Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/fjDLASMfnanfXENxwuLn6Wjwi7A.roa
File: fjDLASMfnanfXENxwuLn6Wjwi7A.roa (raw, json)
Hash identifier: QH99muzkH++rEfFeHFxMORVUyNmQbJiPsT5BeJqz8cM=
Subject key identifier: 7E:30:CB:01:23:1F:9D:A9:DF:5C:43:71:C2:E2:E7:E9:68:F0:8B:B0
Certificate issuer: /CN=b109ab234a7c0fa7dc2b1840e4ef8816c7396b4b
Certificate serial: 01A11B3034441A2E77216B66CC9681FD65BD
Authority key identifier: B1:09:AB:23:4A:7C:0F:A7:DC:2B:18:40:E4:EF:88:16:C7:39:6B:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQmrI0p8D6fcKxhA5O-IFsc5a0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/fjDLASMfnanfXENxwuLn6Wjwi7A.roa
Signing time: Thu 08 Oct 2026 11:05:06 +0000
ROA not before: Thu 08 Oct 2026 11:05:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47764
IP address blocks: 91.219.224.0/22 maxlen: 22
212.111.84.0/22 maxlen: 22
212.233.72.0/21 maxlen: 21
212.233.88.0/21 maxlen: 21
212.233.96.0/22 maxlen: 22
212.233.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/sQmrI0p8D6fcKxhA5O-IFsc5a0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/sQmrI0p8D6fcKxhA5O-IFsc5a0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQmrI0p8D6fcKxhA5O-IFsc5a0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:30:34:44:1a:2e:77:21:6b:66:cc:96:81:fd:65:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b109ab234a7c0fa7dc2b1840e4ef8816c7396b4b
Validity
Not Before: Oct 8 11:05:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e30cb01231f9da9df5c4371c2e2e7e968f08bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:bc:e2:40:1c:50:b4:74:ae:8e:2e:db:e7:
09:f3:4b:5f:74:00:78:a5:0c:db:dc:c9:c2:c8:8f:
bf:e5:29:a4:0e:51:16:d1:bb:ea:09:70:36:90:27:
a1:34:f7:fd:7c:a5:7f:ab:9c:44:b5:1a:a4:95:ff:
91:ae:9f:18:20:4a:5f:92:47:9f:61:83:23:18:4d:
c8:b5:d7:a1:87:5e:aa:68:76:49:71:b2:a2:bd:d7:
2c:b8:85:7b:69:c8:be:05:9e:a9:82:e2:11:c9:e8:
17:27:88:8c:41:0a:e0:cb:a7:96:64:5a:0e:45:95:
8c:3a:b2:96:33:84:63:89:3e:f6:d1:db:3b:76:27:
13:bd:30:a1:01:9a:32:bb:02:2b:64:14:0f:87:61:
a4:03:bb:43:1a:4d:f0:3e:d3:14:82:3a:b1:b8:a1:
5b:9c:03:c8:12:d6:e8:25:44:b2:1e:e1:c0:16:e6:
97:2d:4a:50:d9:5a:db:a7:e1:36:42:b6:44:43:a4:
1b:e7:9c:f1:16:8a:80:ce:c8:47:92:7a:68:4d:2e:
8f:99:84:30:28:71:bf:fa:31:fa:50:2d:43:11:86:
e3:73:68:c6:13:1a:b6:f1:13:c3:1e:42:93:e1:9c:
84:dc:88:9e:a9:4d:74:83:52:67:59:5c:b7:7e:8f:
b1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:30:CB:01:23:1F:9D:A9:DF:5C:43:71:C2:E2:E7:E9:68:F0:8B:B0
X509v3 Authority Key Identifier:
keyid:B1:09:AB:23:4A:7C:0F:A7:DC:2B:18:40:E4:EF:88:16:C7:39:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQmrI0p8D6fcKxhA5O-IFsc5a0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/fjDLASMfnanfXENxwuLn6Wjwi7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/sQmrI0p8D6fcKxhA5O-IFsc5a0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.224.0/22
212.111.84.0/22
212.233.72.0/21
212.233.88.0-212.233.99.255
212.233.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:58:7b:4f:40:3c:54:cd:e0:f4:67:0e:8e:b5:d6:8b:a4:c3:
ee:b0:66:40:6e:dd:22:51:cd:3b:11:71:46:15:d1:59:5e:20:
c6:6b:8b:4d:e4:7e:d5:16:aa:ff:6d:84:fd:96:f6:ab:1f:c7:
70:0e:80:5e:41:11:d3:c2:9f:7b:ee:04:fa:f8:71:48:b0:af:
98:f6:97:9b:71:6e:8b:2d:3e:89:92:77:b6:8d:6b:29:92:7c:
57:68:f0:f2:1f:ee:80:31:dd:74:e8:10:3e:44:cc:39:a4:ba:
7e:7e:19:ab:94:75:ba:9f:6e:48:dc:bf:ab:56:5f:44:a7:67:
82:94:e3:a5:04:9a:1b:33:c3:aa:18:50:f1:a5:1a:39:0c:35:
f9:d1:af:79:2f:f8:b2:dc:28:33:90:09:aa:ce:22:76:56:06:
e2:42:26:aa:48:1b:09:80:25:eb:80:85:c9:65:c7:51:ee:cb:
18:14:ab:fd:1e:03:c9:b4:33:50:7f:ed:72:82:dc:11:be:7e:
cc:3f:f5:3f:2a:3a:3b:f9:d5:2a:ef:46:7c:c1:7e:61:a7:46:
03:0f:4b:2a:de:34:49:df:2f:b1:c5:c3:32:2a:0a:71:68:27:
98:c8:f4:9a:02:e8:30:67:29:cd:6f:ca:ad:de:44:15:01:0b:
6b:9f:7d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:24:57 2026 by rpki-client