Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/FfVdOGIdFleEMtx09zm4sKNqfYI.roa
File: FfVdOGIdFleEMtx09zm4sKNqfYI.roa (raw, json)
Hash identifier: E/kxLTcHU7eGclPBrpVwsj12tDSrx+K6Wq1WP4DeY4o=
Subject key identifier: 15:F5:5D:38:62:1D:16:57:84:32:DC:74:F7:39:B8:B0:A3:6A:7D:82
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019D6C4DA2E81D06575B50F367FFB38542F6
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/FfVdOGIdFleEMtx09zm4sKNqfYI.roa
Signing time: Wed 08 Apr 2026 08:55:20 +0000
ROA not before: Wed 08 Apr 2026 08:55:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40352
IP address blocks: 37.148.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:4d:a2:e8:1d:06:57:5b:50:f3:67:ff:b3:85:42:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Apr 8 08:55:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15f55d38621d16578432dc74f739b8b0a36a7d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:8c:63:18:79:b4:12:ed:42:75:f5:04:46:
94:39:c6:8a:bb:62:77:d6:a5:87:1c:1b:cd:ec:21:
1b:b7:10:ea:f4:d1:0c:31:57:6d:3f:96:c9:e0:e6:
97:30:f0:8c:ed:b6:25:6e:a5:9d:cf:c0:8c:9d:21:
96:9d:58:56:be:0c:72:5d:36:69:06:18:16:ad:3f:
94:cb:1b:b3:d6:58:d9:9b:0b:14:50:5b:73:16:d8:
bc:d2:ad:75:1f:52:ec:f5:5c:89:d0:fc:f7:97:d9:
fd:f8:88:69:44:70:61:fe:77:12:08:af:25:c0:85:
41:5e:3a:b0:57:96:97:5b:39:b4:83:70:fe:83:19:
49:9d:d2:f8:db:eb:7e:23:cb:2f:e1:67:7d:7e:f4:
33:f7:5f:3d:d6:62:61:c7:75:d6:a1:0f:e9:87:c7:
28:da:9f:66:88:ad:8c:d5:36:67:ac:ad:bb:cf:e0:
40:6f:90:a0:b3:ad:c7:7c:a6:2a:36:5b:80:c5:a7:
8a:ba:ec:72:e2:e6:e5:3f:d7:23:26:09:1f:01:4b:
df:ff:7a:22:db:b0:a0:cb:0f:d9:a1:d4:8e:e3:85:
c0:fb:ad:ed:94:91:83:01:45:07:af:90:86:2d:81:
70:f9:79:e4:35:44:a4:8b:0f:d4:3f:2f:0f:be:17:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:5D:38:62:1D:16:57:84:32:DC:74:F7:39:B8:B0:A3:6A:7D:82
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/FfVdOGIdFleEMtx09zm4sKNqfYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.130.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ff:64:19:b7:36:98:b6:0f:94:bf:e3:60:45:0e:8e:9c:32:
d6:46:07:8f:fd:b4:fd:62:38:69:24:97:f4:45:82:bb:37:1c:
91:aa:1c:b6:0c:81:58:17:cd:a0:73:3e:68:f8:fb:51:52:d1:
e6:3a:ef:91:da:9a:28:aa:ef:e5:79:ac:3e:cb:b7:ce:fa:76:
fc:20:65:70:b9:51:fc:6c:a3:fb:72:86:a0:c4:a7:31:e6:9b:
b1:48:1e:da:02:6a:1c:e2:52:e8:6f:bb:90:07:70:a5:80:4b:
97:d8:2b:65:ca:04:39:c4:5c:c7:b4:c4:d7:b6:57:bc:a4:fa:
23:05:d6:6b:1e:db:c5:ff:81:03:b0:27:d0:5b:57:05:1f:9f:
cc:27:90:66:6b:0c:c4:13:d7:92:43:a0:ad:b9:a3:70:cd:c4:
c7:98:81:32:82:2e:7f:13:79:3f:a6:b9:06:4a:fb:fb:d5:1f:
65:c1:3d:74:79:d5:96:52:70:a4:a3:9a:41:eb:99:40:52:15:
82:39:99:22:d9:0b:4e:9c:fb:d5:da:16:22:f6:b6:56:a5:7f:
58:46:ed:b2:8b:d6:f5:98:0d:76:7a:2a:cd:a5:6c:70:bf:05:
5f:89:1b:e3:6c:cb:bc:49:24:46:20:6b:4f:98:94:b5:0b:75:
9c:fb:5a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:47 2026 by rpki-client