Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/FkBzf_HIbdz7xolzlmO-aIkniGU.roa
File: FkBzf_HIbdz7xolzlmO-aIkniGU.roa (raw, json)
Hash identifier: Sm751RRWNiCNJxfOTPSMYTKf8MS3bxcllz54r5lv1VM=
Subject key identifier: 16:40:73:7F:F1:C8:6D:DC:FB:C6:89:73:96:63:BE:68:89:27:88:65
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019FE53A4D1486869EF728BA00AAC898AE24
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/FkBzf_HIbdz7xolzlmO-aIkniGU.roa
Signing time: Sun 09 Aug 2026 06:33:51 +0000
ROA not before: Sun 09 Aug 2026 06:33:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212112
IP address blocks: 130.78.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e5:3a:4d:14:86:86:9e:f7:28:ba:00:aa:c8:98:ae:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 9 06:33:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1640737ff1c86ddcfbc689739663be6889278865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:07:fc:0d:24:bb:04:20:ad:b3:ab:f1:e4:
a2:37:95:7c:9d:2e:b3:42:4a:55:e7:2f:5d:12:af:
de:16:55:20:82:9b:e7:a6:51:28:71:78:bb:93:87:
28:aa:21:1d:42:8b:e3:ad:b0:2d:10:19:b4:09:91:
2e:13:4f:e3:f3:91:0b:cf:fb:8e:b2:69:7e:9e:8e:
e9:54:99:fb:5d:b6:1f:74:55:81:5f:e6:0f:33:e2:
4b:ea:3d:0c:52:b9:aa:1f:3b:56:c4:e1:4a:b6:b6:
04:db:e1:80:4d:e1:fc:d4:8a:fb:86:28:9e:bf:25:
5c:90:80:2a:60:c0:13:e2:5a:5e:c5:82:a3:b7:57:
39:ab:8d:5a:d1:aa:b4:68:52:88:d0:b0:ac:aa:34:
af:5e:39:26:61:14:af:57:e6:e8:f0:ff:a3:2d:cc:
f4:95:24:40:48:9b:fd:5a:a7:d3:5f:6c:df:30:e5:
9e:57:0e:b4:0d:0b:e9:3b:7b:bd:97:35:2d:7b:22:
b9:9c:f0:cf:63:a8:52:75:73:05:41:3e:02:ab:16:
cc:de:40:fd:c8:72:af:9c:9e:6e:4f:31:89:cf:7c:
3f:9c:60:69:55:9f:d3:66:78:3f:ae:ce:c7:c2:75:
75:b5:78:f5:5a:ca:1b:e3:44:3b:a5:9f:65:a4:c1:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:40:73:7F:F1:C8:6D:DC:FB:C6:89:73:96:63:BE:68:89:27:88:65
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/FkBzf_HIbdz7xolzlmO-aIkniGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.191.0/24
Signature Algorithm: sha256WithRSAEncryption
04:43:ab:e7:56:9b:6f:30:f1:67:9b:4e:fd:e0:89:39:a2:3a:
93:5d:f2:49:5b:33:12:0c:45:21:17:06:cb:d6:1f:81:a9:5e:
a8:f7:87:37:81:e6:e2:e2:9f:af:e7:7e:cd:cc:ab:70:d7:08:
db:ba:08:bb:fd:7f:a2:05:70:f0:b1:38:af:91:ad:fe:7c:c3:
51:a9:a6:76:59:65:01:de:80:49:ec:11:4f:c5:b1:8b:41:9a:
05:3c:4b:b2:8a:bb:e9:f1:e4:95:76:d8:bd:3e:f5:5c:9e:72:
8e:bf:49:d8:65:d3:1e:73:61:86:85:cd:06:9f:41:b5:b1:ee:
67:0a:19:a0:bf:e6:60:ff:47:5b:f6:bb:75:af:df:94:ef:22:
97:8a:73:a7:83:88:a6:0f:a9:3a:61:1e:ba:aa:d6:6d:99:b7:
8d:1f:78:90:a0:0f:bb:50:43:3b:3c:d1:c7:4d:9b:88:0d:03:
c4:b0:1e:e7:20:f5:2d:22:f0:fa:2d:e6:89:54:dc:de:93:35:
29:8b:e8:29:31:53:dd:85:36:d9:96:c1:74:be:7f:30:24:2b:
08:e2:78:71:8f:cb:b7:2c:d9:d4:78:39:72:f2:5d:ed:9a:ed:
91:82:2f:49:ab:4a:b9:d8:d4:41:53:c7:ed:ea:9f:5a:d4:e7:
3a:9a:f8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:13:12 2026 by rpki-client