Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FS6HvhmAIX-DQgCBMhw52v9SLJ4.roa
File: FS6HvhmAIX-DQgCBMhw52v9SLJ4.roa (raw, json)
Hash identifier: nnHDzwQjYgWNipME5zfMYOyzJCNlk5y7Frlx/ZAOUEY=
Subject key identifier: 15:2E:87:BE:19:80:21:7F:83:42:00:81:32:1C:39:DA:FF:52:2C:9E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06CABEB9517D04D4636F13D4457B5AA47
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FS6HvhmAIX-DQgCBMhw52v9SLJ4.roa
Signing time: Fri 04 Sep 2026 13:46:41 +0000
ROA not before: Fri 04 Sep 2026 13:46:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59117
IP address blocks: 82.110.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:ab:eb:95:17:d0:4d:46:36:f1:3d:44:57:b5:aa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 4 13:46:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=152e87be1980217f83420081321c39daff522c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:77:23:06:19:7a:26:3c:86:22:35:3a:48:
20:19:36:13:8d:54:15:16:19:b6:c3:48:20:ef:fb:
b5:13:a1:90:06:2e:43:9c:ac:cc:ed:55:25:b9:7d:
95:8a:ab:f5:71:28:20:66:42:5c:3f:fa:c4:74:81:
5b:55:b8:7f:7d:37:d0:86:06:76:b2:9e:34:98:19:
b3:f0:67:7e:52:62:a3:99:66:8f:98:7f:f3:a5:75:
d2:32:3e:cd:7d:c2:ca:60:0f:a1:f8:34:49:63:e8:
b4:03:f3:e6:28:1a:93:98:4d:71:f9:a1:fd:42:ac:
b3:46:ec:c9:09:e3:5f:31:95:b5:8e:51:66:27:12:
cf:9e:41:3b:c4:1f:52:46:5f:4f:20:6e:95:ff:94:
a3:c0:67:da:57:f0:95:6a:43:ea:de:3f:25:da:c8:
f4:89:02:cd:fa:47:4d:2b:7c:f1:74:57:27:07:fa:
20:49:28:4f:5d:aa:c4:94:eb:c6:15:db:cd:22:37:
c5:2c:0c:63:7d:09:ee:ef:39:78:c3:af:f3:b8:b5:
e8:18:fa:e1:2d:5b:51:a3:03:c7:9c:61:50:9e:ba:
31:fb:54:9f:da:61:16:9d:33:f6:f2:73:54:75:44:
bd:cd:93:5a:37:1c:c9:2b:73:87:de:fe:ab:b3:ca:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2E:87:BE:19:80:21:7F:83:42:00:81:32:1C:39:DA:FF:52:2C:9E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FS6HvhmAIX-DQgCBMhw52v9SLJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.108.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:ad:aa:7f:a0:42:8b:f1:b8:ab:97:6b:88:fb:dc:e6:c9:24:
8e:dc:9f:ca:bc:da:c0:cb:4c:c4:f4:a3:fb:7b:e0:a4:42:5a:
9b:e6:73:61:50:3c:da:74:75:b3:00:99:01:f9:25:fc:d1:80:
55:64:8d:d9:3c:80:5f:f9:cd:d6:2b:39:a2:70:37:6c:fa:97:
32:c2:8c:be:6d:76:67:64:28:d0:27:b1:0d:e7:56:cd:dc:5d:
9c:13:8c:28:6f:e8:a1:88:82:b5:f6:2f:be:db:de:16:0b:d7:
0b:ad:a1:0b:cd:98:fa:0c:08:b2:b5:17:68:d5:c9:d2:c3:3e:
97:98:c5:4e:a2:30:a5:81:cd:0d:90:ad:30:0d:2a:0c:b0:66:
d1:ad:9d:90:4f:48:c0:30:0a:11:d9:3a:78:d9:19:ba:29:78:
96:d6:71:f1:ee:e3:12:52:da:0d:d2:ef:c7:ec:5b:09:1b:89:
cf:48:4d:c3:f2:f2:c6:7b:07:c0:41:4d:cc:4e:2a:8a:05:72:
24:90:4d:a9:46:f7:a1:d8:52:60:10:47:a9:89:f9:fd:29:bf:
02:e3:66:b1:51:a2:a1:32:9c:72:33:c7:f3:d6:30:e0:16:c8:
1b:4d:47:e3:58:68:1e:ea:a7:cf:f5:72:65:66:1b:c9:8b:67:
a1:c3:c3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:19:34 2026 by rpki-client