Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/fb4296-2238-43a0-aa68-d12601346c75/1/fKUg9_Tysl4xUTUYFByneviSHgQ.roa
File: fKUg9_Tysl4xUTUYFByneviSHgQ.roa (raw, json)
Hash identifier: ykNYoLygK43pkYEuEd2WUwmQP+RAjSI4G8ge9YxsV50=
Subject key identifier: 7C:A5:20:F7:F4:F2:B2:5E:31:51:35:18:14:1C:A7:7A:F8:92:1E:04
Certificate issuer: /CN=5b261452346eb01e8d45aef9c8ee4479df1cf868
Certificate serial: 01A134070A0D3E67305531718C83A4804798
Authority key identifier: 5B:26:14:52:34:6E:B0:1E:8D:45:AE:F9:C8:EE:44:79:DF:1C:F8:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyYUUjRusB6NRa75yO5Eed8c-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4296-2238-43a0-aa68-d12601346c75/1/fKUg9_Tysl4xUTUYFByneviSHgQ.roa
Signing time: Tue 13 Oct 2026 06:50:38 +0000
ROA not before: Tue 13 Oct 2026 06:50:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218538
IP address blocks: 2001:678:1358::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4296-2238-43a0-aa68-d12601346c75/1/WyYUUjRusB6NRa75yO5Eed8c-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4296-2238-43a0-aa68-d12601346c75/1/WyYUUjRusB6NRa75yO5Eed8c-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyYUUjRusB6NRa75yO5Eed8c-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:07:0a:0d:3e:67:30:55:31:71:8c:83:a4:80:47:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b261452346eb01e8d45aef9c8ee4479df1cf868
Validity
Not Before: Oct 13 06:50:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ca520f7f4f2b25e31513518141ca77af8921e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:00:00:31:e4:08:11:58:56:cd:bb:7f:49:
38:c7:c9:58:55:41:23:c7:9d:24:c5:5e:37:e1:c7:
78:5a:d2:e0:b2:cb:8d:8c:25:f9:dd:58:90:3d:69:
12:70:c7:d6:8f:0a:aa:b5:1a:93:e3:91:98:a6:8f:
79:56:3c:56:e0:bb:12:76:3a:3c:6c:31:8b:b8:97:
2f:98:59:42:46:8e:8c:ba:cd:7e:11:b3:1d:bb:e5:
11:6c:0b:8b:73:41:e0:5d:fb:49:a7:89:57:e1:8f:
40:92:bc:f1:41:99:d8:a1:b4:65:e5:d1:5a:eb:5f:
de:bf:66:2a:de:cc:eb:09:95:c0:fb:ad:7e:cf:77:
cc:52:cc:61:4f:42:38:31:46:4e:9f:d2:74:14:d8:
5d:fa:92:df:15:15:d5:f5:4e:a0:49:f1:db:9e:23:
52:b5:e5:5a:d9:e1:7b:c1:51:ce:51:8b:b5:a5:77:
c0:d2:66:68:45:ff:f2:05:c8:27:78:ea:5c:e9:e4:
cf:44:15:33:23:9c:4a:e1:17:86:61:ed:c8:2b:09:
aa:64:dc:8e:74:20:bb:3f:2a:e0:8b:df:37:f2:1e:
6a:22:11:85:74:70:60:3e:ed:66:63:a8:30:41:e5:
39:36:22:52:82:7a:1e:5a:79:9f:4f:78:8c:98:7f:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A5:20:F7:F4:F2:B2:5E:31:51:35:18:14:1C:A7:7A:F8:92:1E:04
X509v3 Authority Key Identifier:
keyid:5B:26:14:52:34:6E:B0:1E:8D:45:AE:F9:C8:EE:44:79:DF:1C:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyYUUjRusB6NRa75yO5Eed8c-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4296-2238-43a0-aa68-d12601346c75/1/fKUg9_Tysl4xUTUYFByneviSHgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4296-2238-43a0-aa68-d12601346c75/1/WyYUUjRusB6NRa75yO5Eed8c-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1358::/48
Signature Algorithm: sha256WithRSAEncryption
28:3f:65:db:c5:06:5c:67:97:b0:f7:ca:04:cd:c3:e6:ea:ce:
cc:9b:b3:5e:08:53:a7:68:5d:da:0d:6d:3c:97:16:c3:51:f0:
30:b0:75:7f:f6:8c:15:1f:e1:7b:3e:99:ee:72:45:f9:9a:13:
50:d3:3f:5d:eb:b0:e2:20:d8:29:f9:4e:8b:1b:7e:89:f7:bb:
32:40:24:31:d6:04:5a:81:1c:2a:da:e3:fc:e2:47:13:56:12:
de:77:ec:46:fe:4f:4c:45:d8:42:cc:a1:cb:75:19:ce:5d:03:
6f:d2:1f:29:f1:01:ff:b5:7c:ce:f2:a2:ed:b2:98:ac:4b:5f:
71:9d:7e:c0:49:ce:e0:50:67:76:eb:0c:46:79:8b:9d:91:42:
05:7b:6f:82:52:ad:75:9e:8e:40:0a:7f:33:c8:74:78:89:9f:
d1:2f:05:e4:3c:7c:ef:91:8e:21:2f:47:6f:77:38:b5:eb:97:
79:41:7b:25:7a:d0:8a:b3:39:ac:e6:9f:82:ac:d7:8d:e5:af:
c3:c2:ac:33:52:e9:31:92:a0:b0:17:41:63:87:64:7a:22:10:
cd:9b:07:29:3d:a7:ed:28:69:6a:2d:47:27:95:32:2b:ae:95:
25:ad:d8:e8:56:82:01:5e:81:0e:6a:d6:4a:46:60:ff:74:2b:
7b:cd:9e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:00:34 2026 by rpki-client