Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/Fu8KZHLDLt0PcTCFQ_1SdjKZ0uk.roa
File: Fu8KZHLDLt0PcTCFQ_1SdjKZ0uk.roa (raw, json)
Hash identifier: ZRYOD/e/KtPDQ1uvXRpnm6kp6bHpp7HGPUjvUzSoMsM=
Subject key identifier: 16:EF:0A:64:72:C3:2E:DD:0F:71:30:85:43:FD:52:76:32:99:D2:E9
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 019CCDE9F1811D214234696E74803B1076C3
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/Fu8KZHLDLt0PcTCFQ_1SdjKZ0uk.roa
Signing time: Sun 08 Mar 2026 14:46:26 +0000
ROA not before: Sun 08 Mar 2026 14:46:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 37988
IP address blocks: 185.199.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 15:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cd:e9:f1:81:1d:21:42:34:69:6e:74:80:3b:10:76:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Mar 8 14:46:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16ef0a6472c32edd0f71308543fd52763299d2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:16:90:72:58:01:ce:f8:a2:2c:50:d6:a4:40:
7e:25:71:9d:4b:3c:47:de:9f:e5:81:3b:3d:bc:7e:
e9:23:51:89:32:7e:58:10:01:07:92:fe:01:a8:68:
42:9c:78:40:61:bd:1c:59:81:63:69:63:87:32:78:
5a:64:55:ce:d5:47:1a:8f:4c:4d:d6:15:2c:99:5b:
b9:e1:b5:fc:74:24:34:63:ed:fa:f9:00:93:0a:7f:
a1:97:26:af:8b:80:ed:62:7f:0c:da:01:88:92:a1:
11:11:00:b7:22:2e:7b:29:6a:1a:28:17:a9:f2:6f:
ed:37:a0:5a:cb:74:8d:f1:26:d8:2c:a5:2b:46:ff:
2e:77:53:94:2c:75:23:d3:45:80:92:01:37:bd:ee:
02:ec:84:45:c6:45:6c:56:1b:b7:af:7d:e9:1f:4b:
92:59:75:ee:2c:29:fd:9f:0d:a1:08:29:c6:80:57:
bf:d1:a6:e2:ac:da:b2:16:73:fa:d0:45:3c:e0:59:
90:6f:69:d8:73:b2:6b:5f:70:1f:73:94:33:23:3d:
dc:c3:05:7e:e1:38:58:22:c2:17:6e:5f:9d:39:8c:
37:a9:f9:cb:d8:a1:87:a1:41:8f:f2:5c:95:17:00:
24:8a:11:2d:62:04:55:e4:40:41:35:77:9a:c8:8a:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EF:0A:64:72:C3:2E:DD:0F:71:30:85:43:FD:52:76:32:99:D2:E9
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/Fu8KZHLDLt0PcTCFQ_1SdjKZ0uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:74:d2:19:63:a0:2a:d7:bf:ef:2c:75:96:bd:1c:01:1a:06:
d4:30:de:93:6f:ee:06:4f:a3:e6:49:6f:9a:ee:df:74:6f:0d:
71:79:b4:84:3d:fc:3c:6e:ac:6a:88:53:69:12:84:89:6c:c9:
9d:8c:73:50:5a:e6:68:77:98:53:16:a8:a4:ea:32:f2:c0:97:
50:93:58:83:03:06:37:c3:4c:60:dc:c5:93:5a:6b:8c:7c:20:
6d:68:55:a8:c9:b3:10:b2:49:d9:b9:33:fb:97:14:e1:95:98:
72:ce:55:88:10:41:e2:e3:26:26:5f:bb:14:13:1c:14:8e:20:
38:12:f5:73:bf:02:a2:79:6e:95:90:6f:69:b2:54:02:56:c0:
03:35:e8:3d:84:a7:c0:0b:cf:73:ef:ef:54:61:b5:a3:d7:2d:
29:60:ec:40:d6:38:0b:67:4a:6a:15:c5:75:f5:be:3b:f8:f7:
b9:08:b7:7c:f0:e7:be:8c:02:16:2b:97:f7:45:a2:fe:d1:c4:
a5:33:cb:37:de:b6:6b:1f:7c:c5:d9:cf:3a:6a:6c:2c:92:04:
c9:a9:bf:16:44:57:25:32:f1:ce:c2:0c:5b:e8:4a:08:11:7a:
ae:6e:9f:15:e5:74:cf:0c:b2:2c:52:91:3c:73:94:23:f3:34:
73:35:2d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 01:56:01 2026 by rpki-client