Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/fxZMntMS1K7s1_SlS1AVFEtX00U.roa
File: fxZMntMS1K7s1_SlS1AVFEtX00U.roa (raw, json)
Hash identifier: MWEWzctsa9u3a1v8a+wryK0O3oKvmxTaDmm4Wqx9EA4=
Subject key identifier: 7F:16:4C:9E:D3:12:D4:AE:EC:D7:F4:A5:4B:50:15:14:4B:57:D3:45
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368F52E294887C9A8531CFAFCAD0EE7
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/fxZMntMS1K7s1_SlS1AVFEtX00U.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212775
IP address blocks: 2a00:7180:8010::/46 maxlen: 46
2a04:800:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f5:2e:29:48:87:c9:a8:53:1c:fa:fc:ad:0e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f164c9ed312d4aeecd7f4a54b5015144b57d345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:1c:e9:5d:de:af:62:f1:c1:57:44:94:6c:
11:d1:8c:58:45:97:f0:cc:90:9c:a1:67:df:70:c4:
26:35:2c:65:eb:43:b5:59:b4:d0:86:97:eb:31:be:
37:64:57:1b:f5:f0:dd:f4:8a:6c:15:e6:11:37:5b:
83:46:4b:55:3b:e6:15:1f:e2:29:77:3d:59:98:b3:
f2:ea:c3:e3:22:ea:49:66:03:67:a1:99:cc:99:bc:
b9:3f:d0:0a:ea:0a:31:4b:e8:ee:7b:b4:18:e5:5c:
41:a3:28:7f:5e:9a:6a:5d:8c:84:87:d8:60:d7:93:
ed:65:0b:99:bf:77:e5:f1:08:4f:1a:c2:84:fe:d4:
63:f3:fc:b2:68:08:1e:be:09:59:f3:1a:a2:00:af:
a3:f8:d5:1a:69:5a:c1:db:1b:74:82:da:5d:25:79:
8e:a7:31:4c:c3:5c:5c:bc:ed:01:59:fd:77:34:b1:
8f:ca:9b:62:a5:c3:d7:54:6a:be:04:c5:87:4b:00:
28:bf:00:b9:e9:47:e0:f9:bd:5f:6c:6d:1c:6f:3b:
fb:5f:b7:3a:61:12:56:59:1d:2d:c7:b7:26:9b:81:
41:18:e5:bb:7c:b1:df:58:fd:e1:38:5b:f1:e0:69:
f0:8e:75:56:bd:21:56:a3:07:49:56:cb:02:91:c7:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:16:4C:9E:D3:12:D4:AE:EC:D7:F4:A5:4B:50:15:14:4B:57:D3:45
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/fxZMntMS1K7s1_SlS1AVFEtX00U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8010::/46
2a04:800:9000::/36
Signature Algorithm: sha256WithRSAEncryption
70:d0:04:90:79:09:3a:4e:1f:59:30:db:ce:b8:ae:f2:13:0a:
f2:b1:5f:c0:e6:c0:bd:69:23:d9:d7:ea:50:e5:45:b5:bb:5c:
77:90:77:bf:84:7c:b4:0f:b5:15:41:55:68:c6:ab:fe:48:97:
22:83:dd:68:99:61:63:0c:43:48:a9:78:51:e1:7f:66:a2:4c:
36:c7:eb:46:03:7c:88:21:3a:7c:1b:dd:06:70:45:3b:a2:6f:
c2:f9:71:a1:db:39:3e:01:df:3f:e0:c3:9a:a4:9f:32:1f:6f:
4f:d6:f2:39:1e:c0:36:85:06:f3:e9:2c:c5:e5:3c:64:0d:83:
b2:66:93:9b:d8:90:88:2a:75:c7:dc:20:55:87:f7:4d:d9:ff:
40:6f:5b:f1:da:da:83:37:f4:76:3b:7b:ee:d8:fe:af:07:89:
1f:bd:e9:75:47:9a:02:f2:ac:7f:43:2b:a8:83:48:b3:9b:a4:
72:07:b9:f5:99:fc:5b:9f:14:ac:70:e9:85:54:6d:5c:92:fc:
87:d3:e7:55:87:cd:16:ce:6f:5d:6c:03:a6:cb:d6:bd:53:e2:
86:8a:b0:e2:77:54:82:a9:12:10:35:e4:a5:76:ca:6c:2a:71:
3a:a3:6a:1e:fb:0f:02:b9:c0:4c:c4:bc:20:98:26:d6:d6:c5:
c7:04:1f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:43 2026 by rpki-client