:23:2c:b5:6e:21:91:63:ff:
45:df:71:42:23:58:5a:5e:e2:a3:2b:13:22:2f:3f:
47:c5:71:90:d6:dc:33:04:a8:8e:59:e8:5f:40:7f:
77:6e:68:e8:0e:77:03:b1:a4:99:18:f4:4d:a5:b6:
71:a6:0a:18:78:5a:29:73:b7:c3:47:5e:ad:92:3e:
58:e5:c9:b9:d2:72:28:2e:24:14:23:42:f1:8d:71:
90:e7:92:92:5d:65:90:e0:28:f1:fc:f8:23:f7:30:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:05:85:71:C2:05:5E:44:33:B7:7D:40:8D:71:38:E5:43:8B:B2:32
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fgWFccIFXkQzt31AjXE45UOLsjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.143.217.0/24
206.245.151.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a3:d4:6c:20:bc:06:b9:6c:98:37:3c:8c:6f:0f:79:4e:9f:
66:45:14:a5:78:aa:38:39:88:fa:b3:3e:6a:a9:1d:a6:bc:1f:
f3:89:e0:69:53:53:15:91:84:fc:35:6f:1e:4a:24:f9:cc:5c:
50:aa:de:85:c9:02:b3:fa:fe:ea:fb:c7:be:d3:b7:53:f7:1f:
23:60:02:f0:de:86:1c:6f:0b:7c:b1:9a:a8:d0:f5:9a:b3:6d:
2a:9c:aa:ac:89:4b:c1:02:44:d4:52:e1:75:5a:85:e5:51:28:
f9:c7:f4:c0:68:9a:10:98:c1:66:4d:4d:f6:9f:38:21:ee:b6:
36:75:86:46:fa:9a:5c:e1:84:68:d7:ac:8f:ef:89:80:35:e9:
ac:bb:2b:af:a7:6d:41:5a:5f:7c:c6:97:b6:de:0c:d2:bf:7a:
00:4e:d2:5b:ba:93:8c:97:d7:98:ab:72:9d:15:b9:43:c8:6e:
02:54:20:dd:97:41:8f:f2:ed:c4:09:f3:c3:29:ce:4c:c2:b3:
e5:c0:6c:1e:f1:18:46:87:f8:72:31:70:45:a3:3f:93:19:4e:
91:a3:b8:e5:8f:12:26:f6:13:7c:2a:17:27:5c:db:b8:b0:a1:
23:4f:91:0e:14:3f:7f:87:25:17:82:76:ad:55:43:d2:c7:3e:
b1:82:c2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:21:09 2026 by rpki-client