Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/FBnng7ak4AJweaj7mNiiDGPhP-A.roa
File: FBnng7ak4AJweaj7mNiiDGPhP-A.roa (raw, json)
Hash identifier: 7O6BMYqqhyaPH6JejfjvmE43i9bE4Safke5zHGTaAxk=
Subject key identifier: 14:19:E7:83:B6:A4:E0:02:70:79:A8:FB:98:D8:A2:0C:63:E1:3F:E0
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 019F2368FE803485B49D62735F53AD0BFAE6
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/FBnng7ak4AJweaj7mNiiDGPhP-A.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36385
IP address blocks: 185.25.30.0/24 maxlen: 24
2a00:79e0:101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fe:80:34:85:b4:9d:62:73:5f:53:ad:0b:fa:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1419e783b6a4e0027079a8fb98d8a20c63e13fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:7e:5e:7b:eb:cf:ca:f7:c0:ac:aa:a0:f5:
a7:66:0e:da:e4:2d:e7:c7:47:52:63:4d:58:cc:2d:
70:85:c2:30:45:ae:17:86:ed:5f:cd:dd:d2:8a:be:
51:d3:87:cf:41:70:85:5b:cc:6f:dd:81:44:4e:38:
00:1b:92:1d:73:80:28:32:33:20:a7:ac:36:07:e8:
82:81:35:a3:5d:9d:ea:1e:37:ca:b2:41:e7:84:59:
64:e6:98:52:ea:bb:87:b2:c3:53:16:bf:fd:0d:0a:
d3:fa:a1:62:a4:56:79:af:a6:8d:30:93:88:39:e1:
40:87:b4:cb:0c:22:cf:0c:10:97:a0:1e:7c:2e:b5:
df:eb:a1:e8:91:20:50:9b:30:9a:df:c2:79:93:55:
90:63:ee:02:e1:4a:88:58:aa:24:16:ed:49:16:ec:
5b:92:69:30:6e:31:eb:36:47:22:ae:94:f2:03:c2:
33:14:59:5b:77:8c:9c:31:b1:85:5c:3e:69:e7:e0:
e9:d4:51:37:92:bd:9a:93:80:0d:0a:80:f3:f0:a1:
31:98:d5:5d:06:38:f8:8a:26:d3:49:53:35:a1:67:
63:c5:60:ca:da:86:bc:d5:e4:a4:1a:b2:d8:43:75:
e9:98:87:73:2b:4b:3b:e4:79:9c:9b:bb:b8:98:7b:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:19:E7:83:B6:A4:E0:02:70:79:A8:FB:98:D8:A2:0C:63:E1:3F:E0
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/FBnng7ak4AJweaj7mNiiDGPhP-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.30.0/24
IPv6:
2a00:79e0:101::/48
Signature Algorithm: sha256WithRSAEncryption
8d:6b:37:49:c7:ed:b3:2b:cd:5f:24:bf:0a:68:01:c7:16:a3:
3c:3e:de:e0:cd:b5:54:cf:a9:1b:2d:5a:ab:4c:e4:9d:c1:0b:
a3:fa:b0:e1:2b:1f:ce:14:a2:62:2c:09:04:be:42:f9:ea:b0:
94:da:35:c1:2d:5c:d3:1e:50:5c:2c:c4:f7:11:39:c5:89:9e:
9c:e0:27:36:36:49:d0:a2:a4:e4:02:c2:0b:9f:55:79:b8:e2:
8d:0d:e9:dc:01:4a:97:fb:f2:7a:3a:d8:81:b4:90:20:1b:2e:
37:1a:9b:56:a1:6c:fa:c0:42:0f:4f:5f:60:a1:a7:ac:1a:e8:
5a:ad:b2:c2:f6:ce:14:fd:8c:7f:ae:fc:b9:89:8b:91:91:53:
50:3f:ce:52:da:f2:0f:7a:cb:91:cb:6a:d6:68:b5:9f:df:48:
83:b1:5b:78:4f:54:6d:8a:e9:a9:c6:d2:4e:da:cf:05:90:8c:
14:fd:d8:f9:d2:be:22:2f:fd:6a:bd:98:35:20:2d:fd:17:c1:
c8:bb:f6:28:f6:ef:98:04:12:a7:87:f8:18:72:38:71:21:01:
36:26:6c:b9:eb:8e:b9:8f:15:dd:16:ad:85:5c:dc:8d:e3:43:
ae:6a:25:5f:36:51:ce:9d:06:0e:2a:ce:1d:44:f7:5d:a7:6d:
17:1b:b6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:54:36 2026 by rpki-client