Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/FdPkrQM5wJfWgwRztXidsCzsmxs.roa
File: FdPkrQM5wJfWgwRztXidsCzsmxs.roa (raw, json)
Hash identifier: kySbmspJSgU7jUiKcEQCWmWkzi3UO7YjG6VncBVDrTg=
Subject key identifier: 15:D3:E4:AD:03:39:C0:97:D6:83:04:73:B5:78:9D:B0:2C:EC:9B:1B
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 019ED02B3785988C9B16F842123F32F8B5D6
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/FdPkrQM5wJfWgwRztXidsCzsmxs.roa
Signing time: Tue 16 Jun 2026 11:22:33 +0000
ROA not before: Tue 16 Jun 2026 11:22:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 217.149.24.0/24 maxlen: 32
217.149.26.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:2b:37:85:98:8c:9b:16:f8:42:12:3f:32:f8:b5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: Jun 16 11:22:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15d3e4ad0339c097d6830473b5789db02cec9b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:94:cb:59:d3:b6:c7:50:d8:c0:91:ec:44:
a5:59:6e:30:ec:79:ac:c1:b3:8d:88:c9:72:ac:a9:
a5:70:04:fc:67:67:18:60:dc:2d:39:d6:97:8a:49:
0b:60:35:e0:97:20:1a:c9:e1:95:ce:8a:a1:23:89:
d1:98:d4:51:2c:97:67:7a:b7:ea:fd:90:13:7b:89:
4c:4a:13:ab:94:d9:00:4a:51:42:d1:1d:69:22:6d:
90:e0:9d:c6:f1:d9:ac:1e:2c:bf:68:e2:2e:51:c0:
00:bd:83:b8:bb:0d:0c:b4:ab:a4:ee:19:df:da:2d:
01:6c:13:66:5c:75:a8:e6:50:d4:eb:17:ad:49:27:
1f:ab:c6:27:27:89:a4:4c:a2:70:10:62:3b:09:8f:
a0:ba:d1:41:54:90:a7:5c:1f:4c:64:fb:7b:b4:3e:
81:39:7c:05:55:d3:ef:a4:31:c4:b6:76:96:6c:39:
fd:92:51:08:cb:dd:f4:15:7a:21:10:77:ed:6e:05:
37:e0:bc:ae:bb:b3:0b:51:f0:d8:d6:b6:05:34:f8:
d4:69:cf:78:9e:2c:53:ad:84:3d:6f:42:68:3f:b1:
29:e0:af:54:83:75:d2:1c:98:2f:2f:a4:ff:4a:18:
dd:c1:9f:25:6a:9b:cf:02:7c:b5:1b:f8:4b:72:7c:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D3:E4:AD:03:39:C0:97:D6:83:04:73:B5:78:9D:B0:2C:EC:9B:1B
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/FdPkrQM5wJfWgwRztXidsCzsmxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.149.24.0/24
217.149.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8c:d9:e6:52:9a:7d:cc:36:e5:8f:d2:ad:da:6f:fe:07:06:
ee:c1:c3:77:55:b4:65:58:6b:e5:f9:df:b8:e3:6f:b8:82:dc:
32:5c:00:e0:33:8e:0d:7c:68:12:63:70:12:d5:85:31:e7:c7:
52:1b:92:80:2c:cc:e1:78:76:cd:f7:c8:b0:35:d6:ba:06:64:
e6:9a:9c:fc:63:b3:cd:17:ba:45:a0:b5:2b:34:7c:9b:8a:e2:
3c:c1:db:73:47:ca:b5:d4:50:36:e7:02:c6:9d:23:c6:5f:f1:
d6:e7:af:44:a3:e2:6f:7f:2a:ff:86:81:f2:42:89:ef:a4:25:
44:d3:fa:f6:27:3e:b4:1a:b4:23:c3:c0:10:8c:d8:5c:35:32:
0b:49:5f:8f:3a:45:12:b5:45:1e:86:cf:99:68:5b:a3:98:ba:
cf:f8:94:1a:a6:7f:8d:16:fa:56:e5:a3:56:da:c2:28:c1:24:
b4:f9:e1:1d:a5:02:07:7b:40:0c:21:c7:09:99:76:72:a0:70:
0f:fa:51:33:1c:65:e6:82:c1:26:97:08:f5:cb:1f:63:54:2f:
eb:ef:82:84:6a:89:85:a2:4d:a9:f0:00:fe:48:ac:93:04:cc:
5f:7b:ff:d9:dc:7c:9d:ed:a7:0d:35:7d:cf:e7:e2:b4:df:55:
fc:74:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:51:32 2026 by rpki-client