Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/FFSRMxbJyfsa8mh_kLloo5bjp7Y.roa
File: FFSRMxbJyfsa8mh_kLloo5bjp7Y.roa (raw, json)
Hash identifier: kU3+OjKBfwq6QhTYrLwZu6QdHOUi2oGU2lr/yF+BkU8=
Subject key identifier: 14:54:91:33:16:C9:C9:FB:1A:F2:68:7F:90:B9:68:A3:96:E3:A7:B6
Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial: 01A135C813D6AAF9A7E53D8F97D05A146706
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/FFSRMxbJyfsa8mh_kLloo5bjp7Y.roa
Signing time: Tue 13 Oct 2026 15:01:07 +0000
ROA not before: Tue 13 Oct 2026 15:01:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207660
IP address blocks: 185.252.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:c8:13:d6:aa:f9:a7:e5:3d:8f:97:d0:5a:14:67:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Validity
Not Before: Oct 13 15:01:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1454913316c9c9fb1af2687f90b968a396e3a7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:06:e0:05:07:ac:e0:75:31:8d:87:d5:53:
f6:ad:f8:88:54:43:d5:96:2d:75:9d:95:f1:e3:57:
aa:73:19:2e:78:2e:c3:67:b8:45:76:cf:dc:39:50:
f8:97:c1:7c:28:2e:ee:54:09:7d:56:f9:00:9c:25:
75:ea:78:65:4b:f7:1e:0f:ac:90:bf:fa:e8:f7:af:
45:78:7b:e5:e1:39:05:c0:10:55:d5:77:e4:36:fb:
3b:af:40:43:be:05:28:43:84:07:cb:20:02:ef:d5:
02:fc:ae:48:3f:97:18:9b:2b:34:4b:c7:59:f6:d0:
32:b2:5f:7f:1e:b6:5c:d0:4c:8f:52:97:a9:11:e2:
2d:1d:81:61:11:97:76:23:8d:c7:e9:ee:af:ff:d9:
d8:b4:d1:01:14:3a:cc:14:a1:20:62:89:2b:f1:c1:
d2:e3:d9:0b:3a:fa:93:cc:6d:5d:9c:47:49:c0:d9:
5f:03:59:ac:53:31:56:4e:41:9b:67:f0:15:cb:39:
54:e7:2e:47:db:ed:0b:8b:44:68:42:ef:f9:9e:04:
49:72:b8:b2:8d:15:37:66:cf:56:94:cd:38:55:7b:
80:a1:7b:6a:ae:e1:42:40:f6:46:ab:63:8d:9c:32:
81:08:98:a8:2d:23:40:a7:6b:4b:70:51:a3:fa:bc:
32:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:54:91:33:16:C9:C9:FB:1A:F2:68:7F:90:B9:68:A3:96:E3:A7:B6
X509v3 Authority Key Identifier:
keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/FFSRMxbJyfsa8mh_kLloo5bjp7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.240.0/22
Signature Algorithm: sha256WithRSAEncryption
02:73:ad:0a:68:5f:8f:34:d7:98:1c:10:85:62:7c:0c:69:8c:
a7:d4:b2:dd:8a:20:0b:88:d3:4d:2b:97:57:c3:d3:5a:51:12:
70:f0:e6:10:91:94:78:0e:5b:d6:30:33:a9:36:70:67:8e:14:
1f:83:1d:9d:2a:12:7d:3c:08:c1:2c:99:29:0f:c1:e6:e6:82:
6d:0c:23:1f:66:37:30:d3:17:5a:0d:59:69:26:cb:2a:30:aa:
fa:51:9c:05:3b:bc:9d:9c:7f:36:1b:f4:cb:71:e8:ff:46:4b:
c9:a4:d4:9b:ea:73:0f:f9:ce:c0:0b:05:42:5d:be:1d:e8:b8:
b3:b2:95:d5:be:98:30:82:11:ad:98:8f:88:67:31:36:41:42:
12:cb:de:69:c2:b1:75:db:4f:e8:19:9f:ae:ff:be:f0:94:50:
16:73:41:2b:3a:b2:2b:e7:3e:ef:b7:d8:13:0c:1b:04:db:af:
fa:11:44:23:3a:f2:6e:ba:79:c5:42:d0:f5:3b:e9:12:54:6f:
76:e4:29:32:01:56:25:59:07:74:97:18:bc:11:94:03:19:99:
84:a7:3a:a4:0f:2a:6b:eb:e4:f3:62:26:f1:e8:48:ef:16:99:
b2:0f:2e:6e:e0:ce:df:49:49:5d:02:0a:00:03:25:91:e0:3d:
f3:9a:10:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:26:17 2026 by rpki-client