Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/FuqNDQgI91AJBcd5SMZ6c7BB4LU.roa
File: FuqNDQgI91AJBcd5SMZ6c7BB4LU.roa (raw, json)
Hash identifier: KDecELTj0j5nisrOm67sns0HrjibSju/F9ZZZjQyslc=
Subject key identifier: 16:EA:8D:0D:08:08:F7:50:09:05:C7:79:48:C6:7A:73:B0:41:E0:B5
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A10C5801DB4A0D9EA54DA7CCB1B16BB060
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/FuqNDQgI91AJBcd5SMZ6c7BB4LU.roa
Signing time: Mon 05 Oct 2026 13:54:16 +0000
ROA not before: Mon 05 Oct 2026 13:54:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 222.167.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:58:01:db:4a:0d:9e:a5:4d:a7:cc:b1:b1:6b:b0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Oct 5 13:54:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16ea8d0d0808f7500905c77948c67a73b041e0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:a4:14:04:0f:78:6d:9e:09:a0:18:e4:98:
b9:d2:c0:48:dd:f0:1d:fc:ef:95:0b:4a:fa:5d:18:
16:56:ed:70:71:5a:c6:cd:46:24:88:c1:fb:1a:91:
a1:8b:c8:98:bf:be:6e:04:f5:26:f9:7c:74:f9:94:
e6:ef:83:22:dd:af:eb:ef:48:e1:90:d5:5b:0c:c9:
e2:d6:19:f3:26:3c:50:96:ab:1c:ef:e9:f7:fc:86:
e0:01:44:d2:7a:cc:6b:df:b2:3e:ea:90:29:b7:bf:
56:17:39:40:0f:87:9e:ad:fd:fa:7d:59:e0:35:7b:
49:4b:49:13:7f:43:3c:be:dd:a6:1a:cf:fb:52:2e:
0b:af:02:3f:c0:45:71:22:d4:39:c5:b6:21:c0:90:
48:90:69:b8:39:74:30:59:a1:e6:30:10:f3:da:5d:
49:5e:ba:c3:bc:8b:d4:dc:79:1c:64:2a:65:40:64:
e6:8a:bc:b4:d9:98:1b:86:a8:16:9d:2b:e1:74:2a:
ac:89:58:c8:e8:84:af:cd:bd:6e:67:b2:e1:63:d4:
9f:45:9c:38:e6:4c:8b:6b:c6:8f:d5:8e:b3:f1:f5:
be:53:74:ee:8c:2a:c3:b6:f9:b2:17:ed:3a:0d:83:
65:bf:9b:5f:7b:d1:95:6b:f3:00:89:64:d4:e7:03:
d6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EA:8D:0D:08:08:F7:50:09:05:C7:79:48:C6:7A:73:B0:41:E0:B5
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/FuqNDQgI91AJBcd5SMZ6c7BB4LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.201.0/24
Signature Algorithm: sha256WithRSAEncryption
95:71:e2:a0:93:4f:e8:5a:be:0d:81:4a:e5:45:b4:23:b9:2b:
71:55:ed:0f:9d:0f:15:3a:a4:d6:b3:04:81:a0:01:58:a2:5d:
41:6d:02:2e:89:83:67:70:ff:49:fa:8d:95:5b:c8:9a:c5:6a:
d3:06:c3:cc:36:63:53:67:55:37:ae:b9:e0:99:bf:ae:3e:85:
c9:46:26:91:f7:a9:9e:bb:f8:b2:ef:a2:ad:8f:7a:0c:56:81:
97:86:3b:91:fb:d0:8c:5d:86:6a:28:5f:1e:2f:92:d7:48:c0:
89:26:e1:e6:5f:b1:98:18:73:20:a9:2e:d4:39:f8:dc:b0:2a:
e3:01:50:5f:40:2b:92:83:0b:81:3d:8c:0a:b3:75:5c:3b:a4:
4d:ec:23:3d:34:fd:d8:d6:31:8f:46:08:f4:c1:dd:64:8c:00:
bc:27:bf:ca:20:8a:6b:24:fc:a6:2d:7e:0f:f7:e6:73:13:97:
6b:90:d7:b4:17:21:8a:9e:db:34:28:1f:fe:65:3c:b1:09:ef:
36:91:d9:43:fd:ec:d6:89:c2:b4:f3:ad:d6:81:74:12:11:77:
c1:7e:38:e7:9e:cc:cd:ed:e4:ea:e5:2b:cf:25:dc:30:dd:9c:
f1:79:0e:00:ac:ff:43:96:1a:ff:28:b5:60:a6:36:2a:0d:3e:
19:f3:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 10:38:54 2026 by rpki-client