Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/FvTUXze2cP2KDGx2hRq_w_Z-9N0.roa
File: FvTUXze2cP2KDGx2hRq_w_Z-9N0.roa (raw, json)
Hash identifier: Gp1g8k1CPQjLn91bFZfvO5ChcN4hmVKIBnTLXnXZ2/M=
Subject key identifier: 16:F4:D4:5F:37:B6:70:FD:8A:0C:6C:76:85:1A:BF:C3:F6:7E:F4:DD
Certificate issuer: /CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Certificate serial: 019DCE37F4507F9B84CE7EB963B85465D27A
Authority key identifier: 8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/FvTUXze2cP2KDGx2hRq_w_Z-9N0.roa
Signing time: Mon 27 Apr 2026 09:14:26 +0000
ROA not before: Mon 27 Apr 2026 09:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10922
IP address blocks: 195.63.192.0/20 maxlen: 24
195.63.208.0/20 maxlen: 20
195.63.224.0/20 maxlen: 24
195.63.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:37:f4:50:7f:9b:84:ce:7e:b9:63:b8:54:65:d2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Validity
Not Before: Apr 27 09:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16f4d45f37b670fd8a0c6c76851abfc3f67ef4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:13:80:75:5f:48:33:11:f9:58:7f:a1:f4:
b5:e7:53:55:f2:76:ef:80:d2:c5:75:17:c3:77:1c:
3f:96:22:87:7d:87:67:5b:b0:7f:3e:6f:ab:65:10:
89:76:90:0a:bd:86:2a:cd:c3:b0:05:f3:cb:12:cc:
74:26:a0:cd:14:d7:d1:51:14:84:8a:74:41:22:51:
34:94:7f:d1:ec:4e:81:c9:08:63:f8:83:9f:a6:96:
af:62:a6:e5:82:8d:97:cf:2c:cb:73:74:04:4e:2e:
39:96:15:c0:6e:95:9b:66:12:96:26:ed:98:14:71:
cc:f6:ad:c8:aa:89:c0:58:7d:9e:fe:36:be:5e:d8:
79:3a:87:b7:17:b1:57:67:6e:1d:42:2f:dc:ce:8d:
0e:ff:28:f0:15:9e:68:11:26:41:3e:ea:2e:bf:1d:
60:0f:70:25:d5:8e:d8:ac:16:21:7b:f2:23:be:8d:
9d:06:b7:08:04:89:ef:9c:e6:5d:e4:dd:d0:91:e4:
ae:0c:7c:d9:5c:f6:43:81:46:b6:1d:cd:28:a1:c3:
16:23:c2:58:e7:86:9b:ea:03:8c:93:ac:82:04:9d:
30:9b:b3:2f:71:13:1e:25:fa:06:4c:e6:7c:bf:ec:
83:46:11:d2:37:7c:d8:43:2d:85:b7:44:62:ea:c4:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:D4:5F:37:B6:70:FD:8A:0C:6C:76:85:1A:BF:C3:F6:7E:F4:DD
X509v3 Authority Key Identifier:
keyid:8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/FvTUXze2cP2KDGx2hRq_w_Z-9N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.63.192.0/18
Signature Algorithm: sha256WithRSAEncryption
3f:60:15:e7:6c:71:19:89:5d:95:3a:7e:a9:c5:06:ba:e2:d6:
32:97:b2:4f:49:f0:73:4d:78:75:79:fe:11:1c:db:43:4a:0b:
04:fd:25:76:cb:28:27:68:7f:10:6b:f2:3b:6f:b1:93:e0:52:
4c:9a:cd:10:dc:be:13:a2:49:11:de:27:b8:78:26:ff:f1:96:
4b:45:80:1f:13:65:6a:8b:38:8d:77:54:07:3b:a3:4d:5c:94:
14:7f:72:01:c4:66:27:3c:07:72:f2:6d:b7:d7:35:8a:09:b6:
02:35:4d:d8:80:80:7e:92:e6:97:5e:69:e7:71:00:8a:ed:d4:
73:2f:0d:e4:a0:83:88:52:25:07:17:af:6e:6a:28:6a:23:e2:
8e:91:80:14:2e:b1:05:4a:b5:a0:ee:6e:bf:9d:54:98:6c:4b:
9f:b1:01:1d:52:de:6b:0f:59:87:32:fc:51:8c:6c:46:ab:16:
36:b5:2b:1d:d3:a1:63:a9:fd:e9:8d:e1:17:7c:80:20:c7:0c:
44:77:45:24:f6:f9:41:2d:99:38:6f:b2:c1:70:16:c7:d1:9c:
c7:88:b9:39:c4:67:b5:e9:c5:32:4b:2b:6b:93:a3:39:e4:d6:
03:af:be:a2:6d:19:d1:8d:7c:04:e2:1c:9d:7d:c9:32:f6:85:
da:28:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:44 2026 by rpki-client