Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Fnh5F-6FCHHpG2PkLJ1NSuyaB1g.roa
File: Fnh5F-6FCHHpG2PkLJ1NSuyaB1g.roa (raw, json)
Hash identifier: 9SkWU/SbcqBbTrbrirb2GooVNIz3rCagopFRdzpv2So=
Subject key identifier: 16:78:79:17:EE:85:08:71:E9:1B:63:E4:2C:9D:4D:4A:EC:9A:07:58
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A1DA9F45476E0827DB351587CAFB704DCC
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Fnh5F-6FCHHpG2PkLJ1NSuyaB1g.roa
Signing time: Sat 14 Nov 2026 15:13:53 +0000
ROA not before: Sat 14 Nov 2026 15:13:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41791
IP address blocks: 192.144.78.0/24 maxlen: 24
222.167.245.0/24 maxlen: 24
222.167.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:9f:45:47:6e:08:27:db:35:15:87:ca:fb:70:4d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Nov 14 15:13:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16787917ee850871e91b63e42c9d4d4aec9a0758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:cd:d1:4b:6e:9b:ca:0c:9e:3c:08:40:42:
3a:ee:cd:84:01:69:04:df:43:a8:0b:60:c7:78:6e:
22:60:cd:77:84:30:13:3d:41:54:59:4b:6c:41:c4:
fc:c6:2f:64:a8:23:d0:78:7e:4e:dc:a2:fa:5f:47:
00:df:3a:ad:ad:08:89:26:03:ea:f5:a3:08:35:95:
c4:6d:4d:61:16:01:fb:26:9b:24:63:cb:fd:90:58:
09:a3:c0:b6:23:39:c5:b5:6b:70:69:95:3b:61:42:
77:26:88:b8:bd:f3:74:4d:ba:4f:bc:97:dc:0f:fd:
fc:82:0b:53:6a:1e:78:1c:21:4b:ea:1b:98:b0:8a:
e5:ce:3a:fd:a3:63:e2:01:26:4a:98:d9:ae:98:a9:
84:39:f1:08:7e:42:99:5e:09:1e:95:95:2e:b1:0b:
97:fe:11:e1:25:ba:e2:7e:a9:77:83:1a:50:ce:f3:
2c:c2:f3:dc:c2:01:5f:23:c5:64:a3:72:0e:45:3a:
45:9e:22:1a:c8:03:ff:53:ed:f5:ea:68:71:76:0e:
bb:cb:48:63:71:7b:5f:01:5e:a4:03:bb:7b:ee:d4:
50:0e:6e:f8:7f:69:90:23:f2:df:37:da:6b:54:fa:
60:24:5a:cd:45:ed:c6:74:fb:29:42:3f:e8:bb:46:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:78:79:17:EE:85:08:71:E9:1B:63:E4:2C:9D:4D:4A:EC:9A:07:58
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Fnh5F-6FCHHpG2PkLJ1NSuyaB1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.78.0/24
222.167.245.0/24
222.167.248.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b1:81:f0:1c:25:f7:85:ee:33:3c:aa:9c:94:47:d7:42:c7:
57:bd:c3:b6:55:3b:05:30:6b:a3:d8:32:17:a9:b2:26:4c:9d:
67:3c:41:f4:ef:b8:7b:95:08:78:ad:a7:7e:d0:0a:21:6f:46:
8b:70:19:f2:3c:cb:c5:b9:4e:c3:d0:4f:28:c6:30:7b:0a:40:
a8:aa:b4:ce:40:45:25:cb:34:80:ab:9c:74:47:63:bb:c7:f4:
c5:cb:40:9e:70:75:f3:70:6c:ce:7f:c6:cc:f6:b7:01:1e:a4:
75:c6:38:32:31:d1:14:80:82:66:27:7a:20:d8:76:e1:ef:60:
e9:19:16:24:76:8b:f1:d1:40:48:21:12:c1:ef:df:4a:5c:7e:
6b:90:90:1a:8c:10:3c:2c:b2:7d:c4:e3:5b:a8:96:80:34:a4:
49:1c:c5:10:ae:69:c0:5b:fb:48:9b:18:0f:f2:e2:96:fe:56:
f6:bc:e0:4a:c5:e3:9d:03:e6:82:84:d2:5d:06:77:0d:97:c0:
ee:97:39:40:77:42:8c:3e:df:42:97:67:6e:48:47:39:c1:58:
9b:e3:e8:58:40:4c:c0:8c:c3:02:ed:e7:ce:a1:36:6d:ae:5e:
31:6b:f3:6e:74:f7:b6:7e:d1:bc:1d:3d:d4:e4:13:c3:fb:9f:
80:05:3e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:47:57 2026 by rpki-client