Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/FCWyxYdxxzcdWFtvfMNDkjRUf3A.roa
File: FCWyxYdxxzcdWFtvfMNDkjRUf3A.roa (raw, json)
Hash identifier: V4BQBleRmp+guLlwaIkwqgLs5ZiIiwrfqMeVkg7bquk=
Subject key identifier: 14:25:B2:C5:87:71:C7:37:1D:58:5B:6F:7C:C3:43:92:34:54:7F:70
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A05B916D7001587722D64B9EBD72BF9580
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/FCWyxYdxxzcdWFtvfMNDkjRUf3A.roa
Signing time: Tue 01 Sep 2026 06:04:12 +0000
ROA not before: Tue 01 Sep 2026 06:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 176.126.106.0/24 maxlen: 24
217.147.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:91:6d:70:01:58:77:22:d6:4b:9e:bd:72:bf:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 1 06:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1425b2c58771c7371d585b6f7cc3439234547f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:65:0c:b5:63:a3:63:ef:e8:3d:68:0c:ad:
de:5c:a9:71:55:fd:b0:48:30:a7:4c:09:41:bd:7f:
80:34:98:73:de:8f:28:07:c7:a4:01:23:82:c0:0e:
15:b4:55:6b:a3:d1:9b:79:55:d2:19:5e:d5:ff:eb:
a4:cc:8f:8b:61:37:3f:4b:9d:5a:70:9f:85:5b:09:
1d:fd:b4:85:b1:82:1c:20:e3:5a:b0:4f:aa:e0:e3:
14:61:95:80:1b:38:26:1e:95:85:55:a9:cc:78:96:
1a:95:f1:36:9d:de:32:78:c7:40:65:8f:9f:df:12:
03:98:07:4c:db:61:88:62:12:f8:c6:1c:c4:af:6e:
aa:bb:25:94:9c:9b:a1:1e:18:f9:0b:7b:59:14:8e:
99:7f:e4:05:57:30:a7:0a:3c:dd:19:67:f1:61:b8:
cd:ff:b7:79:bb:cd:7c:83:2d:1c:e3:bd:4d:14:04:
fb:c4:a3:32:32:f8:d2:f8:c4:82:b6:b6:90:83:03:
9e:a4:99:10:61:99:c8:91:7b:15:e7:4f:e7:43:01:
8b:36:61:4c:84:8b:d0:7b:14:e5:b0:d9:8f:94:99:
db:98:25:61:48:0d:1b:7a:0f:ca:c6:d6:93:9f:35:
43:a5:c3:53:b5:fd:64:26:2b:90:fc:b5:1a:13:25:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:25:B2:C5:87:71:C7:37:1D:58:5B:6F:7C:C3:43:92:34:54:7F:70
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/FCWyxYdxxzcdWFtvfMNDkjRUf3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.106.0/24
217.147.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ce:fd:20:ff:bd:54:92:fe:12:30:aa:89:50:90:c3:9c:be:
55:ac:33:09:8b:fe:46:fc:9a:a1:29:f7:f9:15:6c:f1:e5:e8:
c8:a7:8f:74:d3:22:1d:98:c1:c8:b6:6e:45:bf:73:61:68:d7:
31:d3:1c:f1:09:68:ee:7e:87:86:ec:3a:e6:5c:fa:40:a4:a8:
bb:5c:ef:d4:15:cf:45:83:f0:49:bd:91:a0:c1:b9:ae:e6:8a:
cf:98:67:2e:fd:1b:8c:25:58:8a:54:b1:f4:91:1d:e2:04:a6:
7e:f0:a6:70:93:24:af:b6:c4:77:f7:2b:9e:0c:b8:05:91:30:
12:da:e3:35:23:e1:94:27:83:65:70:b7:00:b6:53:e6:f1:c4:
d3:8d:ec:d0:16:41:ba:b8:5f:38:be:0b:90:98:47:a5:60:e3:
63:24:87:89:d9:e6:f4:15:a2:78:6f:65:a6:f7:fc:05:e5:4e:
25:cf:e2:95:ed:3e:6f:4a:75:27:dd:1e:67:d4:2a:ed:8b:3b:
cc:c1:20:96:27:72:27:70:72:31:06:13:6f:bc:bc:a7:d5:d1:
90:8e:f2:d1:4e:e5:06:0e:c5:3c:7b:09:70:46:6c:d8:bc:f2:
38:c4:07:02:fb:c0:8a:26:7b:15:ba:d1:5a:1f:16:2b:26:3a:
71:73:33:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:57 2026 by rpki-client