Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/FJmuDbhhJR5DGyHRXCUAoNQcdfs.roa
File: FJmuDbhhJR5DGyHRXCUAoNQcdfs.roa (raw, json)
Hash identifier: RTnXzUPbMp2EjXHy+rpowrXixy4XnGflEaIaoi7gSIY=
Subject key identifier: 14:99:AE:0D:B8:61:25:1E:43:1B:21:D1:5C:25:00:A0:D4:1C:75:FB
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019E25A9AB3FD1E9005CCE26CC7E35A6572E
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/FJmuDbhhJR5DGyHRXCUAoNQcdfs.roa
Signing time: Thu 14 May 2026 08:45:36 +0000
ROA not before: Thu 14 May 2026 08:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200165
IP address blocks: 195.235.164.0/24 maxlen: 24
213.0.44.0/24 maxlen: 24
213.0.45.0/24 maxlen: 24
213.99.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:25:a9:ab:3f:d1:e9:00:5c:ce:26:cc:7e:35:a6:57:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: May 14 08:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1499ae0db861251e431b21d15c2500a0d41c75fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:51:a5:f8:9c:2f:e0:81:3e:34:63:53:89:
cf:a2:ca:99:14:b2:db:92:0f:f8:12:9b:7d:34:bf:
8a:cb:15:f2:d3:c8:84:8d:05:9d:92:cb:84:d3:4d:
33:7c:19:aa:1b:8f:80:05:fa:0e:c3:59:a7:f0:e3:
9a:b3:35:1c:43:f8:7a:9e:7c:e0:a8:2a:0f:6b:9f:
be:6f:a3:77:1d:c2:b1:c6:af:ff:92:48:f3:a5:4a:
c4:02:31:cc:d7:7a:df:23:73:15:60:4b:a2:8d:c4:
94:4f:3a:85:76:bc:6a:c9:ad:07:8c:f7:fe:b8:aa:
1c:9a:a3:d6:f5:35:99:0c:b2:61:ec:a8:a3:7f:d2:
cc:3f:a9:be:e6:6d:87:c6:84:05:9c:07:88:f3:7a:
05:14:09:40:07:88:41:3a:e8:ac:53:bc:d3:22:67:
0e:e1:07:b8:30:cb:80:d6:fd:8c:af:3a:bd:9c:5c:
99:96:0a:d1:b8:a4:fa:9b:8c:79:c2:e8:90:0b:d2:
c4:2e:99:e9:fd:99:23:a1:41:68:fa:4e:4e:83:71:
07:8b:af:4a:d1:02:96:52:2e:12:5a:d5:c7:d0:37:
88:33:ae:ca:dd:f1:6d:a4:47:79:48:ec:55:9f:09:
be:ab:c4:77:16:04:13:01:b0:e8:57:6c:49:6e:d6:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:99:AE:0D:B8:61:25:1E:43:1B:21:D1:5C:25:00:A0:D4:1C:75:FB
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/FJmuDbhhJR5DGyHRXCUAoNQcdfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.235.164.0/24
213.0.44.0/23
213.99.28.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0f:8d:33:70:22:ef:cf:26:af:bd:0f:c2:ea:c3:41:51:3f:
6b:52:1b:50:31:76:17:ce:4c:44:7c:07:76:aa:e5:0d:a1:cf:
3c:c5:22:51:f0:e4:c8:f5:22:1a:6c:7e:0e:d5:88:ac:a0:fe:
ae:68:b5:94:f8:0c:0b:58:bb:20:14:16:d0:57:bf:09:03:af:
35:32:67:74:07:7f:43:5f:fc:92:87:a1:6b:e7:0d:f9:cb:d8:
bb:5a:eb:a7:7a:33:fe:8c:38:e9:d0:05:df:cb:93:32:d5:f3:
88:31:bd:69:a3:c1:6c:3d:03:c0:ac:bb:94:76:14:7f:1a:9b:
62:a0:9d:ab:7c:07:53:02:2d:67:c0:5a:54:4f:13:03:0b:e6:
dc:2a:a9:57:73:47:33:39:6c:5f:82:bb:db:55:23:e6:ea:8c:
47:9b:ef:35:eb:70:19:5e:5f:a9:bd:6c:14:46:c5:b7:ba:93:
bb:af:12:6d:8a:80:0e:52:34:90:cc:4a:58:31:b0:3a:3e:50:
f7:8c:5d:75:41:f3:10:12:47:fb:88:ab:21:60:7e:01:46:d4:
e6:bf:58:53:d0:bf:63:89:86:71:60:fb:c4:4c:04:68:02:a6:
2e:e3:87:44:c9:f8:26:f0:19:de:3e:96:f3:b6:90:76:69:cc:
c3:e8:f0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:34 2026 by rpki-client