Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/FAlee-OYgKuE4kcEctbEn5npxGk.roa
File: FAlee-OYgKuE4kcEctbEn5npxGk.roa (raw, json)
Hash identifier: SGbhggfKol3NwIX4ZMFxR+eOS/x+4TXDB+7IUtG8eyQ=
Subject key identifier: 14:09:5E:7B:E3:98:80:AB:84:E2:47:04:72:D6:C4:9F:99:E9:C4:69
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 019DA0CE7FB9FB48890E484E1A8DF961F2E5
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/FAlee-OYgKuE4kcEctbEn5npxGk.roa
Signing time: Sat 18 Apr 2026 13:36:20 +0000
ROA not before: Sat 18 Apr 2026 13:36:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 84.247.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:ce:7f:b9:fb:48:89:0e:48:4e:1a:8d:f9:61:f2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Apr 18 13:36:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14095e7be39880ab84e2470472d6c49f99e9c469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:37:08:da:af:a8:85:1e:71:a2:6f:3c:24:
c7:2c:12:2d:6b:11:f4:f2:c4:d0:03:69:61:7a:68:
d1:7e:46:45:97:24:1d:7e:2f:b5:ab:d7:b0:6d:28:
a4:39:32:6d:2d:23:d4:f5:22:a2:de:f0:63:e5:45:
40:a2:fa:b4:f8:78:86:dd:a4:e2:83:74:1a:96:2f:
3a:69:72:a5:7e:48:1c:d4:c6:fc:8a:83:0b:16:76:
9f:6f:e0:01:e0:ec:48:04:18:f2:bd:91:98:54:db:
1a:2d:a6:8b:e3:82:8a:43:b1:35:b3:59:67:54:be:
97:49:73:e7:5f:2e:bf:c3:71:62:18:d9:6d:83:a8:
18:ca:c2:1b:c9:e4:6e:ab:60:b8:71:e7:36:d7:e7:
68:d9:d2:6c:7f:24:7e:7a:34:41:ff:8e:3c:57:84:
88:d1:9c:2a:f2:56:f4:0f:b1:a9:09:f8:a8:c0:14:
d8:92:5e:bf:4b:0b:52:c6:8f:e8:9c:df:56:de:49:
ad:d7:d7:00:9b:7a:7a:15:45:f3:a0:f0:0c:8d:06:
16:58:ea:a7:63:e2:7f:d0:4c:49:69:76:52:d0:da:
27:c2:f9:9a:de:82:43:d4:3b:0e:59:0d:31:b6:3c:
59:98:07:ce:c0:74:f9:4c:2d:98:49:6d:46:59:50:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:09:5E:7B:E3:98:80:AB:84:E2:47:04:72:D6:C4:9F:99:E9:C4:69
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/FAlee-OYgKuE4kcEctbEn5npxGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:47:65:3c:01:2b:1b:b1:0d:fc:32:8e:da:07:37:6d:55:9d:
d5:f2:37:97:57:35:f6:4c:7d:fc:06:db:20:f7:43:45:8f:31:
ad:82:73:b4:55:59:00:01:3e:ae:e2:d6:b0:f8:95:d5:d6:74:
a4:e2:cd:a8:cd:ea:59:d7:6f:ab:8a:6c:9e:0b:30:14:a0:fa:
8e:48:ec:2f:6e:04:4c:0f:83:d9:3a:63:18:21:2f:a3:32:b3:
ea:50:dc:3e:42:77:a8:e7:8d:bd:68:e6:a0:a6:01:9f:7f:f8:
d5:e7:27:5f:37:2d:bd:13:e8:1a:55:1c:e0:8f:44:19:69:9c:
d4:c8:74:50:89:1b:ed:80:f4:31:93:05:46:6f:c1:1b:88:2a:
ef:41:26:29:20:ba:63:8f:63:ef:e6:b3:4b:c7:5e:77:33:73:
ab:66:d8:ee:28:b1:40:c0:e8:c8:7c:30:f1:0b:c2:68:2e:b0:
60:37:e9:cf:a8:18:1f:ad:d1:ea:a0:89:67:f1:2a:86:08:ef:
78:3d:f4:55:82:d4:d3:d9:02:ad:06:4e:98:25:c1:3f:6f:e7:
cf:d9:7b:5d:31:8f:87:f2:48:f8:c7:7a:9a:bc:a5:fb:ef:77:
53:d9:8d:24:c3:16:80:e0:48:8b:6c:71:ed:be:8a:34:08:65:
eb:d5:aa:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 23:16:07 2026 by rpki-client