Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/F6lbxX3aQsTs2CgIaSrcru61Nkg.roa
File: F6lbxX3aQsTs2CgIaSrcru61Nkg.roa (raw, json)
Hash identifier: xDbeN/l1tsv2dlE9muWhGH3qIwH6FbQpQRsMOywBxk0=
Subject key identifier: 17:A9:5B:C5:7D:DA:42:C4:EC:D8:28:08:69:2A:DC:AE:EE:B5:36:48
Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial: 01A1116618C2F0A4FC10BA3F65B27A4DB205
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/F6lbxX3aQsTs2CgIaSrcru61Nkg.roa
Signing time: Tue 06 Oct 2026 13:27:45 +0000
ROA not before: Tue 06 Oct 2026 13:27:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58291
IP address blocks: 199.104.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:66:18:c2:f0:a4:fc:10:ba:3f:65:b2:7a:4d:b2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Validity
Not Before: Oct 6 13:27:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17a95bc57dda42c4ecd82808692adcaeeeb53648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:7f:ae:7d:1a:a3:29:3b:27:54:4b:e5:49:
0a:3e:31:ee:4d:7e:75:34:ac:52:21:00:6a:ef:fa:
c8:c8:eb:c6:d3:59:7b:af:65:9e:54:38:e4:b9:a8:
05:ca:2a:f8:64:5d:7d:dc:ee:57:64:ad:8c:30:23:
c4:ce:4d:2a:f9:5f:d8:6b:c8:1d:48:ba:f0:e6:ec:
df:9f:5c:39:c9:dc:1a:d6:46:1a:07:df:1f:83:57:
3d:a8:10:91:1d:a2:7d:c2:fc:94:9f:16:f1:bf:54:
d9:92:08:75:a3:b5:f3:7c:2b:fb:01:82:84:a0:96:
b1:a0:14:b2:b2:1f:c0:a1:a4:ad:b4:cb:fa:d7:a3:
74:6b:39:01:1b:d1:ac:2a:2e:66:d1:39:03:70:63:
5d:ba:ae:96:01:cb:a5:f6:c1:3c:d0:5f:d0:b8:14:
8e:73:b1:f2:69:e2:fe:e3:45:60:d2:57:6e:ca:bc:
c2:c9:b1:d6:c1:fd:74:c2:c8:77:8c:29:2b:be:87:
50:77:ff:94:5b:89:c1:79:36:93:55:8e:0d:14:16:
72:f7:9a:38:2b:bc:9c:1f:01:b2:3d:b1:4c:9f:6b:
e4:7c:f9:72:ae:f8:6a:cf:da:b9:16:0f:0e:1b:b9:
0b:a2:6c:1c:f9:7b:80:72:11:fe:b2:4c:02:10:14:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A9:5B:C5:7D:DA:42:C4:EC:D8:28:08:69:2A:DC:AE:EE:B5:36:48
X509v3 Authority Key Identifier:
keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/F6lbxX3aQsTs2CgIaSrcru61Nkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.104.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7b:09:7f:7c:58:56:76:fe:0a:ad:04:b4:b2:4e:af:af:ec:
c0:d4:2e:4e:f0:fc:c7:55:23:93:0a:a3:2c:9f:cd:c2:26:1a:
55:c7:b3:55:90:f3:5c:f2:52:6e:de:a6:31:49:f3:aa:d8:71:
de:6a:f4:f9:3a:5c:55:0a:81:cb:65:dc:f1:e0:15:c0:67:b3:
8a:2a:ba:cd:37:3f:4d:42:c6:26:5d:e0:21:15:74:74:18:36:
af:23:b8:7c:82:44:b7:19:65:0b:67:77:09:89:25:70:3d:af:
c9:53:e1:fe:13:23:ea:d7:b1:6a:8f:ff:f8:5c:40:8e:07:19:
91:4f:5c:1a:a6:73:a5:68:96:36:39:3f:cf:a0:49:2b:0e:73:
ea:a7:18:82:12:87:33:a2:a6:78:8d:6f:4c:17:8e:f9:ec:21:
ed:b4:e3:2a:61:95:10:1d:96:64:a0:f8:8d:8f:88:e3:d8:78:
c7:03:fb:6e:39:f5:a4:5c:0f:a8:b5:15:e3:ba:31:fc:7d:50:
f8:3f:85:bc:00:74:ea:16:06:d7:18:83:50:3e:31:01:8e:87:
04:7d:6a:f3:80:cf:c2:42:c2:c4:ff:4a:a4:f9:92:2e:98:8e:
38:9a:67:57:8a:53:f9:4f:3e:3c:57:c2:2a:eb:6b:f2:6f:8e:
91:08:f5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:10:25 2026 by rpki-client