Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/FQ-cn1xD6KsvCiukzaSyL7Bi5fs.roa
File: FQ-cn1xD6KsvCiukzaSyL7Bi5fs.roa (raw, json)
Hash identifier: 9/gq5XTu7uOiRhd+dP7NFtGAPJ4cf/D1aTBzP0UWPcg=
Subject key identifier: 15:0F:9C:9F:5C:43:E8:AB:2F:0A:2B:A4:CD:A4:B2:2F:B0:62:E5:FB
Certificate issuer: /CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Certificate serial: 019F236864ADBAE5D27A8DFE335A3D7A01FA
Authority key identifier: 27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/FQ-cn1xD6KsvCiukzaSyL7Bi5fs.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8989
IP address blocks: 2a02:980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:64:ad:ba:e5:d2:7a:8d:fe:33:5a:3d:7a:01:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=150f9c9f5c43e8ab2f0a2ba4cda4b22fb062e5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:a7:78:d1:82:c8:ac:b3:af:fc:d7:70:5b:
1b:12:85:3c:a3:98:bc:14:c7:8a:dd:32:49:96:f5:
c9:2b:f9:b1:8a:70:88:12:ad:a1:fd:3b:ce:74:5a:
f4:02:ae:5b:ce:ae:9c:50:22:20:c4:82:85:a2:2a:
ed:b9:9d:f7:08:62:e4:17:aa:52:72:8c:e0:79:d8:
97:e0:f3:3d:d4:7b:c8:1c:6d:87:db:8a:0b:97:92:
d2:fd:41:42:80:da:0d:fc:a6:2b:73:75:fb:07:4f:
ee:3d:d1:50:f1:90:52:f1:87:6f:e3:58:f3:ff:29:
6f:34:0f:03:6b:ff:dd:1a:ae:4b:0e:a9:99:b4:bd:
18:72:ad:34:4f:3d:16:a2:57:a1:91:5d:04:e6:18:
fe:0b:fd:73:1c:d4:9b:4e:b6:47:2a:49:a2:19:69:
2b:cc:ad:f1:1f:a5:0d:b0:d8:a9:b2:92:6a:38:85:
af:37:90:df:f3:f5:07:09:e0:25:bf:cc:d6:04:2c:
4e:4d:b7:45:24:cd:38:f9:8a:e0:89:05:ce:67:65:
a0:f7:cb:03:d6:92:6f:5e:ff:9a:aa:88:d1:c4:58:
64:13:64:dc:f9:c9:d7:b8:b2:e0:f5:70:7b:7e:eb:
f5:1e:79:88:77:73:78:85:67:f1:57:c8:17:f4:35:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0F:9C:9F:5C:43:E8:AB:2F:0A:2B:A4:CD:A4:B2:2F:B0:62:E5:FB
X509v3 Authority Key Identifier:
keyid:27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/FQ-cn1xD6KsvCiukzaSyL7Bi5fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:980::/29
Signature Algorithm: sha256WithRSAEncryption
31:36:36:74:1b:39:57:7e:47:58:17:4e:b1:e6:82:8d:37:36:
66:0f:a5:0c:73:4b:4d:6b:a1:00:23:f4:ac:52:1e:20:d7:e1:
72:69:f5:4f:ce:4c:ae:19:9d:dd:90:2f:8b:79:9a:45:0e:db:
ca:f1:ca:f9:5b:36:52:2e:aa:cf:91:75:8e:ba:34:55:1b:13:
0d:11:42:33:57:57:f5:0b:09:f3:99:e8:eb:c3:6c:8e:d0:30:
04:1a:f7:28:8f:bb:86:4d:f3:ee:04:07:19:81:5a:32:d0:7d:
ec:c6:74:ac:c5:75:cc:1e:1b:b8:8d:f4:af:2c:b1:ff:9c:7f:
36:12:50:93:28:e8:eb:26:d7:c0:1f:31:9c:b1:ab:58:c3:a2:
d6:c0:d1:d9:a1:e7:16:59:78:6a:83:5f:e2:23:14:f1:06:44:
33:0f:03:8e:bf:01:d0:bf:78:58:81:5d:b5:24:b6:63:06:c9:
95:aa:77:45:3a:46:3e:48:f2:b5:8a:56:5b:ad:af:90:fe:92:
e5:56:76:e3:75:3c:2a:02:70:cd:d2:c3:87:b0:12:26:d3:e0:
3f:07:8d:98:86:6b:d8:04:5b:dc:38:1f:2c:65:97:88:f2:27:
8f:e0:88:0a:f4:97:76:a3:24:33:45:2b:7f:2e:2a:46:0d:8c:
bd:36:9a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:47 2026 by rpki-client