Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/FcPMIoPmzJT6cYZN45zD03JmVpY.roa
File: FcPMIoPmzJT6cYZN45zD03JmVpY.roa (raw, json)
Hash identifier: CvF65WWlzyWCGwqsSywdtwSS7TvZPtBrP2enkrOcLNg=
Subject key identifier: 15:C3:CC:22:83:E6:CC:94:FA:71:86:4D:E3:9C:C3:D3:72:66:56:96
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 019F2368501B7FE45D8C6310963962EC4124
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/FcPMIoPmzJT6cYZN45zD03JmVpY.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44270
IP address blocks: 79.173.112.0/20 maxlen: 21
94.243.240.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:50:1b:7f:e4:5d:8c:63:10:96:39:62:ec:41:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15c3cc2283e6cc94fa71864de39cc3d372665696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:14:4d:c6:eb:01:35:2f:2e:f9:8a:74:50:
3c:c5:9b:90:24:6d:f9:65:90:16:eb:58:7d:5f:1e:
11:e1:83:50:f1:9c:1c:0c:d9:7d:e8:c9:5d:cc:f0:
7b:0f:ed:15:6c:1e:46:5a:c0:4e:15:3a:71:3b:1b:
37:58:1f:0f:9a:b1:f1:91:a4:4e:cd:3d:cf:1e:a9:
cb:a8:5b:86:9d:ef:89:0e:cc:e1:a8:ef:7f:b1:5a:
85:85:09:7a:04:ce:60:d8:23:91:37:6b:f0:91:77:
7f:a3:dd:bb:8d:65:7e:b6:c0:05:9b:cd:7a:a6:03:
bc:73:81:ec:cc:5a:b9:c6:32:b8:67:ef:af:2f:9a:
9a:54:e2:a9:24:e6:56:f9:16:06:39:3e:2f:bd:d0:
29:ce:4c:a1:e1:09:f7:5e:84:d1:0c:eb:ec:dd:1f:
a6:5a:fe:85:28:05:5e:6b:af:62:5e:00:9c:d0:07:
05:90:d2:c3:a7:92:5c:f2:c7:5c:6b:43:5e:ae:99:
2b:99:78:25:77:17:f9:d6:ff:18:b5:99:f2:0b:76:
04:0d:8c:5f:47:99:e9:ce:06:3c:90:e6:ed:81:70:
b6:40:15:cc:13:27:0d:31:12:2c:e0:e4:87:dc:ca:
0c:90:38:48:b9:cb:f7:cf:6e:42:90:ae:c6:5e:a6:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C3:CC:22:83:E6:CC:94:FA:71:86:4D:E3:9C:C3:D3:72:66:56:96
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/FcPMIoPmzJT6cYZN45zD03JmVpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.112.0/20
94.243.240.0/20
Signature Algorithm: sha256WithRSAEncryption
38:48:a8:d0:ef:d5:9d:8c:76:8e:f4:f0:8b:ef:cd:78:99:e2:
92:52:6c:8c:c8:fd:87:75:0e:d1:9e:ca:b5:67:a2:cc:19:9c:
f3:65:f0:e3:2a:18:6f:6e:7a:c4:a2:70:41:31:0d:16:1c:0a:
c4:4e:90:c3:47:48:67:28:b5:45:dd:49:f2:3f:9b:cc:13:34:
76:dd:05:f2:e5:7e:e2:1a:e8:18:33:5e:f0:a6:05:eb:2d:21:
6d:0e:a6:be:7b:5f:07:79:2e:bc:5a:3d:31:44:0b:f3:78:6c:
25:4e:b9:b7:0c:14:54:cf:ed:83:5c:2c:34:50:26:62:99:ab:
69:67:54:3d:c4:ab:76:7d:c4:d0:34:71:27:16:4c:aa:de:2f:
0b:fa:c2:17:eb:03:11:ba:ea:c2:16:24:95:91:93:02:e9:f8:
f7:b9:59:b9:d3:ea:e1:ed:92:52:60:81:57:99:20:e6:18:23:
b9:6f:9b:c5:bd:08:a4:74:90:f7:97:0d:92:c1:7f:fc:88:8b:
cd:a6:c2:78:23:40:44:2f:0f:f0:1b:bf:33:ea:e6:a8:49:e2:
31:3c:fe:a3:01:03:8a:1b:a0:ad:1d:fc:23:1c:8a:b8:4e:74:
c2:e3:d6:fc:71:bb:45:5a:c0:ea:61:1b:7c:7d:fe:cb:85:8f:
f6:22:0e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:14 2026 by rpki-client