Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/FUd3_uiRDwfAHqvhswYvKQHbfb4.roa
File: FUd3_uiRDwfAHqvhswYvKQHbfb4.roa (raw, json)
Hash identifier: JisBSYC59fG7+pF5YDGsAkRI8Xm3kc5i0eweb5iAKgk=
Subject key identifier: 15:47:77:FE:E8:91:0F:07:C0:1E:AB:E1:B3:06:2F:29:01:DB:7D:BE
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F09CCFB5CD19F53CE4E430D3E3473E810
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/FUd3_uiRDwfAHqvhswYvKQHbfb4.roa
Signing time: Sat 27 Jun 2026 15:57:36 +0000
ROA not before: Sat 27 Jun 2026 15:57:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 116.204.165.0/24 maxlen: 24
222.167.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:cc:fb:5c:d1:9f:53:ce:4e:43:0d:3e:34:73:e8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 27 15:57:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=154777fee8910f07c01eabe1b3062f2901db7dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:25:6b:e2:da:56:d6:96:df:18:a6:ee:42:
4b:4c:c6:ba:e4:3f:50:5d:35:e2:42:a5:2a:08:30:
5f:41:52:d3:78:e7:b2:6e:73:03:d7:46:26:bf:69:
55:c8:18:d4:88:11:60:c8:ea:a5:76:c5:01:88:16:
d3:10:5e:ee:3a:71:11:f8:16:8d:8d:71:4f:f5:77:
f6:88:69:b9:02:7b:2c:b9:bf:14:97:c3:c7:2d:0a:
78:9e:69:10:d7:06:08:3c:4e:39:0b:ee:e4:ce:c2:
61:00:2d:00:ad:7f:69:15:9d:d5:92:d6:45:c3:21:
18:ce:9d:e5:64:84:9f:bd:70:f2:cb:51:f4:29:69:
be:d2:27:37:6b:4a:a4:5e:4b:39:90:b7:17:64:7d:
3e:85:7f:3b:7f:58:dc:31:f7:c6:a4:d0:98:ef:66:
4b:4a:c8:a8:1f:62:c3:52:c8:a6:91:ee:13:68:ed:
7a:63:64:7a:ab:30:26:76:4c:b2:63:42:ff:e2:6c:
44:1a:dc:36:67:11:14:7d:1b:7e:38:04:71:d5:57:
d1:28:a0:f4:7c:32:51:56:b1:d2:0d:38:a5:64:0a:
c4:4e:cd:f7:da:04:03:af:cf:0b:37:b4:33:e9:c8:
f6:1b:a7:a9:82:8f:a7:e2:2e:6d:6d:9b:45:16:fd:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:47:77:FE:E8:91:0F:07:C0:1E:AB:E1:B3:06:2F:29:01:DB:7D:BE
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/FUd3_uiRDwfAHqvhswYvKQHbfb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.204.165.0/24
222.167.209.0/24
Signature Algorithm: sha256WithRSAEncryption
51:26:bd:27:ec:82:3d:0f:e7:3b:21:6e:e8:8a:a2:e2:a8:41:
bc:3a:74:37:22:cf:0e:75:06:4a:08:7f:a9:b6:d3:73:a8:61:
b9:e6:45:bc:ab:c3:dd:cd:bf:43:d6:a3:9b:7b:dc:3f:6f:6c:
7b:fd:2d:48:27:e7:65:5a:7c:15:de:4f:59:06:98:45:24:13:
ae:3d:db:b7:2a:be:85:46:fb:19:86:2d:ab:03:6f:39:12:9a:
df:9b:85:56:66:af:bb:00:b6:9f:cb:71:5a:ad:e2:5b:2d:a4:
5a:42:48:d1:96:85:bd:6c:de:2f:d6:8e:3f:33:a5:a4:f7:95:
f8:aa:aa:28:c2:85:40:48:95:09:a9:b8:d6:59:10:f3:53:6b:
16:43:4b:c0:fd:ef:5a:6d:ae:59:80:de:82:26:8d:9d:54:b0:
d2:3b:ee:6a:b2:50:87:50:83:76:59:9b:79:1c:ce:92:98:cb:
f2:68:c9:d7:fd:2f:6e:22:35:b3:73:39:f5:f4:94:0a:bc:30:
ca:1c:bd:d2:89:f9:9b:c3:08:9f:aa:7e:98:84:67:45:66:f4:
8c:c2:c3:3f:85:fc:ec:90:a4:5d:56:0a:8c:cb:73:f9:23:c2:
83:d6:ec:d8:ef:e4:0f:de:e1:6e:02:88:95:5b:ff:e0:23:5d:
df:98:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:49:34 2026 by rpki-client