Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/FfOPMY7mii2Cm6kOOlKnObrAFlk.roa
File: FfOPMY7mii2Cm6kOOlKnObrAFlk.roa (raw, json)
Hash identifier: +7ly5U6D6BJx7M0g52gce1GzJrj9+P8diN5kHhF4NhE=
Subject key identifier: 15:F3:8F:31:8E:E6:8A:2D:82:9B:A9:0E:3A:52:A7:39:BA:C0:16:59
Certificate issuer: /CN=01f23f5916fb027bdfbfb0468cd6edc00a994035
Certificate serial: 01A03E6149F4E3D2D2364F2D1394277F0B4D
Authority key identifier: 01:F2:3F:59:16:FB:02:7B:DF:BF:B0:46:8C:D6:ED:C0:0A:99:40:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfI_WRb7Anvfv7BGjNbtwAqZQDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/FfOPMY7mii2Cm6kOOlKnObrAFlk.roa
Signing time: Wed 26 Aug 2026 14:02:38 +0000
ROA not before: Wed 26 Aug 2026 14:02:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202089
IP address blocks: 193.107.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfI_WRb7Anvfv7BGjNbtwAqZQDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:61:49:f4:e3:d2:d2:36:4f:2d:13:94:27:7f:0b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f23f5916fb027bdfbfb0468cd6edc00a994035
Validity
Not Before: Aug 26 14:02:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15f38f318ee68a2d829ba90e3a52a739bac01659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:8e:41:02:bc:d2:65:03:3e:bf:a0:a6:e0:
c6:e9:a2:1f:44:1f:e7:86:ae:1b:0e:aa:89:53:56:
71:72:b9:e2:ac:b2:b1:64:15:a5:68:90:ae:24:eb:
fa:76:47:51:21:bc:21:aa:7e:c5:80:d9:c9:cd:20:
c9:f3:54:2e:d9:b1:f5:b9:55:46:91:96:cc:c3:2d:
a0:4a:ba:0b:a3:15:a7:52:1e:32:f0:ab:a6:53:7b:
3c:f9:12:c8:c1:97:36:e3:db:ea:45:d1:d9:a7:91:
ed:27:5d:b5:9e:6a:c1:c3:6e:c9:c9:34:2a:89:71:
49:9e:e2:89:bc:9e:d7:20:03:a3:7c:43:f4:c9:0c:
f1:20:c5:61:78:1e:2a:73:28:52:2b:cd:50:66:9a:
ec:d8:c7:10:79:89:97:a4:80:01:bd:70:f2:47:df:
ca:ab:86:6f:82:92:c3:8d:cf:91:49:8c:f7:a7:33:
4b:ae:87:62:af:26:e2:b9:fd:17:38:c0:db:f3:54:
f0:c3:d4:3d:4b:06:9d:92:83:95:a5:05:17:55:f3:
e5:ad:3c:e2:e0:e6:71:58:a7:08:80:65:23:3d:3a:
f2:56:91:5f:db:ce:bd:a1:c3:14:16:8a:58:e5:5c:
41:0d:2d:7c:6d:eb:4e:ea:f1:bc:be:91:b8:47:59:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F3:8F:31:8E:E6:8A:2D:82:9B:A9:0E:3A:52:A7:39:BA:C0:16:59
X509v3 Authority Key Identifier:
keyid:01:F2:3F:59:16:FB:02:7B:DF:BF:B0:46:8C:D6:ED:C0:0A:99:40:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfI_WRb7Anvfv7BGjNbtwAqZQDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/FfOPMY7mii2Cm6kOOlKnObrAFlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.50.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c4:e9:81:ba:16:82:11:f9:f3:78:eb:f3:0d:be:76:85:7a:
00:f3:1d:7b:ff:f1:e7:33:33:2a:b3:9d:20:be:ff:bd:7a:0c:
9d:94:ed:b3:41:ae:82:56:73:6c:8a:7a:4f:6d:fd:de:19:05:
cd:2e:1b:a5:10:5f:40:d6:05:95:1b:67:21:ac:be:b5:fc:f9:
c1:11:d4:34:17:92:b0:73:6f:0f:88:0e:1f:2d:06:bb:a0:9d:
a1:5b:a0:b3:5f:8e:ef:90:d8:e4:c2:3a:47:4e:dd:5a:04:8c:
5a:b6:41:7d:fe:23:59:b5:cf:44:29:2f:0e:4d:af:0a:19:d1:
29:21:88:85:26:43:f9:13:53:0c:0e:8c:f9:5c:a0:37:f4:84:
71:3e:1c:01:85:c8:ef:8a:fc:f4:b2:ae:9a:22:45:5c:79:ef:
21:ec:d0:8b:fb:60:08:a6:76:c4:11:47:ec:57:cf:46:e2:32:
bd:a9:90:05:82:5d:5b:48:81:11:51:29:0d:6c:1b:7b:7c:26:
e6:6e:6f:33:c1:8b:ff:2b:b4:f2:15:f6:5f:1f:92:22:8a:36:
54:8f:e4:a6:0a:63:62:07:c0:62:1b:e1:f6:f6:05:78:7d:75:
16:95:3c:9c:cd:0e:0d:36:7d:3c:82:1e:a9:e8:51:45:7e:90:
82:4c:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:35:26 2026 by rpki-client