Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/fxiSWUcRQD51gM0RPsEQjvzI38g.roa
File: fxiSWUcRQD51gM0RPsEQjvzI38g.roa (raw, json)
Hash identifier: E6WdUSIBvqTy8V1ibWnoipK0v1HaXvsG8UAWT6fDsk8=
Subject key identifier: 7F:18:92:59:47:11:40:3E:75:80:CD:11:3E:C1:10:8E:FC:C8:DF:C8
Certificate issuer: /CN=b853010c5e6ec889f815aaaa617dfa850cef1812
Certificate serial: 01A05D511F1C7613E8C7E7320233195F6701
Authority key identifier: B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/fxiSWUcRQD51gM0RPsEQjvzI38g.roa
Signing time: Tue 01 Sep 2026 14:13:12 +0000
ROA not before: Tue 01 Sep 2026 14:13:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199156
IP address blocks: 66.228.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:51:1f:1c:76:13:e8:c7:e7:32:02:33:19:5f:67:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b853010c5e6ec889f815aaaa617dfa850cef1812
Validity
Not Before: Sep 1 14:13:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f1892594711403e7580cd113ec1108efcc8dfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:d7:c5:ae:35:32:18:fb:08:39:90:7c:82:
01:ad:2d:ac:46:a8:ff:92:3f:28:46:f1:ca:c8:a8:
ff:ea:d9:e9:c1:98:e0:5a:1c:31:f5:23:73:93:25:
e7:68:ac:a6:14:c9:d3:70:e5:1c:df:ca:b8:5d:49:
6b:80:81:11:22:11:a7:04:83:2c:11:de:27:cc:fd:
bc:2b:75:e1:99:8f:be:9a:b7:2a:e7:f6:32:7e:1c:
64:5c:99:3e:38:38:a3:ff:83:8c:d9:b4:df:66:97:
fd:78:10:e0:bb:73:09:58:18:13:d5:26:06:2a:2a:
a7:25:7e:86:73:9c:dd:72:3a:97:aa:f0:31:2c:14:
67:fd:1a:16:3b:2c:fb:e0:b7:b4:83:60:d7:26:89:
25:67:7d:cd:6d:6b:63:29:7c:45:90:0f:8d:62:a8:
95:1b:04:2e:38:e9:e1:73:06:67:ba:57:23:cc:78:
4f:7b:cb:26:e0:72:6a:6c:ad:22:03:4e:d3:83:7c:
0a:06:8d:13:22:8d:b5:a4:3d:64:f0:43:02:0b:07:
2a:94:07:d5:fc:31:e1:74:9b:8a:85:74:8a:ea:4f:
e1:00:4f:27:c4:12:f4:73:97:63:fc:1d:de:9d:3c:
22:6f:6e:f2:7f:e5:a7:97:98:d2:b6:68:55:40:d3:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:18:92:59:47:11:40:3E:75:80:CD:11:3E:C1:10:8E:FC:C8:DF:C8
X509v3 Authority Key Identifier:
keyid:B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/fxiSWUcRQD51gM0RPsEQjvzI38g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.228.88.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c0:7c:2b:8a:c5:87:4e:ce:79:cc:aa:f5:82:1a:7b:22:1d:
9e:9a:d9:01:3b:47:6c:74:dc:7c:5a:34:4f:be:d4:9b:b3:a2:
2a:b8:06:55:b7:bd:92:15:20:ba:41:32:33:af:47:93:96:4c:
23:13:80:6c:77:e2:54:33:6f:5c:a0:5c:3b:c4:07:70:b7:be:
16:c0:4e:50:fa:89:b5:8b:78:eb:5f:8a:95:ba:b5:54:14:5d:
b5:17:1d:15:81:80:28:5a:0c:56:10:a7:26:ce:8d:cd:10:81:
0e:cb:8c:b0:d8:1d:4e:27:ed:7b:ba:b6:a0:57:85:ac:e0:0d:
ad:71:56:c2:9a:62:6a:b1:ab:eb:7d:0c:62:99:3b:d7:d6:d2:
fa:f3:41:c5:e2:1c:6a:96:19:bf:7c:4a:ed:36:70:bb:dc:19:
4f:b8:81:d6:cc:0c:59:be:a8:f5:8d:e5:85:f5:81:d7:b3:8b:
6b:b4:ff:7f:d5:29:a9:aa:dc:2b:e7:86:9a:86:53:b9:f6:a3:
5a:f1:e7:26:d9:8a:99:13:bf:5c:9d:9f:4c:37:54:bb:31:d0:
93:ab:45:08:c9:36:99:59:e5:09:dc:c0:2a:8f:a4:8a:4c:6a:
c2:56:71:2c:02:b8:42:b9:a3:20:3f:ff:29:22:20:91:b9:dd:
38:02:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:10:11 2026 by rpki-client