Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FQGIp17GGsEA4diGdAlLkHw86OU.roa
File: FQGIp17GGsEA4diGdAlLkHw86OU.roa (raw, json)
Hash identifier: RyE+YPXVH9Foa/nYCzLEThyPRd7LivqT2fyAkc1ez2g=
Subject key identifier: 15:01:88:A7:5E:C6:1A:C1:00:E1:D8:86:74:09:4B:90:7C:3C:E8:E5
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368EDF471FA87F47F2695BCD9C72A57
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FQGIp17GGsEA4diGdAlLkHw86OU.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209474
IP address blocks: 212.38.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ed:f4:71:fa:87:f4:7f:26:95:bc:d9:c7:2a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=150188a75ec61ac100e1d88674094b907c3ce8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:14:06:3a:25:5a:e7:30:f6:6c:89:e9:0f:
50:cf:a3:0c:f9:b9:19:2e:80:55:25:11:33:f1:97:
ff:55:a5:c3:fc:dd:fc:73:5c:85:61:de:06:f9:54:
86:83:30:75:e7:c6:e2:8d:67:df:28:e7:39:45:66:
e3:23:d1:fe:00:69:33:65:d8:f2:7b:40:7e:56:c8:
1f:82:49:a8:84:bf:20:82:e9:9a:06:d1:b2:52:44:
25:6f:4d:bf:57:08:68:32:5f:88:f1:a0:78:d4:e6:
ec:28:2c:7d:45:24:24:59:f1:ac:f6:76:64:c4:6e:
ec:dd:70:de:c9:a5:fa:f9:3a:4d:59:74:ab:49:25:
5c:78:bb:cb:73:29:c0:d4:7a:f3:a7:14:93:c4:9e:
29:a1:bd:8d:f2:42:57:27:3c:24:6d:b5:91:68:e0:
b4:e4:ec:50:cd:46:7d:67:dd:e3:17:f1:f7:29:e5:
a7:1a:f2:dd:de:23:6c:aa:50:58:5a:87:80:7b:57:
12:e3:9d:8a:29:28:21:a5:dc:15:c4:57:4a:5a:8c:
59:b4:a9:35:25:2b:e9:22:23:49:5e:fe:59:8d:29:
d4:48:a7:78:23:c6:f7:4e:38:c8:a4:9d:94:0b:52:
ae:15:ff:d5:ec:d5:4b:dc:49:2a:04:cc:76:b1:3c:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:01:88:A7:5E:C6:1A:C1:00:E1:D8:86:74:09:4B:90:7C:3C:E8:E5
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FQGIp17GGsEA4diGdAlLkHw86OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.38.88.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b5:e8:84:cb:c2:84:4e:fd:0d:23:31:d7:92:39:5f:93:6b:
7c:52:29:1e:c1:d8:60:2f:85:15:d1:52:81:7b:bc:70:fc:38:
c4:0d:10:62:72:d1:81:3a:a7:fe:40:d6:7b:f6:30:23:bb:cc:
43:e4:d5:02:95:b5:42:f6:41:37:99:f2:0b:65:65:f2:f0:0d:
39:4a:b5:62:c8:55:a9:c0:53:90:22:81:a5:ed:b3:a9:85:da:
8f:e8:c9:4d:a0:b2:3c:96:52:aa:67:16:ee:da:3d:e5:cc:8b:
0e:b1:f7:76:c2:ac:ff:1f:29:9c:56:a9:82:d9:8a:1c:86:26:
1c:6c:62:c6:eb:d7:16:8e:cd:b3:ce:1e:49:b4:10:36:6c:02:
83:7c:a0:71:f8:14:9c:f7:a7:dd:e6:7a:13:83:81:72:06:c5:
95:8b:95:36:37:ee:ae:8d:5c:cb:7e:f5:6a:71:55:69:94:c9:
b9:43:c7:7a:af:1e:7d:0f:13:f7:0d:1f:31:5c:2c:dd:51:4e:
e1:f6:b8:b7:fa:ec:e0:26:48:a1:0d:2e:55:30:aa:82:29:20:
63:8f:92:a8:8c:dc:96:0b:2d:1a:63:21:62:ed:20:d9:1c:ae:
e1:e7:27:b0:32:f0:20:e3:50:2e:41:bc:1b:24:bc:66:d9:51:
fd:46:f0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:10 2026 by rpki-client