Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/FeDyuiqf4Y8v3VxW5XAZNBm9JnU.roa
File: FeDyuiqf4Y8v3VxW5XAZNBm9JnU.roa (raw, json)
Hash identifier: ybuwAgpJEltyUcjKYR2ptFUTK4x2sXxC2CSS7I254R8=
Subject key identifier: 15:E0:F2:BA:2A:9F:E1:8F:2F:DD:5C:56:E5:70:19:34:19:BD:26:75
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019EAC947809886E0DB444A3CB8D09C28215
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/FeDyuiqf4Y8v3VxW5XAZNBm9JnU.roa
Signing time: Tue 09 Jun 2026 13:31:11 +0000
ROA not before: Tue 09 Jun 2026 13:31:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219490
IP address blocks: 2a03:5840:360::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:94:78:09:88:6e:0d:b4:44:a3:cb:8d:09:c2:82:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jun 9 13:31:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15e0f2ba2a9fe18f2fdd5c56e570193419bd2675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:f6:f1:75:30:60:f7:36:03:6d:92:d8:8a:
e3:ae:cb:3e:c1:66:ff:63:65:d7:00:32:12:38:d8:
72:bf:71:a4:26:78:3e:da:ec:f3:47:76:66:88:b4:
31:c0:77:bf:21:8c:b6:77:25:3f:24:4c:b6:a0:66:
df:df:a9:5f:50:cb:f2:6e:48:09:7f:7d:86:be:21:
13:72:f5:c4:ac:20:0b:ef:c2:a5:23:19:84:cb:1e:
79:d9:f3:29:c2:74:40:f5:e8:5f:5e:f1:b0:06:b9:
57:dd:c8:75:cf:f7:fe:58:12:77:8f:be:64:db:ec:
56:0a:23:ea:63:b5:fe:84:25:1d:78:08:23:2e:f2:
68:21:1b:55:97:61:93:67:20:fa:76:2c:1b:22:bc:
27:f5:3b:8d:de:14:d6:17:28:dc:54:64:66:be:e3:
55:ed:6e:a5:9f:42:34:9e:92:a2:45:01:22:05:f4:
01:c3:a3:af:a7:1e:ca:e0:1e:85:9c:95:4e:63:45:
fe:ad:64:5d:b4:a4:c2:b2:5d:f6:52:6c:93:e4:d5:
a8:b2:cb:29:ee:c0:19:08:69:73:44:28:bf:c4:ab:
b8:99:90:e1:9a:f1:c0:7a:b8:57:34:80:16:ec:6f:
cf:da:ba:bc:01:59:d4:35:4e:62:75:91:88:a1:aa:
e8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E0:F2:BA:2A:9F:E1:8F:2F:DD:5C:56:E5:70:19:34:19:BD:26:75
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/FeDyuiqf4Y8v3VxW5XAZNBm9JnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:360::/44
Signature Algorithm: sha256WithRSAEncryption
64:36:b6:e6:5c:15:ce:d9:6f:5c:32:c9:be:09:13:93:06:ad:
d1:43:0b:e6:20:59:3f:a5:20:a3:e4:d3:0a:3c:b6:6e:2a:ac:
32:85:51:16:e9:92:5e:38:5e:0c:7c:5c:c9:fd:64:6e:aa:c3:
bc:8e:21:d6:42:4d:bf:1e:81:86:e2:8a:5b:44:06:79:55:f4:
7e:d1:cc:e9:47:6e:3b:6d:fd:74:b4:6e:67:39:cd:80:86:99:
cf:41:0f:60:31:44:0c:fc:72:e0:c7:e2:88:62:c7:a5:87:18:
e3:ab:d2:0b:df:da:3d:1d:d2:e2:e7:22:89:69:1c:bf:b9:02:
5b:02:23:e0:6e:8f:59:2a:2b:c5:5a:86:14:e4:28:dd:8b:e2:
88:76:48:ec:87:e8:7b:88:44:40:4d:2d:a0:72:03:ca:00:9b:
ab:53:64:d9:0b:4e:fe:99:80:6f:26:24:ad:58:3d:39:31:95:
ad:6c:3b:29:6c:f4:4f:32:36:9e:3d:cb:80:df:dc:b1:4d:da:
31:56:ec:6f:70:9b:82:6d:00:4c:bb:1b:e0:e0:d2:83:9b:e7:
f5:4e:56:bc:38:f4:f7:7c:a7:bf:b7:29:81:67:75:cb:2a:bd:
ed:ec:f5:6a:81:78:50:79:be:ea:2b:d3:ed:da:f0:c7:86:20:
c4:91:90:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:07:18 2026 by rpki-client