Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Frt4_waqB7h9y7h03HUd1hb1VLw.roa
File: Frt4_waqB7h9y7h03HUd1hb1VLw.roa (raw, json)
Hash identifier: T0QirUdAWIQNuXFxpDq5mL/vxg3a4wXdlbXAqkvIb1U=
Subject key identifier: 16:BB:78:FF:06:AA:07:B8:7D:CB:B8:74:DC:75:1D:D6:16:F5:54:BC
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01A09C1D17EC87C48B3872D55B2C629784F6
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Frt4_waqB7h9y7h03HUd1hb1VLw.roa
Signing time: Sun 13 Sep 2026 18:52:27 +0000
ROA not before: Sun 13 Sep 2026 18:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 31.42.125.0/24 maxlen: 24
109.122.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:1d:17:ec:87:c4:8b:38:72:d5:5b:2c:62:97:84:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Sep 13 18:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16bb78ff06aa07b87dcbb874dc751dd616f554bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ba:1d:e4:23:65:8e:c5:3c:c5:35:80:1c:ad:
c9:24:57:88:85:a4:4b:3f:54:da:e7:97:6f:b8:69:
f1:51:ad:c0:80:35:ed:a3:35:3f:f7:ae:89:e0:59:
54:a8:f9:63:95:b8:bb:93:f5:e5:b9:a7:8f:1f:98:
31:64:fa:7a:5e:11:fb:7b:36:6b:9e:55:93:92:4f:
3e:eb:fc:37:9f:c2:2e:d5:26:78:b8:6a:3a:a0:5e:
3b:e7:fa:d2:d1:00:08:5c:f2:59:bf:7c:6d:9b:8b:
dc:de:40:63:1f:6e:b8:3d:65:ac:e3:51:c5:10:44:
31:0e:f8:07:d1:2c:b0:09:a4:71:4c:25:89:1f:fa:
89:c8:b4:03:18:25:17:f1:31:ca:2e:45:db:25:53:
7c:da:d4:ed:78:85:60:51:77:a0:92:94:db:77:24:
9f:e0:a6:00:3e:21:ae:29:d0:56:d7:f6:48:e7:38:
71:55:f1:b6:fb:be:41:a0:8b:c2:4f:fb:df:ac:e1:
d1:2d:ff:07:43:7f:70:62:b0:44:35:9a:8f:bc:c2:
b6:10:c2:b2:6e:1a:0e:db:d9:37:a7:9d:77:85:19:
d4:9b:da:2a:5b:e2:e4:62:db:f7:fc:d7:23:dd:58:
9c:36:83:0e:3e:ed:9f:54:98:d3:ae:be:d4:38:d8:
a9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BB:78:FF:06:AA:07:B8:7D:CB:B8:74:DC:75:1D:D6:16:F5:54:BC
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Frt4_waqB7h9y7h03HUd1hb1VLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.125.0/24
109.122.56.0/24
Signature Algorithm: sha256WithRSAEncryption
19:65:ed:e0:5a:85:81:a9:37:97:67:f2:33:bf:40:1d:2c:10:
42:03:c3:fa:85:a8:90:18:c7:51:0e:63:3a:b9:49:85:45:45:
4e:3d:29:84:bd:bb:85:16:ff:06:46:db:19:cb:f4:98:3d:83:
d1:eb:32:89:60:cc:9b:f5:24:8b:59:2f:20:d2:a5:98:7f:bf:
5c:06:80:71:a8:28:75:09:e1:0d:78:fb:66:5f:4c:15:f3:25:
29:d5:d9:ff:c2:22:3d:70:ed:e3:62:98:62:df:ea:26:a6:80:
82:ea:96:41:1d:b3:7a:15:67:20:5f:8c:b3:2b:62:1a:31:7e:
ad:06:aa:eb:db:a7:7e:ad:6e:cc:3f:39:02:47:6a:a4:7a:0b:
13:4e:b1:1a:19:7e:a8:6f:f9:ed:ec:63:41:5f:1a:bc:cb:d3:
e2:8c:ee:5f:5a:4a:8c:68:07:2d:40:d2:60:40:f8:7a:24:23:
eb:80:01:35:ed:b6:86:f0:82:79:18:60:14:79:96:9a:0c:06:
90:ff:01:c4:dc:c3:da:d9:80:b0:65:96:09:04:57:47:cb:63:
82:eb:d9:69:c9:31:d8:de:b4:b8:76:97:8a:1b:68:e0:b2:f2:
f1:fc:88:74:5b:55:81:d1:49:ef:4d:4e:92:a3:d9:3f:6a:36:
b7:5f:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:04:44 2026 by rpki-client