Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/F_MQUh6Cv4-dn8QQYjcllgNmU_Q.roa
File: F_MQUh6Cv4-dn8QQYjcllgNmU_Q.roa (raw, json)
Hash identifier: rPOBsU3IqWyWd2TrfL/Ef+LouW+88Qh38gAJottjBDo=
Subject key identifier: 17:F3:10:52:1E:82:BF:8F:9D:9F:C4:10:62:37:25:96:03:66:53:F4
Certificate issuer: /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial: 01A05D2C8C2264404C80D8606032D537FFC2
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/F_MQUh6Cv4-dn8QQYjcllgNmU_Q.roa
Signing time: Tue 01 Sep 2026 13:33:15 +0000
ROA not before: Tue 01 Sep 2026 13:33:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 193.104.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:2c:8c:22:64:40:4c:80:d8:60:60:32:d5:37:ff:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Validity
Not Before: Sep 1 13:33:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17f310521e82bf8f9d9fc41062372596036653f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:38:2f:1f:ed:ea:07:5f:e6:35:75:19:0d:
65:33:0e:29:83:44:bb:18:cc:01:da:7e:df:c8:30:
49:32:3e:cb:45:c5:04:33:4e:ac:7b:82:7b:d2:b1:
4f:f2:d0:47:a7:b5:30:d0:f0:87:4c:7e:e1:45:ad:
03:93:05:b4:59:95:d7:e3:0b:b5:f9:74:f1:9d:fb:
59:98:27:b9:46:2f:83:bb:21:b2:56:c9:5b:f2:c7:
43:1d:a1:e4:db:7a:02:ce:d9:d5:3e:b1:b6:81:99:
bb:c3:7f:3c:c8:93:e8:ec:96:85:80:f5:74:8c:e2:
fd:20:01:62:fd:0b:ce:47:ea:ed:da:61:bf:45:76:
98:88:5e:2c:66:a5:40:59:47:d5:8c:54:1c:5f:ef:
9d:3f:02:34:e1:52:49:37:9e:f5:b5:42:dc:9b:8f:
59:11:76:2e:53:9a:4c:96:53:e7:7c:ac:7b:25:6d:
8a:78:31:bd:d3:36:48:73:e5:a0:cc:ce:30:ff:fd:
06:76:bd:da:4c:f6:f4:6b:36:d9:65:0e:c5:a9:36:
70:91:80:a2:6b:6b:58:cb:89:79:c0:02:19:8c:73:
e6:56:87:2d:4c:c2:36:dc:65:3b:62:70:8e:a1:9b:
ea:4f:73:f4:ba:f6:89:4b:d8:fd:c4:64:83:bb:f0:
ad:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:10:52:1E:82:BF:8F:9D:9F:C4:10:62:37:25:96:03:66:53:F4
X509v3 Authority Key Identifier:
keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/F_MQUh6Cv4-dn8QQYjcllgNmU_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.219.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0b:00:a0:65:10:83:6d:78:fb:04:69:a2:40:f5:7a:67:8a:
7a:bd:3d:6e:b8:20:2c:d6:4e:33:d6:ff:b5:a2:58:0a:06:c1:
b5:0d:33:26:02:83:04:cb:f0:35:51:c0:1e:3a:e0:40:4a:21:
83:0f:28:ba:a5:c5:8d:76:06:05:7c:97:e5:16:de:04:ec:11:
a7:7f:bd:10:7c:0b:51:4b:d7:e1:bd:ea:36:ba:a1:13:86:38:
82:85:a1:78:36:61:3f:28:b4:f2:88:7f:ad:b8:78:cf:b5:eb:
aa:0d:b5:7d:63:b3:72:69:c1:3a:07:82:7b:f6:63:7d:b5:cc:
3c:a7:41:e6:ab:0a:33:cf:fa:31:bd:a5:20:dd:06:ca:7d:73:
ca:c6:a6:4f:ff:05:80:3c:a4:31:83:bf:0e:15:ac:37:95:9a:
4e:95:43:3b:6e:28:86:98:cc:9c:10:5e:e5:d6:88:63:c1:c7:
e4:ce:a9:e7:b6:94:ca:6e:4b:a4:e1:c8:f4:9f:e1:7c:f5:8e:
d9:3b:fb:d1:68:32:37:0b:6d:bf:06:03:50:7c:f4:62:87:61:
dd:ea:6c:6f:4c:83:ef:99:a4:20:1e:fd:32:58:af:fc:82:c1:
74:dd:14:28:f2:41:ad:82:26:65:4c:b7:18:0b:d3:f4:82:bf:
9a:1e:c5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:48:20 2026 by rpki-client