Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/FWUxyacyiKqIoSJEQ1c1Sq_jmcg.roa
File: FWUxyacyiKqIoSJEQ1c1Sq_jmcg.roa (raw, json)
Hash identifier: i0xM3c9+wGN/ik6EJX4mc3yIwy7razkTWsrudIwxLa8=
Subject key identifier: 15:65:31:C9:A7:32:88:AA:88:A1:22:44:43:57:35:4A:AF:E3:99:C8
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 01A1439A18907F1FCF748AB4A4BA9682CEA4
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/FWUxyacyiKqIoSJEQ1c1Sq_jmcg.roa
Signing time: Fri 16 Oct 2026 07:25:34 +0000
ROA not before: Fri 16 Oct 2026 07:25:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 185.157.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:9a:18:90:7f:1f:cf:74:8a:b4:a4:ba:96:82:ce:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Oct 16 07:25:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=156531c9a73288aa88a122444357354aafe399c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:40:fd:2a:95:b8:0d:04:dd:79:ec:67:ae:
49:ec:d5:59:e2:3b:a2:35:d7:27:77:95:65:bb:cf:
21:3b:67:6c:39:a0:90:66:d0:a9:f0:5b:58:62:38:
fd:a7:95:52:90:26:6f:c0:7a:57:5c:8e:05:9c:91:
35:5a:23:d3:b4:83:74:a3:ac:e5:ee:d9:93:0b:a1:
e4:b2:95:89:88:d8:ef:42:e8:65:ba:60:2f:f3:d7:
f0:7f:e0:a0:f0:cf:23:b4:37:27:fd:7a:4c:e3:a0:
57:26:3d:17:59:48:3c:5f:9b:6d:dc:92:6e:56:bb:
f2:4e:a1:e1:4d:a9:35:02:d0:fd:df:64:dd:f0:92:
01:c6:04:f1:24:a1:08:b0:67:3b:b6:9b:10:0f:d4:
e3:ab:43:4c:57:4e:6c:65:c2:35:3a:76:84:ca:13:
c2:5c:df:be:1d:87:df:92:d7:90:de:77:43:e9:c1:
08:17:71:65:6a:2d:d9:5e:1d:48:69:83:13:79:b1:
4a:7a:9c:76:ef:68:58:bd:08:59:2f:f8:76:89:59:
35:0a:71:ef:4f:cd:21:67:7c:85:10:d7:f0:a0:29:
da:68:dc:ec:6e:82:ca:9e:ad:bc:11:2b:16:c5:15:
71:85:d6:f7:44:b6:f8:fd:3d:2d:69:38:c7:0c:ae:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:65:31:C9:A7:32:88:AA:88:A1:22:44:43:57:35:4A:AF:E3:99:C8
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/FWUxyacyiKqIoSJEQ1c1Sq_jmcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:8b:01:1c:29:e9:91:c9:a8:6f:ee:27:9a:ef:2f:ed:69:c3:
35:28:a1:80:c7:1a:5d:52:d9:4d:ea:61:9c:f8:77:e8:6e:7a:
bb:16:c5:e5:5f:9f:5d:52:e4:6e:94:a5:1c:ed:d7:6c:38:1b:
9f:e7:73:50:ab:ea:25:26:a0:44:33:b2:cd:af:eb:5e:52:81:
3e:03:67:f1:38:ce:02:ae:a2:aa:b6:b3:77:e9:ff:80:df:a5:
39:ff:54:06:ef:46:ec:ed:34:e4:fa:49:4e:32:fd:53:e2:98:
5b:67:e4:f5:9c:87:bd:6c:81:a9:fe:6d:97:18:a0:84:87:48:
4d:9a:68:33:9b:95:ff:c5:dc:1f:22:e3:d7:8d:d3:12:da:08:
7f:31:5e:16:96:78:e8:09:58:4e:6e:82:de:e0:bd:bf:63:14:
01:a8:11:14:b6:17:a7:10:eb:44:b4:8c:bb:7b:ee:c9:df:67:
2b:17:b9:8d:e9:bb:12:20:28:1b:15:13:46:99:59:9a:24:89:
ba:6c:25:07:07:e2:4a:e3:51:d3:bd:7b:38:16:db:26:f8:89:
35:b6:68:94:c3:67:75:3d:c1:35:be:7e:60:2b:58:22:5e:a4:
9c:98:c7:58:a1:7b:51:17:45:62:16:3a:4f:04:6a:af:df:b6:
ec:6d:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:40:53 2026 by rpki-client