Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FKU7uE4Un0ccpTXptTjlbvYnr8A.roa
File: FKU7uE4Un0ccpTXptTjlbvYnr8A.roa (raw, json)
Hash identifier: AFWwAXESEe+FCyFJFrJED7w/8NjsWjco9Y5yQ2E1Ewo=
Subject key identifier: 14:A5:3B:B8:4E:14:9F:47:1C:A5:35:E9:B5:38:E5:6E:F6:27:AF:C0
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0FBB7540D4B46BEC27D49968B8D4DEE1F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FKU7uE4Un0ccpTXptTjlbvYnr8A.roa
Signing time: Fri 02 Oct 2026 08:24:50 +0000
ROA not before: Fri 02 Oct 2026 08:24:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 193.235.123.0/24 maxlen: 24
193.235.125.0/24 maxlen: 24
193.235.207.0/24 maxlen: 24
194.103.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:b7:54:0d:4b:46:be:c2:7d:49:96:8b:8d:4d:ee:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 2 08:24:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14a53bb84e149f471ca535e9b538e56ef627afc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:ad:4b:3e:f1:7e:09:6e:8b:a1:e1:9f:03:
00:8a:11:5d:6b:a2:df:ef:ca:14:de:ad:77:8e:4c:
6b:e8:e8:f7:ca:15:c0:85:1d:b5:33:24:ba:12:7a:
cb:5f:e9:cc:b8:2c:b1:16:f4:29:8b:5e:9d:50:3f:
40:49:ab:94:8d:fa:0b:c0:6c:1d:7a:40:9e:69:fd:
ef:1f:d0:96:9a:76:07:70:73:d6:0a:d9:f2:ee:f8:
87:e2:69:4b:b0:26:6a:0c:2d:9e:a4:68:d0:d3:23:
60:78:32:87:b5:c7:d4:b1:14:7f:84:0d:a7:f4:c8:
60:05:04:58:f9:27:a7:e8:ad:e9:7c:30:e9:95:44:
61:d4:cb:66:97:30:c1:0d:d4:dd:84:8f:51:d2:1b:
b5:c4:53:28:3d:56:6d:82:aa:84:76:ba:61:38:8b:
40:4b:4c:35:bf:7b:60:21:1d:07:d5:0a:30:19:a4:
69:0d:9a:3e:a0:6e:d4:a6:a9:20:b8:b1:e5:8a:47:
22:3c:ca:24:dc:c5:11:72:98:78:37:f1:7f:e0:8c:
de:8e:6f:72:56:2f:d0:d4:7e:8d:07:ea:f4:3e:95:
1e:da:dd:37:a5:59:a3:ee:b0:79:a3:49:25:8f:d0:
8c:15:88:51:1b:02:c1:c0:65:13:e0:75:dc:44:0c:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A5:3B:B8:4E:14:9F:47:1C:A5:35:E9:B5:38:E5:6E:F6:27:AF:C0
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FKU7uE4Un0ccpTXptTjlbvYnr8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.123.0/24
193.235.125.0/24
193.235.207.0/24
194.103.42.0/24
Signature Algorithm: sha256WithRSAEncryption
97:61:fa:91:e7:e7:3d:be:88:fc:17:7d:e1:40:c9:7a:7d:47:
7e:1e:97:fa:2c:c1:bb:f1:1e:cb:1b:a6:5b:b5:79:90:e2:e4:
d6:d9:72:33:02:59:ce:b2:8d:cd:cc:49:5c:63:ca:44:47:81:
b1:5a:db:51:79:9e:cc:2a:2d:d4:ae:54:dc:03:ad:ed:93:cb:
9a:45:15:8d:3c:bb:c0:b4:74:74:8c:5f:2a:2b:d0:2b:a3:03:
f6:83:03:a7:c8:df:91:58:a6:6f:79:de:6a:64:bc:6a:ec:4c:
bc:b3:f2:a2:49:b4:74:51:4f:86:2d:2e:39:4f:37:37:02:ba:
e3:f1:fe:d0:88:3a:0a:d1:51:47:77:04:15:55:fb:a1:19:c8:
3f:1f:14:f6:35:21:e7:d4:88:57:de:cc:5e:56:ae:0d:94:74:
8e:fa:c0:ed:44:c6:2b:4f:4d:ec:ca:c2:29:81:e9:5a:f5:0b:
36:84:de:55:b3:9d:08:db:3c:73:a6:75:b5:82:db:be:59:fe:
f0:24:bc:0a:67:05:30:c2:73:2a:25:c7:79:17:f2:3e:b1:2e:
76:29:59:07:14:b3:a7:79:ad:12:e4:5a:b0:ca:da:ea:0a:d5:
03:1d:94:8f:52:60:43:f6:42:af:cb:bf:00:e7:3c:01:86:7d:
5a:aa:65:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:23:44 2026 by rpki-client