Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/_ASiUhXeY63b5BNtEqzaZ16vD-0.roa
File: _ASiUhXeY63b5BNtEqzaZ16vD-0.roa (raw, json)
Hash identifier: BUnjl1MSunQRjsMsZP1NCTuXa3OmGtEoOrCZvwn66r8=
Subject key identifier: FC:04:A2:52:15:DE:63:AD:DB:E4:13:6D:12:AC:DA:67:5E:AF:0F:ED
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019DD85BD1EC3364EFEA37760DEA2F986A56
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/_ASiUhXeY63b5BNtEqzaZ16vD-0.roa
Signing time: Wed 29 Apr 2026 08:29:49 +0000
ROA not before: Wed 29 Apr 2026 08:29:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21840
IP address blocks: 86.110.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:5b:d1:ec:33:64:ef:ea:37:76:0d:ea:2f:98:6a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Apr 29 08:29:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc04a25215de63addbe4136d12acda675eaf0fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:97:a2:fc:86:ca:e3:81:e1:5b:a9:e2:2d:
a4:b9:c4:5a:af:4e:97:80:d9:d5:7c:41:54:f5:4c:
09:71:c9:13:99:2e:96:e9:c8:f9:04:2d:7b:db:39:
a4:f5:ee:ec:15:59:cd:52:0a:de:73:04:81:d6:83:
8c:df:b5:fe:01:23:f7:e1:80:55:88:e4:61:a2:b2:
07:21:75:ce:85:5a:c8:9e:f6:0d:a6:f1:70:03:17:
63:dd:16:2f:86:fd:0d:2b:21:33:bf:9a:b9:0d:c4:
9a:b6:92:41:46:af:50:c0:38:b7:4a:43:a5:a4:ee:
65:40:25:80:61:e1:49:ed:e0:1e:79:96:52:78:85:
8f:93:fb:e9:96:a7:0b:bc:30:55:01:1c:40:1f:88:
3e:0f:bb:e7:42:f0:52:4e:b1:f0:c4:fa:c8:78:ea:
bc:dd:cc:46:7a:0b:e5:a6:cc:cd:ac:e6:48:4a:ac:
27:91:c4:0a:93:f3:ee:38:73:9d:eb:8f:28:8a:e3:
d0:4c:e0:8c:7a:d5:c8:e4:82:1b:93:70:a3:a7:b8:
f3:f9:b7:01:a5:a9:d5:d9:3d:a2:c6:c4:29:6a:f0:
07:a6:f0:79:ff:81:e4:f6:46:bd:7c:2e:1c:d6:f6:
bc:49:46:03:b2:df:61:1d:8e:c5:22:90:25:4a:2d:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:04:A2:52:15:DE:63:AD:DB:E4:13:6D:12:AC:DA:67:5E:AF:0F:ED
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/_ASiUhXeY63b5BNtEqzaZ16vD-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.44.0/24
Signature Algorithm: sha256WithRSAEncryption
be:a1:f2:32:13:6b:ea:fe:da:b2:8a:37:89:e9:50:b3:ea:b6:
af:55:33:ef:24:3c:03:f8:1b:01:05:e6:90:2e:a1:51:69:9f:
09:66:e2:15:76:ca:27:4f:30:90:5b:89:41:9f:8c:6c:28:65:
c6:52:fc:22:b8:5e:b5:f8:7d:d2:ab:99:b3:4f:a7:71:a5:2a:
63:74:67:cb:e8:b2:78:cf:2e:6f:74:cd:d5:37:3b:c5:69:98:
b5:95:64:25:47:76:d4:6b:83:08:29:06:a3:2b:b3:12:be:6f:
ce:11:76:20:f1:e6:4d:c7:a5:e8:94:b9:d3:75:8b:5f:d1:58:
93:68:dd:c7:b1:e1:b6:dd:7b:00:00:a0:35:7c:c4:d2:b8:a9:
74:59:9f:53:3c:7b:ea:32:b5:94:ce:68:2e:af:e9:e2:ec:7d:
60:af:1a:aa:2b:bb:e9:70:9d:1c:09:de:ff:f9:12:67:0b:d8:
0a:8a:d3:54:83:15:bf:1b:2e:d4:0a:b5:16:07:0d:71:6a:4f:
24:46:61:7b:b4:81:c5:b3:79:08:ea:8e:49:64:01:65:b1:a2:
86:f0:70:a7:93:b5:85:a4:29:c3:a0:4f:78:17:90:9a:7f:66:
e2:83:fa:9a:a6:3f:56:b1:62:b9:0c:d8:2e:b0:30:7e:7c:d9:
68:90:5a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:46:34 2026 by rpki-client