Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/FRFGvgi2to8bVz8gK33C7Zcp9-M.roa
File: FRFGvgi2to8bVz8gK33C7Zcp9-M.roa (raw, json)
Hash identifier: ayMTUA2GjSPFdKep9QPV41LfFlo7JL6V3IT7Srxtqik=
Subject key identifier: 15:11:46:BE:08:B6:B6:8F:1B:57:3F:20:2B:7D:C2:ED:97:29:F7:E3
Certificate issuer: /CN=63d87ebc77db75024336fee91aba63d897fc7452
Certificate serial: 019F23686A6F2C8C942B32CD0A7523515738
Authority key identifier: 63:D8:7E:BC:77:DB:75:02:43:36:FE:E9:1A:BA:63:D8:97:FC:74:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/FRFGvgi2to8bVz8gK33C7Zcp9-M.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.118.100.0/24 maxlen: 24
185.118.101.0/24 maxlen: 24
185.118.102.0/24 maxlen: 24
185.118.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6a:6f:2c:8c:94:2b:32:cd:0a:75:23:51:57:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d87ebc77db75024336fee91aba63d897fc7452
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=151146be08b6b68f1b573f202b7dc2ed9729f7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:89:fe:61:d2:9f:2d:bf:fa:a9:67:ef:1d:
9e:6b:10:3f:63:a7:e0:64:d0:92:0e:2c:a9:fc:a7:
a5:bb:6a:91:fb:93:a5:57:95:4f:34:0c:c5:7d:3e:
51:b6:6d:64:79:58:88:2f:c4:d3:e5:5b:b3:a7:95:
33:11:32:c5:d5:49:e9:32:7f:14:47:0d:ff:18:2f:
80:e8:5c:26:fe:fa:dd:e6:47:92:25:11:31:60:0c:
0f:c2:b2:8f:71:6f:1b:c3:65:a3:88:d4:bd:bc:c1:
34:40:2a:2b:92:3b:45:f0:a9:28:98:88:52:77:7f:
ba:97:b8:bf:c5:77:3f:34:4e:64:87:14:28:39:5e:
f5:4f:b0:86:6a:b6:5b:68:8f:20:24:ee:6a:2c:d0:
d1:cb:3e:d1:45:0a:6b:b7:ac:2c:72:00:84:1b:e0:
c4:b3:34:49:0c:4c:55:59:87:bf:24:13:d5:13:4e:
ee:33:17:51:eb:89:26:e1:74:2f:79:a5:9e:a1:a7:
67:0b:3a:13:d2:6b:a5:e3:51:89:c5:7e:a2:bf:c4:
65:66:64:76:fe:18:e6:af:ad:af:53:97:fc:16:32:
1d:1d:a1:8e:ff:b9:9c:9d:b3:09:7e:c0:67:fc:a3:
97:11:b9:9c:df:7d:67:ca:57:8a:ab:f8:f3:5a:7a:
c9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:11:46:BE:08:B6:B6:8F:1B:57:3F:20:2B:7D:C2:ED:97:29:F7:E3
X509v3 Authority Key Identifier:
keyid:63:D8:7E:BC:77:DB:75:02:43:36:FE:E9:1A:BA:63:D8:97:FC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/FRFGvgi2to8bVz8gK33C7Zcp9-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.100.0/22
Signature Algorithm: sha256WithRSAEncryption
54:7d:93:4f:a7:38:1a:14:33:9a:03:d2:12:f2:22:36:ed:5e:
b3:25:8c:26:6f:6d:49:21:5e:a6:f9:0c:c9:40:35:b6:ed:48:
a4:2d:51:a8:ab:3b:1a:00:19:e7:5c:79:72:9e:f1:df:41:fe:
37:f2:33:21:b4:8d:13:93:52:0c:4b:d7:a3:2b:c6:d0:5d:cd:
4e:b6:8f:a5:9f:ef:16:b3:7d:67:e1:d4:2b:8a:21:7a:6f:09:
42:8b:5d:fd:cf:72:32:12:65:3d:c7:fd:31:86:72:70:1e:71:
ae:30:0f:09:db:f1:9e:86:42:ff:bf:28:ff:76:f8:b1:23:49:
cc:48:92:30:3a:5b:a0:f9:c8:44:96:81:42:3e:3b:d3:35:4e:
b4:b4:d0:6d:21:15:ef:74:e2:31:2e:ec:12:b1:ba:9d:48:55:
30:a8:83:88:fd:b0:07:9b:6d:eb:93:6e:7e:f0:f4:4b:41:85:
f7:44:0d:8c:67:e3:5f:31:cc:ed:8f:fb:7a:d8:6e:a7:4b:bc:
b4:95:0a:0d:b6:d7:2a:08:51:6f:b6:61:d0:8a:57:73:73:7b:
06:6f:48:9b:5e:a3:3a:5d:1d:f8:87:ea:e8:89:3b:c7:0a:4d:
e8:8a:b2:ec:7e:b2:c9:68:d9:d2:9f:08:f5:c9:7b:3d:0d:61:
3a:db:15:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:25 2026 by rpki-client