Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/FmpAddch05aHl_srlFhyTGZ4dlg.roa
File: FmpAddch05aHl_srlFhyTGZ4dlg.roa (raw, json)
Hash identifier: 2aR5AHNEgg0OlRG6o7sTpI42Xlp8zBjQ/Wl4fXTBwfc=
Subject key identifier: 16:6A:40:75:D7:21:D3:96:87:97:FB:2B:94:58:72:4C:66:78:76:58
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A04D9EE066B374433013F31028A3A7E64C
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/FmpAddch05aHl_srlFhyTGZ4dlg.roa
Signing time: Sat 29 Aug 2026 13:04:12 +0000
ROA not before: Sat 29 Aug 2026 13:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 87.76.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:9e:e0:66:b3:74:43:30:13:f3:10:28:a3:a7:e6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 29 13:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=166a4075d721d3968797fb2b9458724c66787658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:a1:77:c0:28:19:d7:99:2e:4b:d7:32:fc:
bb:48:03:0a:68:f5:0c:ec:b8:ea:b9:a4:28:5d:54:
91:68:97:da:d0:90:f7:c7:ee:af:b5:8a:c3:fa:71:
a0:40:4a:3d:d0:61:2d:8f:5a:6d:f2:30:f9:02:aa:
57:40:65:f6:dd:e8:0b:8d:ae:f8:33:cd:a0:58:a4:
b5:c8:50:bf:1d:f2:ec:05:70:1b:8d:a7:85:8a:16:
89:4a:21:35:d5:1e:d6:5b:ae:08:02:12:61:b0:a8:
ed:a5:71:3b:d2:b3:0f:e7:84:7c:05:14:e5:36:ea:
34:7e:2f:4a:31:4b:dc:04:42:af:50:05:b3:b0:6c:
ec:c5:c8:83:5a:b5:97:ee:b4:b4:7d:c4:93:4f:38:
8b:ac:a3:6e:5e:df:d3:71:0e:5c:e0:04:39:f5:1f:
f9:e0:c9:8f:c7:68:fc:54:c8:cd:87:71:61:99:7d:
c6:b3:9a:39:36:71:26:b3:42:96:04:bd:87:3e:f6:
4b:07:8c:7d:85:71:5a:94:08:f7:83:3a:99:dc:c8:
21:8f:a4:b0:9a:7f:fd:38:11:ee:b4:6a:93:78:61:
bd:0c:4f:0b:37:4e:a3:c4:12:bc:20:e3:77:ad:cb:
d2:14:40:ec:a9:19:06:8d:73:e6:30:8c:46:b9:7d:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6A:40:75:D7:21:D3:96:87:97:FB:2B:94:58:72:4C:66:78:76:58
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/FmpAddch05aHl_srlFhyTGZ4dlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e6:d1:24:67:4d:51:28:89:dd:fe:d9:94:dc:03:d9:e1:2b:
03:0a:2f:06:a8:b9:58:56:c1:7e:d7:24:3a:68:67:9e:7f:db:
5d:51:ac:87:b7:f0:ec:33:c0:88:29:3b:11:8b:ee:05:90:a1:
ae:f9:64:11:f5:75:09:12:bf:5d:c0:ba:5d:2f:1b:4c:47:c6:
ae:d1:f9:57:68:ad:77:41:f9:24:e9:14:cc:ed:52:46:31:95:
19:29:19:6d:4b:a6:c9:94:71:e6:53:e0:c2:08:0b:ab:f5:51:
4b:92:da:44:ba:c0:ad:45:c2:3c:bc:e5:e2:af:10:6c:e8:3a:
c0:eb:2e:1d:91:30:ac:b6:de:74:98:18:52:47:27:ef:cb:c7:
5e:f8:0c:b6:66:8f:62:79:33:45:24:7f:a9:c0:d5:cc:8f:6e:
27:fc:12:c7:59:e2:52:e5:57:a6:48:3b:f9:93:c9:8d:69:06:
74:82:49:cb:2b:64:11:3c:30:6f:6f:bb:52:12:88:88:35:6a:
00:7a:8f:e9:70:82:7f:4a:39:29:f9:0b:e7:9c:29:2c:39:d2:
eb:e7:04:bb:23:50:fb:b0:73:a8:30:da:64:bb:5b:04:9f:c8:
f0:c7:79:57:52:79:c3:35:19:44:d0:df:e0:3f:06:94:9c:69:
0a:b6:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:21 2026 by rpki-client