Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/FPpnFunETKpDRc6mnEVSAcibjHY.roa
File: FPpnFunETKpDRc6mnEVSAcibjHY.roa (raw, json)
Hash identifier: mKu0fgjWLeHVWVpV0q239Ownr/fiYcW2/JVFXNc2qJ0=
Subject key identifier: 14:FA:67:16:E9:C4:4C:AA:43:45:CE:A6:9C:45:52:01:C8:9B:8C:76
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019CD113F16BC088AC8DAAB5C456B3F6EE9B
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/FPpnFunETKpDRc6mnEVSAcibjHY.roa
Signing time: Mon 09 Mar 2026 05:31:11 +0000
ROA not before: Mon 09 Mar 2026 05:31:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211575
IP address blocks: 2a12:cb42:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d1:13:f1:6b:c0:88:ac:8d:aa:b5:c4:56:b3:f6:ee:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Mar 9 05:31:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14fa6716e9c44caa4345cea69c455201c89b8c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:ed:10:12:a1:9b:53:f8:77:6e:8f:c1:b0:
ec:fe:2e:25:1c:12:a4:69:0a:50:5a:bc:61:9d:7f:
ab:f0:93:0a:f1:19:53:b8:da:d7:5b:fe:1e:a6:9b:
9e:d9:93:2c:91:5a:73:d0:11:6b:ee:c9:b5:57:16:
0b:d5:cf:67:f3:d5:e0:c7:9e:2c:9b:cb:0f:5d:04:
aa:99:d9:c9:7f:fe:3c:7f:0a:b6:39:50:7a:56:aa:
88:af:ac:97:5a:7c:e1:cc:4c:df:4f:c3:3f:c9:1e:
45:02:33:43:53:9f:a3:d4:f2:62:f5:cf:e7:bc:ca:
eb:d3:89:53:39:37:67:76:3a:a2:66:e5:42:f2:f3:
12:10:b5:ca:32:8c:ea:f8:ed:37:21:5a:04:cd:6e:
8c:09:b1:9c:e4:72:b8:4d:1e:f8:81:6d:60:ab:58:
f7:53:8c:60:50:de:9d:ba:51:fd:28:22:19:da:2b:
67:68:66:88:dc:71:c9:40:d6:6d:0d:94:12:c5:8c:
7d:df:2f:6d:2a:1d:e8:cb:13:e2:31:e4:55:05:7f:
c6:e7:9f:4c:47:0f:d9:cd:42:9c:37:99:16:83:8a:
41:b7:33:62:65:45:f5:df:ea:14:b8:6a:d8:71:e5:
0b:ce:3d:d0:f6:f7:a5:30:13:9a:06:68:7c:2a:9d:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FA:67:16:E9:C4:4C:AA:43:45:CE:A6:9C:45:52:01:C8:9B:8C:76
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/FPpnFunETKpDRc6mnEVSAcibjHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb42:200::/40
Signature Algorithm: sha256WithRSAEncryption
55:5d:69:ba:73:11:2e:94:80:11:ac:16:cb:69:01:76:df:ae:
91:0d:61:ed:06:c7:b1:57:21:dc:d3:c1:a9:f7:3b:4f:00:d4:
12:81:fa:0a:26:29:76:34:a6:1c:0a:1a:01:1a:be:2f:6b:b2:
a2:a0:2b:79:b0:f8:dd:d7:63:82:8c:c8:81:dd:e0:6a:5b:f5:
ca:63:c3:fc:11:da:3d:f3:6c:af:d0:db:e7:a3:bf:35:bd:3b:
90:28:57:42:d0:92:c4:fa:89:e9:0a:b5:94:f2:54:18:33:1a:
2b:7a:aa:93:4f:40:0e:90:23:e5:a1:a3:0f:df:97:f1:9d:cb:
b6:b3:ff:f7:9f:a7:d3:d8:75:b5:bd:9f:3b:72:54:a2:73:b7:
93:27:26:22:0c:ef:a7:13:04:4f:4e:ff:54:32:b3:12:3a:9c:
ab:bd:b5:de:13:b5:76:8c:39:d7:19:7b:c1:74:10:66:64:af:
17:0f:9c:ec:ca:75:06:df:d0:7f:fe:a2:83:8d:ef:2b:be:67:
65:62:a7:78:df:ff:55:4d:66:24:df:b3:c8:14:a6:36:45:a8:
0b:bc:0c:51:e8:c1:27:b3:4b:57:15:87:90:0f:e9:3a:eb:3e:
44:f1:e0:24:d9:7d:75:63:5f:3a:cb:31:db:8a:e8:2f:40:0e:
05:ae:09:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:06:51 2026 by rpki-client