Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/_fgldFcP-rwhzn7SEexVC5FDLtA.roa
File: _fgldFcP-rwhzn7SEexVC5FDLtA.roa (raw, json)
Hash identifier: 4NQyZQB56Tkst1Za7L27SWMPT/zA6DeZfLp29Ya/ZJw=
Subject key identifier: FD:F8:25:74:57:0F:FA:BC:21:CE:7E:D2:11:EC:55:0B:91:43:2E:D0
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019FFFD0E5912A6BDCF46D30F5B1445FDE12
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/_fgldFcP-rwhzn7SEexVC5FDLtA.roa
Signing time: Fri 14 Aug 2026 10:28:28 +0000
ROA not before: Fri 14 Aug 2026 10:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198926
IP address blocks: 94.184.32.0/24 maxlen: 24
94.184.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:d0:e5:91:2a:6b:dc:f4:6d:30:f5:b1:44:5f:de:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Aug 14 10:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdf82574570ffabc21ce7ed211ec550b91432ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:df:70:b3:17:89:a6:85:4a:71:be:a9:50:62:
6b:64:2d:c5:eb:44:78:aa:d7:30:2b:96:e2:fb:93:
b0:7a:86:77:27:21:a6:8f:a6:55:cc:82:19:c0:0c:
c7:d1:87:31:de:de:54:ff:a8:92:a8:75:68:a1:3f:
b0:4e:ee:be:af:3a:11:c3:15:b8:c8:04:f6:d2:53:
ca:62:e6:13:d3:ef:b2:e9:26:39:66:f9:b6:f2:40:
31:fa:a7:8b:b0:14:e3:01:1e:0b:ab:71:f0:58:77:
a6:fc:aa:53:19:3e:e0:cc:a0:49:d0:34:6b:5d:72:
20:42:1b:da:1f:f2:95:d7:69:38:8f:cc:3e:19:c8:
b2:38:85:74:e1:3b:52:d1:b3:f4:a9:1c:3c:ef:40:
2d:82:43:a1:8c:eb:9a:27:7f:12:a9:f0:2d:f1:4a:
f4:f1:82:04:e8:0d:c2:20:e4:50:ab:e0:7b:89:0c:
d0:d5:10:27:5f:90:14:3e:c2:55:6c:d3:a6:39:8a:
c2:13:c5:d2:44:f6:20:5f:62:7e:5f:5c:92:73:65:
75:a5:2a:30:63:9a:fc:2d:3f:fc:24:fd:a3:95:75:
f7:c7:18:55:c7:9e:f4:b0:d8:7c:a7:73:e4:6b:da:
49:1b:05:e9:21:60:04:63:c5:b3:8c:13:e3:8c:65:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F8:25:74:57:0F:FA:BC:21:CE:7E:D2:11:EC:55:0B:91:43:2E:D0
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/_fgldFcP-rwhzn7SEexVC5FDLtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.32.0/24
94.184.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:4b:1c:fa:ec:cb:70:9f:b2:98:70:99:e0:10:64:ea:03:98:
ce:ae:cb:09:46:77:c4:31:23:75:35:bd:32:3f:53:69:7b:07:
4c:cb:38:f0:7c:95:47:cf:35:d4:3e:0c:8a:b4:ba:b1:a8:2e:
89:62:60:76:13:f7:15:5b:3c:ae:22:12:26:84:81:2a:ad:65:
54:e8:3a:33:9d:95:28:19:d4:99:53:27:a5:20:eb:cb:67:00:
c5:90:23:e0:74:4e:f4:a9:50:9c:a1:76:a5:04:d8:6f:99:19:
52:09:a2:2a:38:72:86:47:0c:b0:59:47:c2:ec:13:18:e3:4f:
a7:37:4c:0a:34:78:f1:2e:a4:57:0a:e7:e9:ee:69:77:db:30:
67:3b:b5:9f:6f:4f:8d:22:ac:1b:da:cb:39:af:d6:91:55:4b:
01:b7:d0:9f:46:f6:98:d8:8b:e9:60:e7:7c:21:2c:a9:ef:bc:
9b:7c:a1:65:30:77:d5:c0:94:cc:d7:a6:89:d1:e0:f5:29:09:
cc:4a:79:f0:db:8a:10:c9:96:22:71:00:10:cd:44:7f:97:a4:
fc:ab:cb:37:41:bb:2b:60:01:70:76:0d:a3:89:03:bc:6e:c5:
73:3c:a6:7e:b7:59:ed:17:e3:86:b5:b8:5b:ed:67:0a:9a:b8:
2d:da:12:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:04:28 2026 by rpki-client