Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/ftKjys4SL9XyBKoRHiV1H8O6q-4.roa
File: ftKjys4SL9XyBKoRHiV1H8O6q-4.roa (raw, json)
Hash identifier: goOri5FlwgHp48z3jZwt3R81i0ZWwE5V3bBzvpwMo7I=
Subject key identifier: 7E:D2:A3:CA:CE:12:2F:D5:F2:04:AA:11:1E:25:75:1F:C3:BA:AB:EE
Certificate issuer: /CN=2fe29d6c9cbc35370a01aa2684d3f7731af94c9c
Certificate serial: 019F23691C5F6571CC06103250AD069B65F6
Authority key identifier: 2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/ftKjys4SL9XyBKoRHiV1H8O6q-4.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13189
IP address blocks: 195.66.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1c:5f:65:71:cc:06:10:32:50:ad:06:9b:65:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe29d6c9cbc35370a01aa2684d3f7731af94c9c
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ed2a3cace122fd5f204aa111e25751fc3baabee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:cc:3d:09:b6:58:ec:3e:62:7b:b9:5c:c0:
d0:13:38:a7:4d:c7:ee:2c:74:03:df:a6:ca:81:ce:
5e:5a:79:58:fb:f0:53:b4:a6:31:67:06:c0:8f:c2:
d0:01:25:06:e1:1d:f2:c9:63:cd:f6:a8:76:c2:64:
db:72:89:ae:fc:f2:63:95:9a:77:b1:6b:c5:e0:3c:
2f:a7:75:9c:5b:d6:5f:06:1f:8a:a2:c1:8b:8b:c5:
39:33:18:3e:03:14:14:5a:0c:17:fc:cf:34:c4:09:
1a:7c:1a:26:a7:2e:0a:ac:7a:c0:f8:02:aa:57:b4:
ed:14:c4:a7:fd:34:b2:6c:2a:23:2d:ff:4e:94:17:
eb:dc:7b:96:03:48:72:bb:26:af:f5:fc:b4:05:e2:
77:7c:7d:b0:64:2b:c7:7f:87:c7:cc:9e:5d:c0:31:
fb:82:4a:ba:06:5a:3d:40:bf:af:be:c8:27:c4:07:
b3:d0:1e:8b:41:5d:23:1e:49:e5:98:fa:1f:a7:36:
f8:b6:09:f0:06:11:27:f1:f3:27:6c:23:aa:7d:3e:
04:57:af:91:10:ff:10:34:0c:56:a5:08:9c:23:d5:
a8:a2:db:f2:97:e4:95:df:b9:c5:7a:42:7e:26:21:
fd:f4:b7:fc:f3:ad:be:02:13:eb:07:46:20:52:4a:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D2:A3:CA:CE:12:2F:D5:F2:04:AA:11:1E:25:75:1F:C3:BA:AB:EE
X509v3 Authority Key Identifier:
keyid:2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/ftKjys4SL9XyBKoRHiV1H8O6q-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.130.0/23
Signature Algorithm: sha256WithRSAEncryption
08:5f:f2:f9:4f:8f:8e:c2:0e:d3:fe:95:8c:89:8c:53:81:e1:
d9:e9:1d:97:94:94:ec:b3:ba:7d:a5:d9:64:18:12:1a:de:e7:
0a:fe:eb:e4:55:50:44:d6:56:1c:10:ef:29:50:87:fa:ad:01:
08:46:d6:7f:4f:02:1c:70:af:f8:87:ad:83:5e:09:23:dc:14:
cf:a4:55:2b:67:dc:21:10:b4:44:f5:b2:26:6b:34:7d:df:16:
be:0c:21:32:b6:93:c0:e8:21:04:5f:57:f9:4b:60:94:c5:9d:
1e:d3:e1:89:fe:2c:fa:9d:93:85:69:2b:0a:0e:80:50:11:ac:
50:49:bb:41:a2:e0:11:b7:ca:20:d8:1b:5a:8b:14:13:28:9f:
c2:49:a3:bf:71:2d:ae:b5:1f:05:2d:c4:57:7b:f4:8b:cf:03:
a3:f1:13:b4:25:a5:ad:4b:ac:f2:cf:9d:31:4d:a4:6b:5d:78:
57:5c:29:07:d0:44:ef:84:a0:d9:12:4b:60:04:ee:a3:b4:bd:
e6:b3:c5:6c:64:64:c6:ae:12:ae:d6:6f:eb:72:9e:c5:53:20:
2a:30:8d:06:c0:33:ea:72:c4:75:ae:22:83:21:59:05:3b:7f:
0f:97:2b:a1:f5:da:51:13:3f:f0:05:ef:64:91:f3:d9:60:45:
d7:67:dc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:07 2026 by rpki-client