Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/FRfo6l0O44AlCNnhnhmuDvpHTzg.roa
File: FRfo6l0O44AlCNnhnhmuDvpHTzg.roa (raw, json)
Hash identifier: 7i6dHellWiAp50OL94RpcYOJ5rAib14ynKrewSzenKY=
Subject key identifier: 15:17:E8:EA:5D:0E:E3:80:25:08:D9:E1:9E:19:AE:0E:FA:47:4F:38
Certificate issuer: /CN=5afc40d240958143f729a18e2c354eb9c43f13af
Certificate serial: 019F172DC8FA2521B6169CFFC2CC2C68BD26
Authority key identifier: 5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/FRfo6l0O44AlCNnhnhmuDvpHTzg.roa
Signing time: Tue 30 Jun 2026 06:18:24 +0000
ROA not before: Tue 30 Jun 2026 06:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 129.215.0.0/16 maxlen: 16
192.41.103.0/24 maxlen: 24
192.41.104.0/21 maxlen: 21
192.41.112.0/20 maxlen: 20
192.41.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:2d:c8:fa:25:21:b6:16:9c:ff:c2:cc:2c:68:bd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afc40d240958143f729a18e2c354eb9c43f13af
Validity
Not Before: Jun 30 06:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1517e8ea5d0ee3802508d9e19e19ae0efa474f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:f2:c7:37:0f:03:77:5b:19:8a:f2:02:4f:
7d:ab:a7:30:7a:45:f0:fe:26:f7:d3:a1:c3:e8:f2:
2c:b8:dc:84:e8:7f:c7:a6:2c:bd:c6:04:45:63:7b:
af:de:fd:42:fd:c3:b9:0a:1b:b6:33:1d:92:5e:c3:
7f:ef:75:ee:1f:dc:e3:e0:23:5e:ca:bd:82:b9:6b:
1f:78:0d:1a:48:3a:5f:01:98:8b:5e:b8:90:f6:79:
67:b4:07:84:1f:86:d3:e4:6b:6d:2d:95:6e:54:92:
df:1c:5c:61:9f:61:1d:a9:25:bd:2c:b8:d3:5f:a4:
02:a8:9e:f0:b7:cc:fb:39:67:55:8c:cf:da:6d:bf:
f2:85:18:d5:58:32:61:3b:30:8d:60:e9:5b:a5:52:
50:64:39:d7:34:e9:05:86:61:90:7c:6a:96:66:43:
1e:3d:7c:a8:8f:da:93:23:f2:5f:ff:95:73:bd:7f:
10:c8:08:e0:60:aa:62:d6:6d:88:75:3b:81:d5:ba:
5f:45:58:39:02:99:48:d4:65:73:32:51:ae:6a:c6:
6d:fe:e2:73:17:f8:9b:27:03:29:05:b1:fd:8a:2a:
d6:d4:1d:65:9e:2d:fd:be:fb:04:2f:c4:07:19:57:
11:c7:cc:25:03:71:f4:ea:ce:14:e4:d2:86:4e:5a:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:17:E8:EA:5D:0E:E3:80:25:08:D9:E1:9E:19:AE:0E:FA:47:4F:38
X509v3 Authority Key Identifier:
keyid:5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/FRfo6l0O44AlCNnhnhmuDvpHTzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.215.0.0/16
192.41.103.0-192.41.131.255
Signature Algorithm: sha256WithRSAEncryption
68:2e:48:bf:fe:37:a8:19:da:92:f6:14:76:22:e4:cd:55:77:
a9:77:dd:d3:af:17:b6:4b:66:31:89:44:d6:d5:15:30:81:78:
07:8e:48:38:e1:0d:5e:4f:ad:b1:0a:60:5d:a2:03:bd:4f:62:
f3:4e:20:4e:21:54:4a:0f:f0:4a:51:e8:dd:96:56:fe:ba:18:
94:d9:29:f4:e1:a4:4f:84:4f:96:31:59:2c:ae:e5:a2:4e:0e:
5e:3a:48:27:32:a4:5b:d0:b9:5c:b2:04:01:ca:ad:b8:ef:6c:
db:47:99:8c:1b:df:7e:46:8f:83:2e:42:3a:14:9b:15:c9:60:
67:67:ac:02:fb:05:6c:8d:b6:f0:f8:0e:98:df:ed:9c:fc:7c:
20:0c:8b:4d:bb:42:e5:d3:3f:11:a0:b3:ca:b5:15:9b:75:7b:
5b:84:7b:f6:d8:f2:d6:07:5f:b4:f1:ef:49:33:ca:8b:76:34:
c5:36:69:dd:5a:69:14:41:e1:8c:6e:ad:51:09:4a:8b:ae:01:
1c:1c:ce:2c:4b:d5:a7:44:09:bd:6d:32:3c:e2:0d:a2:59:1b:
9a:c6:8f:67:b4:7b:a4:e8:60:f7:3f:b2:f0:fa:51:a0:26:fd:
da:ca:6f:e1:0b:ef:a8:bf:a9:63:fd:ac:1a:43:b7:be:c0:65:
7c:22:a5:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:32 2026 by rpki-client