Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/fbVmVDZSr2N5vEu2YR2iNEUtIwY.roa
File: fbVmVDZSr2N5vEu2YR2iNEUtIwY.roa (raw, json)
Hash identifier: XF+oa0yHniCseXwIDuAlr+pULGrTcD83gldJXfm1CQM=
Subject key identifier: 7D:B5:66:54:36:52:AF:63:79:BC:4B:B6:61:1D:A2:34:45:2D:23:06
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 019F960763073FAFF4643E2F7139D7914E3E
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/fbVmVDZSr2N5vEu2YR2iNEUtIwY.roa
Signing time: Fri 24 Jul 2026 21:28:14 +0000
ROA not before: Fri 24 Jul 2026 21:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44947
IP address blocks: 81.30.98.0/24 maxlen: 24
2a13:9a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:07:63:07:3f:af:f4:64:3e:2f:71:39:d7:91:4e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Jul 24 21:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7db566543652af6379bc4bb6611da234452d2306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:9b:0f:b4:2e:bb:c6:8e:0b:02:3b:d4:61:
95:77:1d:53:6d:d6:9c:c9:f9:bf:7d:bf:1b:73:fe:
7e:89:f2:ef:48:a6:8b:98:ba:6f:76:c2:06:c0:f6:
21:df:4d:88:80:14:fb:17:5f:37:06:33:a4:96:e8:
e4:c8:4e:84:02:6a:ff:09:b0:7d:69:88:6e:fc:93:
86:85:7b:09:53:9a:ea:76:0d:3d:7e:b8:7e:f8:f5:
7b:63:44:1e:b1:7f:9d:54:88:75:a7:d6:03:d3:de:
13:cc:9f:01:4c:bc:e9:a4:8c:d1:d3:63:f7:d9:fa:
55:f0:a6:b5:17:53:24:73:15:98:79:e8:08:b6:31:
cf:0f:c9:1d:08:9e:8c:3a:b9:82:6c:c9:32:12:1a:
38:ba:89:23:ad:01:0d:fe:6a:67:1a:d9:e3:cd:6b:
b0:e2:81:47:11:77:0a:5b:95:c2:cc:29:5e:44:4d:
e0:c1:1f:75:07:81:69:b7:3b:5a:b6:0f:c3:30:91:
3f:33:e5:99:9e:4a:9a:42:d6:ea:85:31:00:70:7b:
fb:f7:50:7a:f3:b2:f8:92:36:48:88:c7:46:3b:8a:
91:71:d9:e5:d5:15:d0:50:09:23:9f:2a:92:1c:04:
f8:88:1b:bf:63:c8:84:82:4b:2c:bb:5c:d5:e4:e2:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B5:66:54:36:52:AF:63:79:BC:4B:B6:61:1D:A2:34:45:2D:23:06
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/fbVmVDZSr2N5vEu2YR2iNEUtIwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.98.0/24
IPv6:
2a13:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
e6:9b:ff:7a:1d:fd:8c:36:43:cd:11:1f:f3:f9:e6:ee:48:64:
0b:10:cd:57:e2:f4:2e:bf:f1:74:57:63:d9:cb:7e:38:c7:d0:
30:f2:1f:4f:40:3e:05:aa:8b:d7:61:52:df:ca:5b:a3:52:2d:
16:94:2b:d7:b0:ff:af:85:c1:bd:99:b2:f8:d0:01:6c:91:c0:
fb:da:cb:24:ee:04:ad:b9:3f:68:2e:5a:bf:84:56:ba:1f:8e:
ab:33:7b:30:21:aa:14:0c:e7:0a:e9:18:ae:c8:a8:cf:c7:d8:
63:58:97:db:40:4e:b6:31:4b:47:c2:96:eb:8d:c1:6b:cc:8d:
62:37:26:9e:8f:3a:b2:f3:c1:a6:fc:90:ef:a6:c3:34:37:75:
12:81:ac:36:0e:08:76:1a:6c:0d:4a:0b:18:9e:5a:77:e5:fb:
a3:ad:82:f6:3b:dd:14:0d:4f:c5:b8:31:b9:19:78:aa:fe:9e:
90:5d:c6:c3:61:bc:af:32:60:84:d6:4b:46:1f:3b:86:a9:e5:
1b:b4:07:3e:14:17:f9:05:cb:49:4e:84:7f:54:05:9d:b6:c7:
52:f9:54:3f:33:b5:b3:7d:df:d6:8e:ef:fb:f4:47:b2:3c:5a:
19:c1:3d:e9:e9:89:dc:1c:20:6b:4a:12:6a:81:59:0d:25:80:
0d:ea:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:49:15 2026 by rpki-client