Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/fQxumP61VhB9FVDhoZcA_ZnxqZE.roa
File: fQxumP61VhB9FVDhoZcA_ZnxqZE.roa (raw, json)
Hash identifier: QVf5rDdwShREzqt48QWp/0TmeWtlZGZgnBrXgvvda9I=
Subject key identifier: 7D:0C:6E:98:FE:B5:56:10:7D:15:50:E1:A1:97:00:FD:99:F1:A9:91
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 019D1EB78C98D8A2638D1B4AC2F011D8A058
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/fQxumP61VhB9FVDhoZcA_ZnxqZE.roa
Signing time: Tue 24 Mar 2026 07:20:38 +0000
ROA not before: Tue 24 Mar 2026 07:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a0a:d880:102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:b7:8c:98:d8:a2:63:8d:1b:4a:c2:f0:11:d8:a0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Mar 24 07:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d0c6e98feb556107d1550e1a19700fd99f1a991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:bb:91:8e:3c:dc:9e:26:75:69:1a:be:a0:
7c:e2:22:27:89:03:34:0a:9d:0b:53:34:02:ca:eb:
c9:87:b5:a3:e7:38:80:1f:87:4a:89:03:c1:45:da:
c3:a8:6f:23:98:b2:00:ff:7c:22:0a:ac:e3:97:16:
48:8f:56:a7:1b:d2:23:a6:1f:82:f2:e3:c0:a7:c6:
ef:c9:17:67:86:a1:cd:c8:0d:58:1d:84:a5:c3:b0:
97:a5:84:e4:ce:e6:f8:08:ac:49:3d:d7:00:06:91:
2f:ed:65:1d:64:a8:75:3a:b5:dd:76:1d:24:3b:c5:
84:a5:d8:23:96:29:bc:e9:b3:45:36:2d:3b:5b:0f:
a9:39:b3:89:ec:9e:f9:61:eb:c8:f5:9d:9b:a2:0e:
46:05:8d:81:3d:c8:49:f8:32:fb:5b:f3:9f:26:6d:
fe:d6:02:9a:6a:08:e5:5d:d8:6e:13:b8:bc:25:aa:
e6:da:29:81:e2:d6:9e:1d:f8:05:d3:36:6e:b6:28:
c5:38:16:7b:00:27:d1:5e:97:cf:e1:49:c6:b6:1e:
89:31:77:99:9c:0f:84:75:4f:54:35:c8:f4:20:cc:
ae:2e:ed:fd:a2:c0:41:50:f9:bb:92:11:8a:a2:8f:
e3:00:f1:71:a3:20:ad:8b:fe:c8:2d:fc:57:64:ae:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0C:6E:98:FE:B5:56:10:7D:15:50:E1:A1:97:00:FD:99:F1:A9:91
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/fQxumP61VhB9FVDhoZcA_ZnxqZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d880:102::/48
Signature Algorithm: sha256WithRSAEncryption
4b:8e:48:5e:88:f3:a4:15:7c:5f:d8:29:d3:ce:f1:53:40:a1:
b6:aa:be:59:0b:33:0e:6b:ce:30:79:45:87:b8:34:3d:cc:26:
bc:30:1f:cf:53:6e:8c:4b:ca:7e:aa:80:5a:01:4c:6d:28:d4:
43:82:c8:ea:d4:20:69:73:27:59:a1:20:a9:e9:b2:95:e2:c1:
7d:e5:c6:4c:b8:b8:81:3d:74:d8:64:8d:2d:d2:5e:d6:b8:c0:
5e:27:72:18:8b:0d:24:d7:d6:c6:e1:af:be:c0:dd:52:fb:4e:
f5:ef:98:54:24:85:af:8a:e7:5f:0a:8b:88:f4:b2:1c:4e:6c:
89:b6:95:69:cd:7e:df:52:56:3e:cc:61:16:03:6e:ed:d5:e1:
de:76:f5:11:a1:3b:bc:2c:8b:b4:12:78:c5:06:35:14:28:c5:
b3:9e:16:03:31:8d:3b:ed:42:6b:ae:21:ec:fe:d2:b6:37:5c:
e0:cf:9b:cd:0f:73:4c:e6:40:81:3e:66:6d:76:b9:49:30:dc:
c3:0c:77:6a:34:c9:06:8b:94:50:f6:78:82:63:6b:96:b8:f9:
bc:40:e4:1b:84:c1:77:a0:53:ee:1f:e3:fd:9f:36:65:66:32:
f3:7b:2f:15:51:6c:b2:66:7f:a8:d1:a7:9a:89:36:a1:fc:f5:
e1:55:bc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:40:08 2026 by rpki-client