Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FbC0AQyKywQfjQqbQOd2CMlWzoo.roa
File: FbC0AQyKywQfjQqbQOd2CMlWzoo.roa (raw, json)
Hash identifier: 6b38hN1wbJw9XUyVaRXs2d+yHGpkyCDzEECqk0ScIMk=
Subject key identifier: 15:B0:B4:01:0C:8A:CB:04:1F:8D:0A:9B:40:E7:76:08:C9:56:CE:8A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E1FED2454ABE1F7AA78EBCF67BBA70307
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FbC0AQyKywQfjQqbQOd2CMlWzoo.roa
Signing time: Wed 13 May 2026 06:01:35 +0000
ROA not before: Wed 13 May 2026 06:01:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 217.60.200.0/22 maxlen: 24
217.60.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:24:54:ab:e1:f7:aa:78:eb:cf:67:bb:a7:03:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 13 06:01:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15b0b4010c8acb041f8d0a9b40e77608c956ce8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d6:ad:d0:bc:42:b4:70:36:e4:5d:21:c8:f5:
16:36:80:c3:11:8e:83:b3:34:df:76:89:44:6a:46:
92:9d:fd:03:88:70:22:8f:65:ea:00:52:ef:97:3e:
56:72:cf:d2:10:47:1e:a0:c7:ba:38:93:95:6b:28:
34:1d:5f:ba:bc:e5:7c:73:4a:08:4d:be:be:52:af:
db:07:a3:da:71:b3:47:4d:1d:1d:9c:9b:c6:8f:0c:
9e:a0:68:97:a1:91:83:88:cc:d6:e8:1a:ef:88:56:
91:06:80:dc:42:56:b5:3f:c8:a0:a6:a6:83:c0:3f:
bb:9c:00:ab:e7:74:39:3b:45:04:44:da:bb:4c:c1:
83:48:0a:0f:51:ac:cc:5e:a3:ff:64:9c:bf:5e:a1:
fd:6d:0f:61:d6:fd:e4:e1:cf:9d:7b:86:c4:d8:57:
fc:b8:ad:14:23:00:69:c1:33:0b:70:24:77:73:ba:
a5:80:61:36:36:47:85:28:ba:36:c2:90:2c:ec:f2:
0e:f6:0c:76:cf:8e:bb:ae:e9:53:25:ae:ea:df:aa:
25:6d:8b:e2:b3:1d:4d:da:54:69:0b:0a:18:09:73:
8e:10:56:fc:de:39:14:46:e8:c7:47:f5:a9:83:ee:
c2:ad:17:be:fc:5d:60:a9:8e:a5:2a:8c:3e:d8:b7:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B0:B4:01:0C:8A:CB:04:1F:8D:0A:9B:40:E7:76:08:C9:56:CE:8A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FbC0AQyKywQfjQqbQOd2CMlWzoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.200.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:32:07:08:9a:59:b3:56:0e:51:37:37:f4:a0:c2:55:e0:bd:
52:9b:3a:6c:b6:f1:55:38:27:9c:77:22:22:93:ca:db:b8:7a:
19:e9:af:ad:7b:80:42:bc:16:b5:6e:82:04:d1:53:bb:95:3f:
a4:ba:33:cf:ae:21:c6:d4:2f:70:e2:8c:82:95:7e:84:11:4a:
f0:5a:73:de:25:11:b9:8d:65:db:ba:21:02:da:bd:cb:9f:ce:
c9:83:d4:c2:23:9b:0e:3a:35:f3:a2:94:63:54:7d:69:68:08:
65:69:49:ff:9b:c0:1a:f1:4e:f1:cf:75:bf:e8:70:68:7a:e7:
66:ae:19:0e:03:8b:5d:2c:b6:4c:9b:87:c4:08:ce:02:dd:51:
be:72:9c:78:7b:28:e8:54:12:09:54:78:16:9b:50:10:31:3d:
a1:6c:86:58:9f:af:14:ba:be:84:25:69:b1:88:ed:82:73:3d:
9a:0d:ec:a9:d7:9e:4a:de:02:ad:ce:42:b5:ef:af:4e:9f:a7:
71:de:a5:71:8e:90:dd:5d:5d:b2:fa:a0:44:95:cd:6f:aa:fd:
e5:d1:bb:cc:1d:1c:17:23:50:cf:b8:5c:ac:12:2e:92:ce:3c:
8a:d4:ab:20:bb:a2:b4:0c:33:8c:c5:5a:49:7b:b2:41:14:05:
a0:f5:58:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:55:20 2026 by rpki-client