Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/FAekIQ60k60FORGV34CNdzgpE3c.roa
File: FAekIQ60k60FORGV34CNdzgpE3c.roa (raw, json)
Hash identifier: B+KPwtgBAMqXpe+e19dl7DQrdvFV0adwtiu9hFscNU4=
Subject key identifier: 14:07:A4:21:0E:B4:93:AD:05:39:11:95:DF:80:8D:77:38:29:13:77
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F901D1D471CC7D56C082C0F2184FB1EAE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/FAekIQ60k60FORGV34CNdzgpE3c.roa
Signing time: Thu 23 Jul 2026 17:54:14 +0000
ROA not before: Thu 23 Jul 2026 17:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14315
IP address blocks: 212.189.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:1d:1d:47:1c:c7:d5:6c:08:2c:0f:21:84:fb:1e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 23 17:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1407a4210eb493ad05391195df808d7738291377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:68:d3:67:77:78:7d:ba:4b:a7:84:03:72:
c8:c4:40:d7:b4:6b:f0:38:5a:59:29:0e:6d:e2:ea:
1e:28:8e:3b:87:8c:89:85:fc:a9:06:28:0f:79:13:
5d:18:56:da:45:22:04:f7:75:a1:5a:39:5a:89:f0:
0d:98:6d:5a:44:a7:8f:5e:14:03:f6:95:f2:12:2f:
2b:c4:80:a5:0a:b8:42:68:71:09:5d:ac:89:41:ef:
3f:d7:58:49:dd:fa:21:1b:9c:7c:0a:cf:6a:13:9b:
08:37:77:35:e9:31:df:ed:28:8e:c5:7b:63:dc:05:
18:94:87:5a:c8:10:6a:9c:d6:74:b1:f9:b5:57:ae:
f9:12:b5:38:b5:ba:4a:d5:ac:45:dd:58:9d:b5:d0:
ed:f1:be:8f:39:75:54:b6:59:e2:3f:33:da:0e:7b:
95:e7:fa:05:36:79:84:c1:f2:7e:e1:5e:df:72:2e:
4e:f1:20:9b:fb:f8:d3:06:cc:ba:e3:0e:e5:8d:4a:
35:76:d7:6e:61:0d:01:82:97:dd:f1:61:6e:c0:07:
18:ef:7d:9b:99:77:b8:6e:2c:75:13:05:b9:4e:85:
30:0a:5d:62:47:78:94:6d:56:9d:1e:f9:65:98:73:
aa:9b:1b:de:61:91:0b:c4:ff:82:45:e7:0e:dc:e9:
5e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:07:A4:21:0E:B4:93:AD:05:39:11:95:DF:80:8D:77:38:29:13:77
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/FAekIQ60k60FORGV34CNdzgpE3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.40.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:db:f2:c1:53:07:f5:e8:15:30:8b:63:19:29:bc:8c:d2:be:
ce:3b:de:e1:8e:64:9b:db:5f:d5:2f:4d:4f:4a:4e:dd:26:08:
d1:5d:9a:7d:16:cb:66:5f:cd:fd:3c:5e:2a:b8:ad:7e:ec:e8:
fe:df:dd:a5:6b:08:19:7c:d4:74:b2:b5:2f:ae:48:42:d4:54:
28:41:bb:1d:bd:4e:6f:b5:71:db:95:90:e6:a8:c5:d4:66:ba:
72:d0:73:98:f4:e6:4e:8f:0d:13:51:e9:07:6a:ae:eb:fc:a1:
ce:90:12:47:27:0d:7a:0d:4d:a2:0b:12:11:86:bd:71:99:81:
56:3f:43:c8:62:31:74:d5:45:ed:2a:e6:8f:eb:fa:42:4f:7f:
0e:c4:93:04:3d:63:d0:af:13:91:85:44:e7:71:c0:c2:81:e4:
93:a2:5d:c3:86:3b:03:ff:a1:28:9b:fd:11:30:d0:9e:a3:8b:
3c:ba:4c:c7:28:13:0a:f9:e8:cb:c5:46:41:98:36:d2:95:50:
9f:f0:82:a1:cc:92:37:27:57:97:85:a4:89:98:e9:a4:c8:29:
88:94:c9:7f:8d:9d:d9:f2:4f:fb:43:4e:20:f8:8c:f9:97:f6:
76:b7:0d:0f:ce:9f:18:47:90:72:5d:72:d9:46:20:fc:38:ce:
5b:c2:d5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:50 2026 by rpki-client