Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/FkByO5VyomUSANjFcmnEdvz3Cko.roa
File: FkByO5VyomUSANjFcmnEdvz3Cko.roa (raw, json)
Hash identifier: z10lQ6g3SDPSArAHievRO6Z2mqsSExBrr1d205CDUP4=
Subject key identifier: 16:40:72:3B:95:72:A2:65:12:00:D8:C5:72:69:C4:76:FC:F7:0A:4A
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 019F2369426E9490A9B22A4284B1E6D78485
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/FkByO5VyomUSANjFcmnEdvz3Cko.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51167
IP address blocks: 45.92.30.0/23 maxlen: 24
45.92.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:42:6e:94:90:a9:b2:2a:42:84:b1:e6:d7:84:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1640723b9572a2651200d8c57269c476fcf70a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:fb:12:6c:5d:4b:95:2b:38:22:a9:c1:be:
11:d4:ac:82:fc:ef:73:6a:ba:9e:fd:00:fe:f1:96:
7e:35:a4:e5:91:51:77:20:5b:bf:07:6b:71:2a:e8:
fa:cc:df:2d:23:ee:1c:39:f8:56:f7:93:27:dd:31:
f8:36:35:b8:83:47:dc:45:62:67:01:90:f2:44:54:
72:4e:c8:83:0e:2a:53:c4:41:87:85:8b:31:ca:a0:
b0:d4:93:74:1b:16:26:03:78:b8:f7:34:4e:64:7f:
d4:49:26:a0:0c:82:a3:87:4d:60:46:7f:bf:9b:1b:
77:e4:57:91:aa:fb:3e:97:6c:8f:75:37:58:97:da:
11:ea:f2:86:ff:a0:91:9a:b5:3f:c1:65:6d:2e:38:
99:a5:fb:aa:92:fc:3f:1d:5a:e8:0b:05:cf:88:bd:
4c:fe:8b:67:c5:f4:0f:dd:24:05:a4:82:e6:2f:b5:
6b:3b:2e:f8:00:b2:f7:f1:6a:72:be:c3:ee:33:da:
82:9d:fd:49:b5:92:e6:07:b6:2c:28:82:89:54:d6:
96:2b:5f:3e:a9:16:48:a4:4e:18:8d:fa:fe:6a:50:
1b:fe:49:02:b0:17:b7:36:b9:4c:32:97:e4:17:ac:
cf:0c:ab:95:f8:70:92:0d:61:26:b5:69:05:ab:b1:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:40:72:3B:95:72:A2:65:12:00:D8:C5:72:69:C4:76:FC:F7:0A:4A
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/FkByO5VyomUSANjFcmnEdvz3Cko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.30.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:c3:67:0d:10:82:d4:4a:08:0e:8d:b5:74:e6:af:81:33:91:
f3:91:d5:be:fa:1f:72:09:66:f7:b9:5a:cf:3d:64:28:13:8d:
c1:30:83:4d:a7:f5:5a:30:88:0f:f2:a4:28:43:2e:a9:dc:ea:
f3:97:6d:1e:6b:f0:cb:d1:5f:16:55:1d:56:63:0b:88:e8:33:
6c:82:46:17:cb:35:de:5e:1b:81:b1:bb:bb:b0:32:8d:e5:d6:
02:1c:54:1c:aa:58:3b:f8:e6:52:44:ae:65:71:c2:ac:0f:8e:
bb:80:97:1e:96:7f:9b:22:0b:4c:34:e4:d3:bf:4b:99:63:0b:
8f:57:38:e5:7c:b5:52:f2:db:12:69:41:f8:17:70:10:c1:e8:
a8:21:d8:3e:b0:d7:12:48:7e:a2:ce:6b:d1:f5:32:31:7e:97:
73:76:13:8d:95:37:6a:a9:26:c3:6b:f6:31:2e:28:dc:d9:f5:
bf:34:ac:de:5a:2d:69:6c:77:f6:e4:9f:23:c2:79:76:2e:87:
73:66:a4:39:c1:18:07:14:b7:ef:40:77:c4:fb:ed:6a:51:8d:
54:a3:d1:2b:f5:09:03:14:99:ad:8b:9e:2f:75:1a:5c:68:40:
d9:19:07:8f:13:b6:6d:43:25:39:e7:b2:56:56:f9:bb:c0:10:
f2:20:e5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:58:14 2026 by rpki-client