Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FvHxo9Sso7zVnWuIkvb5d-JD4_k.roa
File: FvHxo9Sso7zVnWuIkvb5d-JD4_k.roa (raw, json)
Hash identifier: moGHdyLdRM3bg6ixDK4YEqb/9PqQvKGBRuHLA9QsG7A=
Subject key identifier: 16:F1:F1:A3:D4:AC:A3:BC:D5:9D:6B:88:92:F6:F9:77:E2:43:E3:F9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E0AE989D9E3ABE78DBEBA3AFC74C3D7DC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FvHxo9Sso7zVnWuIkvb5d-JD4_k.roa
Signing time: Sat 09 May 2026 04:05:37 +0000
ROA not before: Sat 09 May 2026 04:05:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215760
IP address blocks: 2a02:2fc0:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0a:e9:89:d9:e3:ab:e7:8d:be:ba:3a:fc:74:c3:d7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 9 04:05:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16f1f1a3d4aca3bcd59d6b8892f6f977e243e3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:80:fa:9e:2c:aa:d2:6e:82:5c:35:4e:9f:
9b:a7:c8:b8:41:1d:5a:33:2f:6a:85:60:6e:09:5e:
a7:92:bb:63:a5:87:58:df:64:e2:26:57:53:3e:a8:
17:fa:2d:c1:da:94:53:76:a2:12:72:0b:cf:3b:e8:
9b:4c:a3:55:58:4c:a2:0e:07:a1:71:90:40:56:05:
63:9a:22:45:fe:92:59:1c:a9:52:da:ec:d8:9b:4b:
f8:99:8a:04:95:60:13:76:38:94:ca:2b:9d:81:be:
75:64:75:e5:3e:6b:6e:b6:8c:a1:9d:85:55:94:12:
1b:ce:93:c9:1e:45:5d:ae:3c:22:b6:f3:66:c1:9a:
41:a2:13:10:1c:df:e6:00:52:ad:fd:8b:90:52:5d:
05:c6:30:1b:b4:04:42:99:7a:15:48:e8:71:25:df:
ae:ad:1f:16:f5:8b:25:9c:f9:bc:c0:de:5b:c7:56:
35:06:09:98:68:24:06:d1:40:44:7c:5e:39:16:da:
a4:96:b2:29:9b:30:3d:41:8d:69:ee:53:38:00:17:
46:73:07:2b:df:3b:83:bf:82:95:07:cd:e3:a9:b6:
73:88:21:86:02:cc:c3:ac:df:77:9a:e8:95:6c:62:
be:60:98:e0:ed:3b:af:63:06:76:d7:f2:a5:b3:ad:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F1:F1:A3:D4:AC:A3:BC:D5:9D:6B:88:92:F6:F9:77:E2:43:E3:F9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FvHxo9Sso7zVnWuIkvb5d-JD4_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:2a::/48
Signature Algorithm: sha256WithRSAEncryption
51:68:b1:9a:63:60:03:75:70:54:f4:bf:a2:b1:11:55:59:28:
60:3a:39:72:af:dc:73:40:e0:2c:a8:f1:4f:04:85:35:d4:03:
72:5b:1a:7f:38:56:2f:6f:de:f1:1c:49:b3:9b:4a:49:a2:fe:
48:30:49:bd:63:3c:41:72:44:4a:bc:f2:70:d1:da:e5:b3:53:
83:5d:54:fe:44:48:10:ee:a3:fd:e8:0d:57:a0:33:19:d8:f2:
db:24:b7:31:0a:20:82:7c:31:7d:f6:28:5f:74:38:44:0b:19:
ac:db:6c:c0:28:7f:14:95:da:60:49:f6:f3:b0:c1:3d:41:46:
a2:fe:be:4e:1d:40:00:26:db:4a:17:86:1f:02:e1:d7:e8:5c:
ec:15:00:ab:f9:8c:76:db:ec:40:fa:a0:4d:1c:7e:fd:5b:a3:
2f:b5:f5:62:49:11:91:b5:1e:a8:f4:70:e3:be:17:c7:1d:cd:
e9:f2:6c:ff:0b:f7:d7:00:5e:03:97:06:a0:35:cc:9f:2a:03:
1f:87:b8:04:1d:46:88:ba:53:a4:77:7f:1f:ca:3f:0a:39:b9:
5d:69:80:c3:6c:1c:16:8d:f7:34:11:de:71:ea:22:63:26:95:
46:d2:7c:07:48:fb:e0:1d:27:46:d7:66:14:d2:ac:0d:f2:89:
ee:a1:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:26 2026 by rpki-client