Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/f2yAM3HcFcuFs9jbZiiHj7oMQHA.roa
File: f2yAM3HcFcuFs9jbZiiHj7oMQHA.roa (raw, json)
Hash identifier: Z70x98xIewKn+9boP6qj0k8xP1bx/oY6F2z4GrAQ1g4=
Subject key identifier: 7F:6C:80:33:71:DC:15:CB:85:B3:D8:DB:66:28:87:8F:BA:0C:40:70
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A10CA13F4F4D1345988C3C87C7D34B8302
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/f2yAM3HcFcuFs9jbZiiHj7oMQHA.roa
Signing time: Mon 05 Oct 2026 15:14:16 +0000
ROA not before: Mon 05 Oct 2026 15:14:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215133
IP address blocks: 201.4.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:a1:3f:4f:4d:13:45:98:8c:3c:87:c7:d3:4b:83:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 5 15:14:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f6c803371dc15cb85b3d8db6628878fba0c4070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:05:b5:20:e9:80:29:e2:a2:2b:bf:cc:48:
42:8f:86:59:87:1d:73:ec:49:f4:95:c2:1a:cb:36:
b8:a6:39:32:f5:8c:bd:40:08:f8:2e:44:6d:66:d0:
fd:a5:b6:6a:12:c5:7c:e7:90:b1:29:00:da:1e:56:
37:6e:17:bc:83:a3:63:86:3c:41:cb:ef:13:80:35:
9e:ea:5f:ab:20:57:d6:91:68:cc:89:b4:25:ec:ac:
24:24:06:2a:7a:0e:ff:7b:54:64:be:ba:4b:72:5b:
25:30:54:b7:de:49:44:e9:23:45:c6:8c:be:07:46:
fd:0e:f3:58:db:89:a9:c7:33:38:b4:75:b9:5c:1d:
53:b5:5f:37:48:64:21:84:00:d7:07:44:f1:52:8d:
84:fb:b3:1a:21:8d:e3:3e:d6:08:9e:25:eb:f6:5b:
0e:6b:27:54:12:25:2b:51:ac:56:1f:e1:8e:e1:41:
b9:f0:5c:e2:ca:7f:59:da:7b:bc:4c:ac:0f:66:15:
f3:d6:68:b5:01:f9:1e:a6:a0:dd:a0:4f:b2:22:0c:
92:72:13:30:91:49:b0:1c:2d:24:1a:3b:82:ac:7c:
40:ef:3c:5c:0d:9b:5c:e7:c2:18:d1:6a:bd:34:1b:
fa:6b:90:4f:44:60:59:fe:07:2d:fd:94:b8:4b:15:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6C:80:33:71:DC:15:CB:85:B3:D8:DB:66:28:87:8F:BA:0C:40:70
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/f2yAM3HcFcuFs9jbZiiHj7oMQHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.72.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4a:05:ca:00:1c:7f:86:92:13:72:92:d6:9d:16:46:08:23:
f2:ab:97:de:7e:88:53:e0:76:6a:2f:0e:d8:f8:c1:45:3f:52:
da:b5:82:11:71:b2:98:e4:f3:69:c7:13:ac:48:1e:c4:e0:dd:
18:4e:e1:bc:17:00:cd:f5:be:00:9f:9c:f2:e8:b4:a8:03:65:
e5:51:fa:16:79:82:8f:9e:c3:80:03:13:fd:b9:81:c5:fd:d4:
6d:76:85:45:eb:b3:36:36:6b:71:e8:9a:ed:b2:79:c1:de:58:
13:5f:49:2e:6b:cf:b1:53:67:44:2b:ea:19:e1:48:ab:05:d4:
04:c3:9c:68:8d:55:84:6b:05:81:93:0a:95:a7:b8:29:2f:31:
4c:62:93:90:13:96:b3:01:4c:66:d4:d9:91:0f:ac:90:10:85:
94:20:01:c2:b4:98:ed:8d:12:9b:ca:bf:55:85:27:91:1c:e7:
2c:92:71:cc:98:52:d9:7e:16:79:77:d3:f9:29:5e:94:3f:f0:
5f:21:45:03:5b:2b:55:1b:92:cb:02:cf:aa:de:fc:0f:d3:d7:
6f:0a:1a:a0:7c:5f:eb:43:98:36:a3:c7:31:46:69:2e:af:2d:
cf:99:4f:48:86:b4:52:69:4e:d0:03:ad:ec:49:c7:8c:a0:ab:
2a:bb:72:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 09:57:34 2026 by rpki-client