Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/FlUhhr8SXDum_EWDp9geIZ0dsgk.roa
File: FlUhhr8SXDum_EWDp9geIZ0dsgk.roa (raw, json)
Hash identifier: Sxlm9YFroUXgLZNS0tdgMYSmtPTusL3YRrPjkdaX58A=
Subject key identifier: 16:55:21:86:BF:12:5C:3B:A6:FC:45:83:A7:D8:1E:21:9D:1D:B2:09
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01A0DC7DEA2A5E120F1B8DC856F2A384E649
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/FlUhhr8SXDum_EWDp9geIZ0dsgk.roa
Signing time: Sat 26 Sep 2026 06:53:54 +0000
ROA not before: Sat 26 Sep 2026 06:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218732
IP address blocks: 5.202.4.0/24 maxlen: 24
85.9.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:7d:ea:2a:5e:12:0f:1b:8d:c8:56:f2:a3:84:e6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Sep 26 06:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16552186bf125c3ba6fc4583a7d81e219d1db209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:23:e4:e3:9d:8c:33:e7:29:a0:32:5c:2f:
6a:fd:1e:84:92:81:6e:88:9d:04:48:31:dd:f1:c2:
21:f2:f3:28:9f:a3:58:00:fe:0c:34:83:ea:23:64:
c4:94:0c:8e:f2:d9:5f:8c:05:02:5f:1b:69:49:cb:
03:44:0e:5b:48:3b:09:da:dd:be:c6:d4:c4:96:d1:
8b:56:31:9f:cb:9b:77:b6:66:e1:8f:69:21:2c:25:
6a:27:68:80:c1:07:41:77:5f:bd:ea:8f:36:e2:fc:
cd:d9:95:ad:cf:37:12:1d:1a:4f:40:57:22:39:55:
d6:c4:40:d2:45:30:f3:58:56:a1:19:22:fc:84:35:
3f:e2:03:e6:c3:42:d3:f7:ff:c1:56:fc:72:e7:d3:
47:53:35:ea:96:d7:71:e1:dd:ba:af:28:31:70:44:
c3:09:cf:4f:ae:ea:34:be:36:bb:dd:11:19:d7:e5:
44:bf:8b:e3:07:7f:49:1a:21:fb:6c:7f:a9:ad:2b:
84:79:58:21:b0:b4:9e:c3:7d:75:ce:2b:d0:b8:1e:
bf:39:b1:29:6d:83:f3:20:64:6e:23:f3:df:8b:fe:
b3:57:b6:43:a1:f4:03:a1:81:88:f7:cb:cf:d7:27:
1f:7c:ce:61:45:70:ab:2d:11:9e:35:66:8a:2a:09:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:55:21:86:BF:12:5C:3B:A6:FC:45:83:A7:D8:1E:21:9D:1D:B2:09
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/FlUhhr8SXDum_EWDp9geIZ0dsgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.4.0/24
85.9.114.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:99:67:e8:4e:cd:6e:53:f2:59:4d:6b:52:1c:7d:68:5e:4e:
e7:40:2c:12:ff:ff:1c:b3:57:50:a0:95:2d:f0:1e:30:89:d5:
96:25:1d:f2:9b:c9:12:08:2f:f8:84:12:9b:f9:d4:22:85:52:
ee:6b:52:4b:5d:0a:2d:fa:ca:85:3f:b6:48:6e:27:79:cc:48:
70:91:3c:e4:86:85:62:19:ea:ac:fb:82:21:24:b1:5f:89:fa:
47:b1:4d:6d:19:b0:5c:49:d2:ca:3d:72:42:58:30:6a:fe:91:
8d:f3:0f:6f:86:e5:4e:07:6b:a2:d6:bc:67:b6:4a:7f:4b:8d:
d3:87:f3:47:5f:e5:9e:c9:3b:b8:0a:8d:5c:35:80:eb:c4:14:
22:42:43:5b:aa:61:70:69:fa:30:44:29:89:56:28:5b:c7:7c:
12:f4:28:3b:aa:dc:9d:de:ea:86:3b:7e:7b:9e:e5:a1:06:2d:
a6:03:c9:d1:df:33:4e:bf:f5:06:51:3c:d0:61:84:15:20:c3:
ce:a3:0a:7a:ee:2d:6d:ce:b8:0d:bc:75:77:80:0d:1b:6f:0a:
9b:35:7d:b0:26:32:5f:2f:5f:b3:25:ad:12:0e:f7:bc:e8:b5:
81:4e:40:af:dc:d9:fd:a5:7f:ef:f5:c2:29:c4:ac:41:d3:65:
a3:3a:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:16 2026 by rpki-client