Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/a3bb35-4f1c-4981-bdcd-2467fe39b8f7/1/FDegULGzvfG-gNS-LUXKoPdnj9A.roa
File: FDegULGzvfG-gNS-LUXKoPdnj9A.roa (raw, json)
Hash identifier: h1P7Z0bSly3+qrMo8xryY2Ga1F0erUT3h3+flgUiiBk=
Subject key identifier: 14:37:A0:50:B1:B3:BD:F1:BE:80:D4:BE:2D:45:CA:A0:F7:67:8F:D0
Certificate issuer: /CN=5b43172e52d8f551e92164527c061bec379d8671
Certificate serial: 01A18725ADC6E79BBEFCE96B10B5A4DA2093
Authority key identifier: 5B:43:17:2E:52:D8:F5:51:E9:21:64:52:7C:06:1B:EC:37:9D:86:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0MXLlLY9VHpIWRSfAYb7DedhnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a3bb35-4f1c-4981-bdcd-2467fe39b8f7/1/FDegULGzvfG-gNS-LUXKoPdnj9A.roa
Signing time: Thu 29 Oct 2026 10:12:35 +0000
ROA not before: Thu 29 Oct 2026 10:12:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5089
IP address blocks: 91.216.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a3bb35-4f1c-4981-bdcd-2467fe39b8f7/1/W0MXLlLY9VHpIWRSfAYb7DedhnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a3bb35-4f1c-4981-bdcd-2467fe39b8f7/1/W0MXLlLY9VHpIWRSfAYb7DedhnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0MXLlLY9VHpIWRSfAYb7DedhnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:25:ad:c6:e7:9b:be:fc:e9:6b:10:b5:a4:da:20:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b43172e52d8f551e92164527c061bec379d8671
Validity
Not Before: Oct 29 10:12:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1437a050b1b3bdf1be80d4be2d45caa0f7678fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:d1:a0:3b:83:9e:83:f3:16:2c:da:05:53:
56:9e:11:23:9d:7c:92:7d:45:f1:2e:df:78:a9:db:
87:e0:88:32:77:53:9b:cf:de:52:e5:be:9b:f8:4a:
87:b6:c0:3d:86:2b:0a:b2:24:37:b7:bc:39:51:9f:
03:ad:f0:16:84:3b:ff:c9:88:8c:d4:f9:9f:fd:2b:
9f:09:f5:7c:61:e6:c5:c9:05:e8:ee:b6:20:c6:53:
47:a9:1e:6f:65:03:54:74:fc:c0:46:ec:13:a7:46:
1f:b3:4f:1c:81:ed:d9:11:dd:28:0d:75:48:6e:4c:
6b:3f:b0:63:31:85:e2:e0:6c:06:23:b7:43:c4:0f:
66:1e:4d:76:91:2a:42:0b:4a:15:90:be:b9:21:c7:
30:ec:a3:66:03:4a:f6:8a:c9:3b:4f:c9:c0:a1:84:
5b:34:9b:c4:74:b6:84:5f:29:c5:8d:3c:91:ce:a9:
47:b6:10:c2:39:74:50:f6:10:6b:18:d3:aa:88:86:
e6:df:63:c7:1a:18:e8:f0:9a:2d:3a:fb:84:78:d3:
03:56:76:2b:57:86:d7:16:c4:e2:bc:69:c1:74:1e:
6a:1e:1e:b2:5a:ce:c0:26:15:ff:fd:92:e3:e3:e3:
ba:60:d9:ff:ec:04:ce:57:42:e9:43:e9:9d:8f:8c:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:37:A0:50:B1:B3:BD:F1:BE:80:D4:BE:2D:45:CA:A0:F7:67:8F:D0
X509v3 Authority Key Identifier:
keyid:5B:43:17:2E:52:D8:F5:51:E9:21:64:52:7C:06:1B:EC:37:9D:86:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0MXLlLY9VHpIWRSfAYb7DedhnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a3bb35-4f1c-4981-bdcd-2467fe39b8f7/1/FDegULGzvfG-gNS-LUXKoPdnj9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a3bb35-4f1c-4981-bdcd-2467fe39b8f7/1/W0MXLlLY9VHpIWRSfAYb7DedhnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.55.0/24
Signature Algorithm: sha256WithRSAEncryption
24:82:b5:b9:a1:81:c5:b3:20:e0:2d:e1:18:2a:f5:f8:20:29:
9c:ca:76:e9:34:22:5b:84:59:0a:dd:96:a4:43:ab:6d:7b:f9:
43:ca:a9:7f:df:bc:a7:29:a1:0d:3b:c2:94:01:d8:a5:5b:96:
15:55:f2:c9:2c:6d:c2:07:96:6d:98:dc:80:38:4b:32:26:f0:
e2:59:3a:d4:52:18:3f:08:5b:4f:54:46:19:6a:24:d8:f2:8d:
30:a1:79:fa:1a:9c:33:55:ec:a9:a1:ea:17:b7:d1:cc:77:44:
e1:92:66:fe:92:14:3f:57:f9:c6:fe:53:17:c9:f8:4b:48:90:
cd:13:6d:8c:7c:86:25:ce:24:41:84:50:d9:97:20:71:1b:36:
45:a2:d1:75:52:32:82:a8:60:d0:a2:65:15:4c:2e:7f:b3:69:
dc:6e:32:79:af:e1:72:f5:84:72:3c:61:37:13:1e:28:c1:39:
f7:c5:5c:f2:e4:8c:f6:cc:c8:fb:42:8c:77:ae:ab:fe:a1:e3:
d9:a8:4b:fc:63:83:da:78:a8:8b:80:02:85:c8:53:91:47:0a:
ff:81:8c:72:57:60:f4:60:66:1c:40:01:cb:dd:59:58:ba:05:
b4:80:6f:c4:17:b7:b6:b9:66:5c:f5:92:7e:49:30:30:52:b2:
6d:fe:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:23:54 2026 by rpki-client