Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/f3jhbY_gIkYJlG66YPHL9CELrKA.roa
File: f3jhbY_gIkYJlG66YPHL9CELrKA.roa (raw, json)
Hash identifier: P9/795AGn5WxQVcAaPxONrO6IpW+dBt+ePqrhqEc80E=
Subject key identifier: 7F:78:E1:6D:8F:E0:22:46:09:94:6E:BA:60:F1:CB:F4:21:0B:AC:A0
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A0B9DEE337EAE7A045FCFA8CDCB60C3288
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/f3jhbY_gIkYJlG66YPHL9CELrKA.roa
Signing time: Sat 19 Sep 2026 13:33:07 +0000
ROA not before: Sat 19 Sep 2026 13:33:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213727
IP address blocks: 45.11.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:de:e3:37:ea:e7:a0:45:fc:fa:8c:dc:b6:0c:32:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 19 13:33:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f78e16d8fe0224609946eba60f1cbf4210baca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:a0:1d:fa:f4:45:e3:2d:61:da:5b:c6:56:
5d:83:12:08:c9:a8:c8:ad:17:fe:9b:ce:6a:f3:91:
d1:6a:3f:b0:a2:4e:5e:ae:ca:9e:bc:9a:ca:ec:6e:
a2:98:a6:d4:50:8d:12:94:77:93:33:fd:6c:6c:74:
48:b2:75:c1:95:83:09:75:65:9a:74:e6:9f:31:49:
a4:fd:d7:23:e2:b6:6e:b7:b9:c0:bd:b5:ea:ec:c8:
fb:10:5e:38:21:b9:8e:52:25:21:ec:fc:f2:e0:04:
10:7a:a1:bf:e8:61:da:24:0a:72:86:ec:e9:40:4f:
e5:3a:50:a9:fc:0e:a6:87:0f:30:c5:43:a7:75:23:
22:b5:f1:a0:de:8a:f5:9d:dc:23:0a:94:c2:e6:9b:
d8:6d:88:33:84:ef:62:f1:05:2f:ba:bf:bb:e0:5c:
75:9a:61:a6:da:1e:3a:b1:ee:f7:41:af:7e:0d:64:
91:7a:0a:f3:3a:1f:59:26:e8:e4:90:10:d6:6f:e4:
ef:ad:51:08:39:8f:bc:28:91:5b:61:44:98:8f:8e:
30:56:6a:1c:f9:48:2e:27:c8:07:36:4f:b2:86:15:
86:74:d7:9d:45:a0:bb:52:e9:58:b8:f3:14:b5:5e:
dc:a9:a4:ef:44:8a:c3:d8:f4:4b:d6:b0:9e:12:b8:
ba:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:78:E1:6D:8F:E0:22:46:09:94:6E:BA:60:F1:CB:F4:21:0B:AC:A0
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/f3jhbY_gIkYJlG66YPHL9CELrKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ff:d5:b6:30:2b:98:8d:61:32:40:00:1a:97:8b:94:b1:e7:
37:12:60:19:a8:9e:20:82:69:ca:73:33:d4:b7:ed:da:a0:8e:
39:76:ae:d9:62:e6:e7:ae:96:bf:7d:20:08:78:c2:4a:e6:52:
bd:9e:24:f7:38:6d:fe:8c:69:cf:d5:85:13:2f:01:a8:30:ea:
3e:62:d2:41:12:22:15:2d:f1:e3:01:37:2e:fc:3e:16:be:ed:
ab:5c:b7:72:6c:9d:04:b3:26:45:45:79:e7:71:9d:8d:0a:ec:
fe:cb:f9:ac:b2:08:03:7b:b3:95:0f:dc:32:c8:9f:7d:e1:70:
d4:e5:af:60:29:8e:db:cb:0b:fc:83:3c:e5:10:7e:0d:19:59:
a7:a7:ea:d9:1f:55:2d:d9:c0:29:8a:81:48:6b:b8:59:44:a4:
19:aa:e8:46:c3:c0:20:12:ad:70:8d:4a:3b:f9:42:58:59:41:
d2:1d:6d:58:b0:71:29:ef:d8:c6:e2:4b:16:69:7d:80:7d:a6:
ef:c1:e0:2f:80:3c:dd:a5:ee:b8:42:c5:f2:f0:38:ab:7c:e2:
f3:98:3b:a4:2f:e9:5e:7c:89:fc:85:4c:60:3c:e5:c5:bf:43:
2a:99:fc:d8:98:fd:f1:3c:51:1b:e8:34:d5:bc:3a:e5:fa:b5:
42:80:f9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 19:54:54 2026 by rpki-client