Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/FyfsVl4GqdO_KxmJ-NTknLhZtV0.roa
File: FyfsVl4GqdO_KxmJ-NTknLhZtV0.roa (raw, json)
Hash identifier: tguCZKRWzVaoDKOuophBnKERKPKdRLps8lvBx1MF8iM=
Subject key identifier: 17:27:EC:56:5E:06:A9:D3:BF:2B:19:89:F8:D4:E4:9C:B8:59:B5:5D
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019FB26425A4583BD7F70BF866EF39F052A7
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/FyfsVl4GqdO_KxmJ-NTknLhZtV0.roa
Signing time: Thu 30 Jul 2026 09:38:55 +0000
ROA not before: Thu 30 Jul 2026 09:38:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39600
IP address blocks: 130.49.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:64:25:a4:58:3b:d7:f7:0b:f8:66:ef:39:f0:52:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jul 30 09:38:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1727ec565e06a9d3bf2b1989f8d4e49cb859b55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:98:9c:b9:27:70:f8:2d:bc:11:00:7a:66:1b:
a6:1e:60:f7:92:f3:57:47:c4:87:20:1b:89:1f:28:
35:cc:21:65:89:39:80:2b:c0:01:75:8c:dd:0f:34:
a1:72:70:90:3a:d4:30:e2:ff:1e:62:82:1b:20:33:
17:47:e3:4e:3e:eb:ca:58:b9:1f:8d:f1:92:63:8b:
07:08:d4:2d:f5:28:4a:6b:3c:b8:9f:61:13:0a:03:
79:14:32:ed:1f:16:91:eb:d4:d5:cf:73:55:78:88:
d2:04:6b:58:f0:c7:cd:f2:44:e8:60:2b:fa:02:d9:
a2:f5:85:35:3d:6e:92:ee:e9:68:ed:66:bc:16:af:
88:a8:ef:1f:4d:57:e7:6e:2a:eb:17:b2:47:a8:8a:
17:47:e1:a9:c4:4e:1d:e3:04:f5:9f:4d:e1:81:77:
24:60:be:f3:f4:cf:cc:4b:45:f2:c3:c6:e6:97:ee:
20:3a:0e:9e:9b:84:fb:04:53:02:be:cc:94:d4:8e:
e6:61:cd:a7:4d:8b:42:7a:88:f2:59:e1:62:b2:57:
09:79:41:52:a4:1c:a8:ab:b7:00:45:bb:af:d3:73:
68:38:5a:ca:80:71:07:8a:fb:ae:46:14:5d:56:2b:
b3:6b:c3:15:20:aa:b6:a3:b0:7e:8f:0a:62:2e:28:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:27:EC:56:5E:06:A9:D3:BF:2B:19:89:F8:D4:E4:9C:B8:59:B5:5D
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/FyfsVl4GqdO_KxmJ-NTknLhZtV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.180.0/24
Signature Algorithm: sha256WithRSAEncryption
06:20:a6:2e:af:2b:bb:2c:58:3a:4e:33:6e:67:23:7d:78:cf:
09:40:b2:58:96:c7:23:68:cc:8c:1c:68:c7:ff:1d:97:92:52:
fc:2b:44:2a:44:9d:da:ab:27:87:5b:b1:94:6c:f9:7d:c5:77:
a6:a0:a8:f4:b8:9a:33:c1:52:1b:c8:03:95:22:72:47:78:45:
0a:32:ee:75:eb:03:77:6e:3a:7b:64:9e:56:dd:4f:fa:8f:ca:
3a:2e:4b:7e:6d:1f:f2:18:9e:ba:27:7d:a4:68:89:a7:22:5d:
20:ed:d6:f7:b9:02:10:6c:b1:97:84:ae:03:9a:0c:95:61:7d:
ed:57:fa:b1:0a:c0:88:87:9b:c7:d9:96:78:69:74:c1:a3:8e:
c1:09:bc:7e:c5:e8:89:9b:c3:da:f2:08:61:ad:41:d0:66:f3:
09:5e:89:d1:08:74:eb:d9:c6:d1:1a:6a:26:d0:58:f4:44:9b:
78:a8:2e:98:c2:05:6d:2f:a6:f0:98:8d:1c:7a:eb:91:c1:75:
61:af:a9:4d:fa:96:26:73:3e:8e:a3:85:3f:43:4e:ec:b3:6d:
05:b4:ca:56:4d:9d:7a:50:73:74:47:76:45:08:3e:3f:48:ef:
28:27:d9:a5:7f:1a:a0:5b:8d:55:ce:47:df:4b:b4:55:d7:ec:
f2:7e:85:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 14:16:23 2026 by rpki-client