Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/XfRQ7x16c093P2sZcGF7VButLJo.roa
File: XfRQ7x16c093P2sZcGF7VButLJo.roa (raw, json)
Hash identifier: 6WQLaVQEZMaci3iXhCcf6sxELhb4Zh3H6wea88iRvTY=
Subject key identifier: 5D:F4:50:EF:1D:7A:73:4F:77:3F:6B:19:70:61:7B:54:1B:AD:2C:9A
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01A0393371747BBBEDD3B4D1BF213B606DB3
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/XfRQ7x16c093P2sZcGF7VButLJo.roa
Signing time: Tue 25 Aug 2026 13:54:27 +0000
ROA not before: Tue 25 Aug 2026 13:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 46.102.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:33:71:74:7b:bb:ed:d3:b4:d1:bf:21:3b:60:6d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Aug 25 13:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5df450ef1d7a734f773f6b1970617b541bad2c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:6f:04:9b:6d:3e:36:e4:3b:2b:7a:6b:7b:
ef:e5:41:5d:c3:32:1d:d2:45:38:f2:89:d9:a0:f7:
30:4e:92:0f:41:1c:b6:8c:7b:93:53:3d:bc:80:9f:
cb:d1:2d:9b:07:be:25:22:ea:b7:9c:f1:dc:c9:7b:
b9:27:dc:32:81:6f:b6:ca:54:c2:d9:60:7b:fd:df:
6a:e5:90:ef:49:e1:70:3f:0e:59:7e:96:08:26:f8:
dc:0e:1d:95:b5:ec:be:e0:65:29:2f:ca:b3:33:4a:
39:a9:25:c9:1c:bd:63:cb:c6:fc:31:33:4d:fa:fb:
6c:61:f1:63:52:93:53:5b:21:27:4f:b4:1d:05:cc:
90:b1:06:8b:0e:43:d3:ba:2e:ec:01:02:43:ec:62:
01:86:9b:42:83:cb:ac:76:cc:d9:6d:9e:93:6a:3d:
4b:59:bd:81:ba:fa:db:47:c0:92:a0:e4:cf:a9:65:
5d:fb:be:a9:df:4f:db:43:fc:2a:16:19:c6:6b:4a:
58:e6:63:e4:ac:38:bf:6e:d7:c1:dc:9c:94:17:1e:
b7:aa:3a:3e:09:a7:41:31:ea:db:93:c9:15:32:26:
fc:3e:7a:78:24:0c:d0:0f:2d:d5:72:bc:79:b1:b8:
59:d4:56:01:9f:ce:3c:fe:57:60:3d:7b:72:67:48:
ea:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F4:50:EF:1D:7A:73:4F:77:3F:6B:19:70:61:7B:54:1B:AD:2C:9A
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/XfRQ7x16c093P2sZcGF7VButLJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.251.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9e:4b:ba:50:b6:bd:91:0c:4a:5e:e8:a8:8e:c1:d6:50:82:
bb:39:ae:7d:dd:dd:db:ed:b0:65:4c:5e:0a:fc:a0:cb:c9:44:
67:cf:bd:e4:12:8f:b6:14:9c:7f:10:c7:1c:7b:67:b3:05:b5:
ac:18:df:bd:96:92:53:0a:07:ce:1e:e0:a7:c9:8d:75:94:c5:
b8:c1:09:7f:b3:8e:b6:af:3b:76:44:53:04:81:7f:81:b2:72:
19:3c:f7:b3:81:33:58:cc:96:3a:3b:99:8a:f8:eb:06:cd:ea:
39:48:fd:57:e1:1c:43:43:a9:3d:60:6a:0f:8c:7f:c4:87:ac:
ce:f9:a5:26:9b:bb:3c:80:25:a0:48:06:c8:3a:1f:b0:29:5c:
4a:ce:7a:19:14:bd:4a:c7:ef:f8:06:29:da:bc:83:3e:92:30:
83:bf:d3:78:9e:b4:b5:96:61:2d:81:ec:f8:f4:5f:57:5d:0c:
30:30:e5:51:34:cb:5a:d0:10:e1:ec:47:bf:3b:6c:59:6c:79:
92:0c:73:3f:bf:48:ee:52:5d:8d:10:5f:56:8b:e2:d8:d5:45:
d6:19:00:c6:2a:8b:fc:eb:e5:f9:d6:30:ad:66:1e:e7:53:cc:
e2:65:01:66:64:39:a9:0b:05:40:e8:42:36:b2:91:32:fe:a3:
a1:92:fd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:52:40 2026 by rpki-client