Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/fxgm1SuUvES01eA0FDrMzll7mT8.roa
File: fxgm1SuUvES01eA0FDrMzll7mT8.roa (raw, json)
Hash identifier: invnlQJJFgAXFt0BGhluPwO2tkzwaXn2bkPb9sfcIHA=
Subject key identifier: 7F:18:26:D5:2B:94:BC:44:B4:D5:E0:34:14:3A:CC:CE:59:7B:99:3F
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 019F053570EDEA9177AD3F8CED239AE40E45
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/fxgm1SuUvES01eA0FDrMzll7mT8.roa
Signing time: Fri 26 Jun 2026 18:33:36 +0000
ROA not before: Fri 26 Jun 2026 18:33:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 83.217.208.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:05:35:70:ed:ea:91:77:ad:3f:8c:ed:23:9a:e4:0e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Jun 26 18:33:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f1826d52b94bc44b4d5e034143accce597b993f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:17:95:e5:c6:65:c9:c2:46:c7:74:8a:7b:
88:17:e5:6e:02:4d:59:2e:22:78:9e:22:3f:aa:01:
16:24:52:e7:9c:ed:57:db:99:a1:91:74:b7:4b:eb:
0c:cb:2f:2c:92:7b:f0:96:29:a6:37:f8:a7:d5:4b:
94:b0:4f:83:88:06:ec:62:35:20:76:43:6b:94:17:
56:0f:af:65:4b:fd:8b:07:d1:3e:c2:55:21:e5:f6:
ed:84:e2:24:46:50:a4:05:36:be:a5:64:7e:64:ff:
56:a3:5c:27:74:2b:f8:40:09:87:c9:9c:d8:4d:13:
ec:5d:2c:c2:ef:20:f4:c7:29:0d:4d:48:c8:2f:7a:
0c:6e:2b:af:85:c0:65:c1:dd:3f:3f:41:03:96:0a:
9b:38:71:20:9b:e0:ea:ca:8d:2b:6a:8f:58:13:03:
a6:77:58:42:be:73:d7:fb:e8:33:c1:c0:17:bf:55:
bf:fe:34:ac:ff:18:54:ba:ab:b2:ba:4f:88:83:a6:
ca:38:3f:2b:69:5a:15:9a:c8:9d:15:b8:05:43:93:
bd:21:7a:e4:ac:c5:6d:5d:94:6b:d3:c4:d6:7b:55:
ce:05:7d:fa:b0:e4:85:58:8c:65:cf:be:d1:5f:c9:
9b:2e:b4:eb:d9:78:c8:e2:af:63:40:7c:d4:f7:18:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:18:26:D5:2B:94:BC:44:B4:D5:E0:34:14:3A:CC:CE:59:7B:99:3F
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/fxgm1SuUvES01eA0FDrMzll7mT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.208.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:ee:44:d4:62:85:ae:0c:09:cb:ce:a8:7c:77:24:32:09:95:
95:27:81:b4:0f:59:f0:f4:95:d8:15:e3:8e:9d:c8:82:f3:f0:
2c:a2:b5:86:ae:54:93:cf:64:0f:46:72:79:14:4c:1b:b9:eb:
de:4c:3e:db:3f:e8:35:ca:ef:d2:85:37:23:06:2c:d4:fe:82:
c1:ef:b6:2f:a2:6f:fc:20:dd:bf:ae:6d:1e:01:ee:a8:f1:23:
73:db:39:01:90:9d:a1:30:44:1e:6f:27:e7:87:ca:f1:71:5c:
13:ec:e9:dd:50:03:b2:4e:2b:74:09:ed:6d:a4:3e:f0:10:eb:
82:39:11:64:4f:94:d5:21:e7:cc:3b:d5:62:b5:80:16:9e:b3:
79:ca:8d:3c:d5:55:fe:c5:fb:7d:fe:db:58:c0:5a:96:ed:71:
c8:08:0d:ac:00:4c:6e:ce:4a:63:07:82:b7:90:90:76:c8:2f:
dc:f0:b8:33:80:40:d0:fb:a0:d4:79:e8:dd:58:7b:14:de:49:
74:11:03:31:62:3c:04:d1:fb:0c:52:29:68:11:14:f2:87:b7:
5c:4b:8a:27:e6:d7:ea:a0:d6:6a:af:54:b5:bb:f8:5c:f7:6a:
8e:f4:5f:24:11:27:a2:e4:2e:16:eb:61:c9:80:84:2b:75:fc:
5b:7c:3d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:12 2026 by rpki-client