Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/FgJP64FoJV8_hIK2IAid-gzEPOA.roa
File: FgJP64FoJV8_hIK2IAid-gzEPOA.roa (raw, json)
Hash identifier: W1tB5nUgJwSISrimA3Glw9hH6mwOZ6v4Q1ppt5jQ0nk=
Subject key identifier: 16:02:4F:EB:81:68:25:5F:3F:84:82:B6:20:08:9D:FA:0C:C4:3C:E0
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 01A11BD99551C4D5137BA1B85B60D456E5D3
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/FgJP64FoJV8_hIK2IAid-gzEPOA.roa
Signing time: Thu 08 Oct 2026 14:10:06 +0000
ROA not before: Thu 08 Oct 2026 14:10:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 91.200.253.0/24 maxlen: 24
114.69.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d9:95:51:c4:d5:13:7b:a1:b8:5b:60:d4:56:e5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Oct 8 14:10:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16024feb8168255f3f8482b620089dfa0cc43ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:15:5a:b9:ef:27:01:66:c5:54:f8:16:91:
4e:39:df:6a:ab:ae:54:be:90:f3:4a:de:97:21:db:
f5:d1:d7:77:30:29:62:c0:73:1e:05:6c:26:5c:ca:
a5:e3:46:ea:32:69:d9:8b:30:e1:39:23:11:37:8e:
f0:d4:fd:2e:7d:de:b8:6d:3e:0d:01:47:38:6c:49:
ca:90:8b:53:da:77:bf:8c:94:5b:fb:3d:7a:48:bc:
1b:92:29:c3:1d:54:95:64:da:76:2a:d1:27:f0:44:
74:dd:b6:c0:21:84:fd:eb:b9:2b:8f:bf:38:38:7d:
a7:eb:88:2a:ad:a9:c1:ff:3f:3c:6d:9e:7d:30:74:
08:98:a2:37:3e:77:c9:6e:d5:56:8e:bf:31:40:01:
92:33:76:2e:b7:9d:fa:59:4c:8a:02:df:f8:17:d8:
83:10:59:e3:36:85:5b:eb:b3:84:28:c9:dd:63:05:
0e:dd:5e:ca:71:d6:45:0c:c0:c7:d5:58:57:60:33:
75:ab:f1:18:9c:cf:7d:a6:fc:42:b7:12:72:c4:bb:
c1:67:40:77:6c:93:5c:67:5c:44:10:69:43:29:9f:
1d:80:97:f8:0d:91:b3:97:d3:70:3e:66:59:4a:e3:
47:14:f6:26:a0:24:a2:5e:80:b9:08:77:2a:2c:0b:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:02:4F:EB:81:68:25:5F:3F:84:82:B6:20:08:9D:FA:0C:C4:3C:E0
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/FgJP64FoJV8_hIK2IAid-gzEPOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.253.0/24
114.69.247.0/24
Signature Algorithm: sha256WithRSAEncryption
78:6e:20:d6:e4:2a:8c:ae:07:e8:17:37:0f:3c:a0:29:d8:46:
db:54:8c:31:95:00:4c:ed:b9:cf:a5:5a:63:19:48:4e:e4:16:
cb:96:bf:c6:cd:c6:8f:3d:63:6c:dd:b8:8e:8c:7c:da:cb:26:
1e:8c:62:37:aa:4c:b2:42:9d:be:96:6e:34:13:48:71:e7:9c:
13:46:82:bc:d7:90:f5:e3:b3:1d:92:2f:4f:98:35:b1:d1:fd:
ff:be:06:9c:0c:98:43:82:08:36:9e:66:1b:ea:5a:34:47:f4:
bf:4a:70:ec:7b:73:31:e1:e7:9f:86:8e:c7:6e:45:e0:97:e4:
9e:0d:8f:c6:26:51:66:2f:99:69:13:96:04:f5:8e:97:78:80:
67:a5:f6:1f:ef:ff:8f:0e:44:29:3d:09:07:1a:d1:5d:dc:b7:
da:4b:8a:38:3a:89:92:3e:a7:b1:f8:85:1a:69:01:99:ca:f7:
8e:65:80:de:2d:53:10:52:66:60:27:9b:32:16:67:23:35:52:
de:e6:4a:71:4d:10:6d:53:9e:7a:c9:6a:36:fa:2b:d7:65:58:
9d:b8:e1:2a:7d:bc:f5:30:d3:ee:c9:e7:52:c8:fd:0c:e7:3e:
00:9e:4c:5e:f4:04:2e:03:8d:e0:4f:10:fc:6f:6e:4f:b7:c3:
7f:ab:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:09:40 2026 by rpki-client