Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/fYb3yqxYZbERWvZR_A7UqgvLBhg.roa
File: fYb3yqxYZbERWvZR_A7UqgvLBhg.roa (raw, json)
Hash identifier: 0iZV/WEPOO770yHBZVc4wL21UBM51H4s8ObdaVDkQ64=
Subject key identifier: 7D:86:F7:CA:AC:58:65:B1:11:5A:F6:51:FC:0E:D4:AA:0B:CB:06:18
Certificate issuer: /CN=cfacd22f287e84c23b4e8964f3b11ef125a1c818
Certificate serial: 019D0193B17038C3B612A480D6F62023F2D7
Authority key identifier: CF:AC:D2:2F:28:7E:84:C2:3B:4E:89:64:F3:B1:1E:F1:25:A1:C8:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6zSLyh-hMI7Tolk87Ee8SWhyBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/fYb3yqxYZbERWvZR_A7UqgvLBhg.roa
Signing time: Wed 18 Mar 2026 15:32:29 +0000
ROA not before: Wed 18 Mar 2026 15:32:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24971
IP address blocks: 193.169.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6zSLyh-hMI7Tolk87Ee8SWhyBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:93:b1:70:38:c3:b6:12:a4:80:d6:f6:20:23:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfacd22f287e84c23b4e8964f3b11ef125a1c818
Validity
Not Before: Mar 18 15:32:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d86f7caac5865b1115af651fc0ed4aa0bcb0618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:7b:68:02:83:bf:66:6e:62:42:e9:97:e1:
29:92:6d:ff:e4:05:56:fd:0a:c7:9a:b7:fb:0c:cc:
ac:e3:30:31:23:d2:d3:01:91:b1:0c:35:d8:35:37:
5d:a2:f4:2c:13:73:fe:07:9b:27:4f:71:3e:6e:95:
fd:19:3e:1d:5d:38:21:22:6c:41:44:b3:57:f5:77:
b5:b9:0d:9b:50:f8:69:c9:61:8f:cf:1d:dd:cf:b8:
6e:42:aa:f5:55:06:32:d1:16:4a:f7:8a:72:b9:e5:
02:93:6a:bb:17:78:14:d1:18:41:0a:46:5f:e0:77:
12:c0:6f:cc:a0:00:16:7b:95:62:8a:86:71:e3:8d:
4e:f8:8d:32:7a:c5:da:0e:32:cc:9f:24:79:45:b7:
5e:08:31:91:48:30:c2:82:b1:16:4a:bf:e5:79:68:
e6:46:64:e1:44:45:f9:c3:b5:e4:b6:de:25:15:c2:
49:f4:50:66:fe:be:b1:be:62:5e:eb:63:30:b7:54:
a0:8c:65:5a:57:ab:21:57:30:28:3f:81:0c:56:3f:
07:e6:62:d2:33:d2:1c:b5:aa:3e:b9:6d:0c:ee:a4:
f4:bd:c9:97:62:e3:f6:7d:50:02:b6:f0:04:4b:16:
94:4e:56:55:26:d7:e6:a8:c5:9c:60:a6:09:09:c5:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:86:F7:CA:AC:58:65:B1:11:5A:F6:51:FC:0E:D4:AA:0B:CB:06:18
X509v3 Authority Key Identifier:
keyid:CF:AC:D2:2F:28:7E:84:C2:3B:4E:89:64:F3:B1:1E:F1:25:A1:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6zSLyh-hMI7Tolk87Ee8SWhyBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/fYb3yqxYZbERWvZR_A7UqgvLBhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/z6zSLyh-hMI7Tolk87Ee8SWhyBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.212.0/24
Signature Algorithm: sha256WithRSAEncryption
12:66:7b:3d:5f:09:10:47:a6:cf:a0:b0:4f:40:df:ad:fe:d6:
ba:db:ac:b1:4f:5d:45:ae:83:62:ce:f1:2e:02:e4:ce:27:64:
07:99:6b:9f:e0:f7:35:d3:13:27:c0:97:19:c9:c1:b9:2f:d0:
36:ff:1f:07:50:4e:31:59:5e:91:99:cc:27:5e:50:90:90:78:
3a:d5:27:d6:44:66:cb:37:e3:b8:f0:7a:6b:40:e4:ea:74:ba:
e7:09:a9:ab:3e:ca:66:fd:cf:2e:9b:0e:b7:f6:9b:89:00:99:
d1:99:07:f3:14:cb:cc:e6:53:e1:97:b8:78:50:f1:01:61:de:
dc:32:f9:d6:59:4b:dd:43:c5:b4:5e:25:0e:fa:02:cc:49:aa:
0f:1a:ac:5a:f8:6a:50:7a:19:0e:c8:9b:97:8b:67:c1:01:36:
17:7c:43:06:fc:a2:c1:52:0b:07:f0:ae:be:99:6e:6e:53:13:
92:e8:81:a0:35:47:40:9c:0d:7f:3e:8a:07:97:2b:2d:b9:16:
55:28:3e:6d:e8:4b:0e:91:4e:9f:2e:10:13:8f:69:55:04:f1:
2b:57:51:3a:60:58:f1:9f:91:12:2a:9f:2d:2d:19:46:1b:28:
5f:df:66:b8:cc:f6:d2:b2:3f:0c:ea:a7:93:99:5f:df:a0:0e:
6b:f8:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:25 2026 by rpki-client