Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/FbXzWOIy96A0WmVm-cW1EkuAflo.roa
File: FbXzWOIy96A0WmVm-cW1EkuAflo.roa (raw, json)
Hash identifier: OqoaYWzNQxvbw5i0dyRdE2zoerUvnCGdGeTeqMBNdQs=
Subject key identifier: 15:B5:F3:58:E2:32:F7:A0:34:5A:65:66:F9:C5:B5:12:4B:80:7E:5A
Certificate issuer: /CN=d202c067313ef735a7e457177d984bee8247eed8
Certificate serial: 019F2368AF5A4D5DD291211583A1A172BAC5
Authority key identifier: D2:02:C0:67:31:3E:F7:35:A7:E4:57:17:7D:98:4B:EE:82:47:EE:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gLAZzE-9zWn5FcXfZhL7oJH7tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/FbXzWOIy96A0WmVm-cW1EkuAflo.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 57.206.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/0gLAZzE-9zWn5FcXfZhL7oJH7tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/0gLAZzE-9zWn5FcXfZhL7oJH7tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gLAZzE-9zWn5FcXfZhL7oJH7tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:af:5a:4d:5d:d2:91:21:15:83:a1:a1:72:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d202c067313ef735a7e457177d984bee8247eed8
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15b5f358e232f7a0345a6566f9c5b5124b807e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:c1:fd:a5:fe:5b:be:83:c0:b2:14:c8:1e:
b5:e7:c1:d1:d0:1e:eb:1c:d0:0b:27:99:5a:5d:a0:
1a:91:44:2a:8c:37:30:cf:2d:1c:82:f0:fe:cf:b5:
3c:11:2e:f7:18:73:ac:fc:28:96:a3:a5:77:0d:ce:
3e:6a:10:0d:d4:0b:13:6e:d4:43:de:48:a0:9f:dd:
af:08:a9:87:ba:e1:f3:48:ac:ae:7f:c2:3c:66:08:
c3:1a:4e:8f:a8:53:bc:48:61:20:b8:ba:0e:06:1e:
14:c4:48:db:7c:43:bc:21:bb:3b:75:76:be:97:c6:
8e:66:eb:80:8e:c3:68:65:5d:dd:8c:cc:cd:f2:87:
cd:0b:ac:02:ea:9c:2d:54:9b:de:07:21:33:87:3c:
e4:04:fe:51:0c:e6:63:0b:04:a5:ed:03:0a:2c:23:
0b:dd:98:e9:ca:f0:1e:9b:c5:5d:5d:36:ae:2d:ec:
be:d3:12:72:e4:91:fa:77:6e:df:17:59:9c:98:57:
8d:7d:45:94:08:4c:b9:da:15:3e:12:80:3c:78:5a:
fb:99:77:89:0a:4d:36:1b:ce:91:8d:8f:d6:0a:bb:
bf:f5:82:f9:44:68:63:4c:f7:97:92:db:d8:06:49:
de:9f:5a:fa:62:a4:cc:51:5c:50:42:7c:34:23:6d:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B5:F3:58:E2:32:F7:A0:34:5A:65:66:F9:C5:B5:12:4B:80:7E:5A
X509v3 Authority Key Identifier:
keyid:D2:02:C0:67:31:3E:F7:35:A7:E4:57:17:7D:98:4B:EE:82:47:EE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gLAZzE-9zWn5FcXfZhL7oJH7tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/FbXzWOIy96A0WmVm-cW1EkuAflo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/0gLAZzE-9zWn5FcXfZhL7oJH7tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.206.2.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:22:cb:e3:22:c2:53:32:ab:ed:7d:80:de:03:37:ae:12:24:
9c:0e:46:7e:8b:56:7c:66:ea:fe:68:50:32:b3:77:25:8a:3f:
f3:f4:fa:f8:9c:03:68:54:51:ff:75:c2:1d:96:2e:c6:aa:28:
ed:c9:6d:06:3b:55:77:99:1c:cb:a3:3d:06:9d:3f:56:81:41:
09:3c:36:9d:18:0b:5d:70:41:c6:68:74:0f:15:41:c4:7a:53:
0c:a7:92:71:0c:a7:cf:6b:61:12:63:66:9f:a4:03:bc:aa:bc:
11:96:aa:98:91:9a:b8:1b:1a:d0:cf:10:bb:0f:48:95:96:e6:
7f:9a:e8:76:5c:43:97:d9:05:ae:e2:3d:33:58:07:bb:eb:cf:
30:ff:5e:77:db:2e:05:54:3b:ea:6c:a6:09:2a:f7:a2:81:41:
b0:94:f2:f8:1c:fe:d5:4e:6e:12:a5:d3:29:87:b1:74:bc:c5:
a8:bb:69:b4:13:80:f7:ae:93:04:f3:31:1a:fa:fe:b3:ca:c9:
8f:33:05:ca:15:25:f5:15:6b:6f:57:14:6b:24:0e:91:95:87:
5c:0b:27:f5:8e:c4:da:81:94:c3:73:72:f8:a0:e2:73:1f:49:
36:9e:db:65:60:d8:83:87:e5:b1:9c:97:ef:b5:ae:fd:89:aa:
c1:6a:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:28 2026 by rpki-client