Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/FKvwzVko1a940Y1XXJSXBzhfCd8.roa
File: FKvwzVko1a940Y1XXJSXBzhfCd8.roa (raw, json)
Hash identifier: HRhLQge+6hYFDGyCX+dNgsRDMZRYL+Plk2uGkN24CdY=
Subject key identifier: 14:AB:F0:CD:59:28:D5:AF:78:D1:8D:57:5C:94:97:07:38:5F:09:DF
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A01B0291A6BD859C0BB8224392C821683F
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/FKvwzVko1a940Y1XXJSXBzhfCd8.roa
Signing time: Wed 19 Aug 2026 17:12:28 +0000
ROA not before: Wed 19 Aug 2026 17:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197362
IP address blocks: 201.3.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1b:02:91:a6:bd:85:9c:0b:b8:22:43:92:c8:21:68:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 19 17:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14abf0cd5928d5af78d18d575c949707385f09df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:f5:10:b6:09:6a:60:aa:c7:88:6f:c6:cf:
1b:6e:f9:c1:36:44:f1:2e:03:01:79:0d:d0:6c:7d:
4e:e0:16:ec:3a:f9:ba:1d:95:cf:09:b8:e5:a7:2a:
a9:db:dd:26:6a:1d:70:36:c9:86:91:f1:2f:23:04:
e3:bc:45:6a:8c:81:08:88:87:36:7f:90:43:09:3f:
22:19:7f:4b:fd:c9:9f:5e:a9:5b:6c:81:5a:3e:a4:
ba:5d:f9:a6:2e:44:0f:9c:f6:64:4d:3c:b1:6a:5d:
f4:ec:e1:51:f6:70:43:70:45:11:0b:5a:96:5c:e2:
28:b4:85:b3:03:59:05:93:be:a1:35:d8:e3:c5:9b:
cd:31:5c:3a:7c:42:c0:d4:b9:c2:c3:8c:a6:dc:9d:
ad:7d:b7:eb:ac:56:b4:8e:53:8e:55:cd:64:aa:b2:
76:30:3d:91:cd:5e:1a:80:19:c5:e2:9a:6b:63:7e:
af:ed:95:15:88:0b:10:35:5f:cc:c2:e5:25:ac:92:
63:10:70:36:88:af:19:40:30:ba:cd:26:4f:dc:d3:
92:72:56:90:82:d4:73:a2:84:e2:9e:c8:20:6d:27:
b2:dc:39:8c:f3:53:a1:ea:ae:f5:ad:eb:c1:71:ec:
45:cb:52:2e:1c:28:ed:e3:e7:3a:48:a5:39:90:9b:
68:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AB:F0:CD:59:28:D5:AF:78:D1:8D:57:5C:94:97:07:38:5F:09:DF
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/FKvwzVko1a940Y1XXJSXBzhfCd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.233.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5b:75:a4:4e:c5:61:19:04:94:d9:0a:5c:c6:ba:59:d3:c6:
d7:cd:09:27:59:6d:c1:0d:f1:d5:0c:de:80:ab:f6:3b:5f:c4:
4b:46:61:51:78:be:92:47:1d:5d:19:2b:11:f6:7d:34:f7:68:
58:af:86:ef:15:22:b4:77:02:ee:5a:33:3f:9f:73:37:04:08:
a2:2b:23:c2:91:c0:47:66:9a:fc:c7:2e:88:15:f8:33:1b:1a:
7d:03:0b:6a:9b:46:80:c4:a0:21:77:3e:db:80:50:b2:4a:7e:
66:d1:7c:5f:8a:13:1e:ef:59:3f:11:75:e1:a0:e3:33:9e:54:
b3:d9:a7:c5:e4:48:27:e1:24:3e:9a:df:b9:e3:56:cf:00:d6:
8a:44:92:c2:d4:78:50:76:4e:72:a9:e1:11:d0:c6:90:a7:25:
67:ce:0b:cb:6a:59:2c:cb:39:20:e8:20:77:3f:31:87:a4:af:
f1:e1:a3:89:cc:63:b9:91:d1:d1:3f:9e:47:2d:97:22:b3:a6:
ca:f7:d0:b1:d5:ed:19:94:1b:10:b4:93:1c:11:41:56:8d:4d:
04:1d:f7:99:c6:35:52:c6:30:f9:2a:13:98:0d:e5:d9:fc:da:
49:8b:bf:ee:a9:e1:65:1a:b3:f0:39:ea:87:04:d8:ae:95:49:
45:ca:10:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:11 2026 by rpki-client