Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa
File: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (raw, json)
Hash identifier: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=
Subject key identifier: 14:99:EF:58:D1:85:B8:B9:9B:23:64:64:17:53:C1:31:F5:B8:01:A3
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019F455F08F16E50AED16A44C5873C5DC16A
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa
Signing time: Thu 09 Jul 2026 05:34:43 +0000
ROA not before: Thu 09 Jul 2026 05:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213953
IP address blocks: 217.114.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:5f:08:f1:6e:50:ae:d1:6a:44:c5:87:3c:5d:c1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jul 9 05:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1499ef58d185b8b99b2364641753c131f5b801a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:1a:44:82:f0:10:d4:b8:4e:ae:e6:e6:09:
e0:98:87:86:bd:c6:2c:e0:25:97:77:7e:75:48:e7:
41:92:3f:5b:e9:db:79:6d:19:02:0d:a1:24:8a:6a:
4a:71:4a:96:bf:b0:31:3a:b2:da:f2:5d:4a:f0:7a:
46:2d:40:4f:b0:39:87:3a:34:ce:0f:66:d2:fb:41:
09:e0:dd:97:d1:a9:b9:1e:da:b7:e5:d6:5e:53:71:
a1:fe:50:b7:9d:b3:c0:2e:8a:fe:49:0d:8c:30:6c:
2f:d8:06:8c:91:0d:f7:34:ce:bb:d9:70:cb:17:fd:
a3:ab:51:06:2c:3c:d7:46:9e:b6:ca:1e:33:d6:e9:
76:15:7f:36:71:5d:0d:c8:e0:ac:f7:ec:c9:19:6b:
c4:ce:b1:85:52:c9:dd:da:ee:5b:6b:eb:b3:c8:ca:
8c:df:0d:43:d2:31:ef:bf:0f:2a:93:fb:b9:c0:05:
a2:0d:c2:3f:43:d3:a6:e3:b5:4d:b0:d6:91:4c:73:
f5:f3:59:49:f6:f0:29:38:ef:b3:35:47:3d:90:46:
22:94:08:be:fc:8e:77:d8:5f:1a:be:82:4f:83:38:
70:4c:2e:fe:85:f9:62:73:18:35:f3:b4:50:69:5a:
d0:35:4e:9c:3b:c4:d7:0e:3b:e7:61:1a:b2:cb:28:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:99:EF:58:D1:85:B8:B9:9B:23:64:64:17:53:C1:31:F5:B8:01:A3
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.46.0/24
Signature Algorithm: sha256WithRSAEncryption
af:fd:4f:89:11:6e:c7:40:21:02:af:50:f7:3d:4b:26:32:79:
b3:e6:24:de:b8:5f:3f:f1:bc:79:16:a4:61:79:31:76:9a:75:
6d:70:fe:1e:32:98:59:13:80:e5:56:e0:3b:48:78:29:08:d3:
42:ef:68:dc:f7:a2:8a:4f:5c:b6:ec:23:07:32:92:a1:76:24:
c6:d7:55:39:c8:86:13:24:d5:6c:f5:80:6e:2c:26:00:dd:fa:
5b:e6:a1:2b:77:da:38:14:51:5b:91:8c:08:e1:3e:0a:1e:56:
c6:af:8a:a2:80:42:06:66:f3:f9:63:79:73:1b:32:43:6f:aa:
79:21:38:ff:49:60:fe:43:80:68:20:49:fb:78:c5:38:1c:62:
2e:ef:21:88:70:82:72:db:fd:fa:e9:f6:92:30:6b:3d:21:65:
ff:f2:6b:b2:e3:4b:36:96:3d:8f:df:86:62:73:ba:27:c6:23:
45:fe:be:e1:2d:1e:2f:42:0e:ff:92:10:8c:8e:19:0a:2e:4d:
50:01:6d:10:2e:d5:0e:15:5e:e2:c1:42:da:3c:c8:8d:e5:59:
d6:41:66:1e:53:a4:f1:0c:06:46:bb:60:58:b5:ac:f6:5d:70:
fc:5b:ef:0f:fa:8c:eb:8c:e5:f5:9c:8f:6b:ba:81:6d:48:9d:
73:41:ce:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9FXwjxblCu0WpExYc8XcFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwNzA5MDUzNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDk5ZWY1OGQxODViOGI5OWIyMzY0NjQxNzUzYzEzMWY1YjgwMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQEaRILwENS4Tq7m5gngmIeGvcYs
4CWXd351SOdBkj9b6dt5bRkCDaEkimpKcUqWv7AxOrLa8l1K8HpGLUBPsDmHOjTO
D2bS+0EJ4N2X0am5Htq35dZeU3Gh/lC3nbPALor+SQ2MMGwv2AaMkQ33NM672XDL
F/2jq1EGLDzXRp62yh4z1ul2FX82cV0NyOCs9+zJGWvEzrGFUsnd2u5ba+uzyMqM
3w1D0jHvvw8qk/u5wAWiDcI/Q9Om47VNsNaRTHP181lJ9vApOO+zNUc9kEYilAi+
/I532F8avoJPgzhwTC7+hflicxg187RQaVrQNU6cO8TXDjvnYRqyyyiM2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBSZ71jRhbi5myNkZBdTwTH1uAGjMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvRkpudldOR0Z1TG1iSTJSa0YxUEJNZlc0QWFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XIuMA0G
CSqGSIb3DQEBCwUAA4IBAQCv/U+JEW7HQCECr1D3PUsmMnmz5iTeuF8/8bx5FqRh
eTF2mnVtcP4eMphZE4DlVuA7SHgpCNNC72jc96KKT1y27CMHMpKhdiTG11U5yIYT
JNVs9YBuLCYA3fpb5qErd9o4FFFbkYwI4T4KHlbGr4qigEIGZvP5Y3lzGzJDb6p5
ITj/SWD+Q4BoIEn7eMU4HGIu7yGIcIJy2/366faSMGs9IWX/8muy40s2lj2P34Zi
c7onxiNF/r7hLR4vQg7/khCMjhkKLk1QAW0QLtUOFV7iwULaPMiN5VnWQWYeU6Tx
DAZGu2BYtaz2XXD8W+8P+ozrjOX1nI9ruoFtSJ1zQc6z
-----END CERTIFICATE-----
Generated at Sat Jul 11 07:44:06 2026 by rpki-client