Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/FOOSqqUIDGJTUPOXrl-JD0jqZjE.roa
File: FOOSqqUIDGJTUPOXrl-JD0jqZjE.roa (raw, json)
Hash identifier: ELlPLJeKlgaWcXq1uGwdNDOiqXF5Ps79NeAa45Oolz4=
Subject key identifier: 14:E3:92:AA:A5:08:0C:62:53:50:F3:97:AE:5F:89:0F:48:EA:66:31
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A0E7E847DD27CBFB2460C9E383E47FD74C
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/FOOSqqUIDGJTUPOXrl-JD0jqZjE.roa
Signing time: Mon 28 Sep 2026 12:05:54 +0000
ROA not before: Mon 28 Sep 2026 12:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54103
IP address blocks: 168.199.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e8:47:dd:27:cb:fb:24:60:c9:e3:83:e4:7f:d7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Sep 28 12:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14e392aaa5080c625350f397ae5f890f48ea6631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:f7:23:ee:71:c0:0b:bd:09:82:42:53:15:
a0:98:7f:6d:06:5c:99:c9:40:c1:b4:6b:18:ad:aa:
a7:b7:75:48:48:8d:a1:8c:fd:de:56:0b:a6:b8:b7:
5f:6d:8f:73:66:2d:52:30:eb:1c:ee:03:bf:0f:a5:
ad:61:b6:eb:cb:fa:9b:14:33:51:b0:42:2e:af:78:
72:fb:bc:28:5f:35:3b:10:f4:81:d7:69:24:a9:32:
67:9e:26:57:2d:ee:2b:dd:d5:9b:7d:8d:f8:bd:b1:
7c:07:dd:c0:37:4c:ba:ca:ec:e2:4e:ef:31:8a:5d:
93:25:21:57:f0:6e:97:a7:9d:b6:f9:68:83:9c:dd:
3a:ee:e5:79:58:68:4d:28:6b:cd:17:6b:95:41:8c:
27:31:c1:58:4c:15:47:ff:f5:66:61:bc:13:3f:e1:
3a:f6:19:2b:6a:b6:99:88:34:a1:d0:a7:41:32:4d:
d0:45:15:f5:2e:dd:a7:e4:d4:cd:1d:d1:9f:82:23:
8d:85:cd:99:b2:51:b1:c0:b2:5f:6b:8d:41:05:56:
49:81:ac:46:97:3b:c9:12:ea:97:83:67:2e:4d:1a:
84:ec:e8:8d:4f:52:0a:45:20:c4:f8:2b:95:57:9c:
88:1f:fa:6b:67:ce:28:ad:1d:9a:01:05:31:e4:a6:
61:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E3:92:AA:A5:08:0C:62:53:50:F3:97:AE:5F:89:0F:48:EA:66:31
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/FOOSqqUIDGJTUPOXrl-JD0jqZjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.27.0/24
Signature Algorithm: sha256WithRSAEncryption
19:87:06:8f:10:16:b1:55:34:2d:2e:9a:ba:49:a9:9d:f4:22:
90:2a:30:9e:57:a9:0a:c3:d1:b5:52:fb:83:ac:07:55:98:e8:
ab:82:78:53:f5:db:04:b6:f3:40:58:c1:22:23:1e:d1:2a:53:
8e:d6:2b:a9:50:24:b7:59:ac:c8:22:5e:11:ff:b9:d1:65:13:
c0:b8:8a:5e:c1:41:a2:52:1b:44:6e:b4:96:80:60:5c:08:24:
e7:04:95:df:ca:14:28:34:f0:2e:08:a5:90:d9:90:26:9b:fb:
18:a1:06:e3:ff:ff:b1:de:e8:86:59:61:8b:98:8e:c9:50:60:
63:db:ee:6a:a9:8d:84:0c:cc:1a:dc:0b:da:9d:bf:7f:c6:e2:
98:66:6f:01:4d:ec:b2:47:c1:e8:77:55:3d:03:3a:6f:13:3f:
14:83:a6:b9:26:aa:95:94:5c:62:ca:8b:1a:af:22:aa:0b:11:
65:eb:48:da:b2:e6:d9:a8:a9:39:91:5b:ff:4f:13:d5:e9:ab:
a1:be:11:6c:97:76:97:ac:9c:5f:f9:69:43:76:39:d5:31:27:
1c:57:d1:e6:6e:fb:ca:0d:be:f6:03:c8:3b:1d:7a:47:86:58:
d2:6b:03:b1:11:81:64:9f:27:ce:e9:fc:d4:6b:f8:01:3a:79:
93:dd:ae:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:12:02 2026 by rpki-client