Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/53322e-8f1d-4360-b57c-4e0edc0b6c03/1/fc_oBt3ksZy1-BP6Dkye8KpPHo8.roa
File: fc_oBt3ksZy1-BP6Dkye8KpPHo8.roa (raw, json)
Hash identifier: vA6SD77lZXiDgpAt8O2UHzAriPq10OkKEHZ3mdix25I=
Subject key identifier: 7D:CF:E8:06:DD:E4:B1:9C:B5:F8:13:FA:0E:4C:9E:F0:AA:4F:1E:8F
Certificate issuer: /CN=2b8f24e65246d0be5807207293189f5d8029a5f4
Certificate serial: 019C8B27CBEE4785BA79A001DA1A783847C8
Authority key identifier: 2B:8F:24:E6:52:46:D0:BE:58:07:20:72:93:18:9F:5D:80:29:A5:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K48k5lJG0L5YByBykxifXYAppfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/53322e-8f1d-4360-b57c-4e0edc0b6c03/1/fc_oBt3ksZy1-BP6Dkye8KpPHo8.roa
Signing time: Mon 23 Feb 2026 15:39:26 +0000
ROA not before: Mon 23 Feb 2026 15:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197798
IP address blocks: 31.192.64.0/19 maxlen: 19
45.129.156.0/22 maxlen: 22
2a06:28c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/53322e-8f1d-4360-b57c-4e0edc0b6c03/1/K48k5lJG0L5YByBykxifXYAppfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/53322e-8f1d-4360-b57c-4e0edc0b6c03/1/K48k5lJG0L5YByBykxifXYAppfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K48k5lJG0L5YByBykxifXYAppfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:27:cb:ee:47:85:ba:79:a0:01:da:1a:78:38:47:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b8f24e65246d0be5807207293189f5d8029a5f4
Validity
Not Before: Feb 23 15:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dcfe806dde4b19cb5f813fa0e4c9ef0aa4f1e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:6d:2a:ae:9b:78:14:08:e6:2e:bc:42:a4:
1d:6c:ca:df:13:d3:a6:85:fb:73:a0:9e:75:ac:9f:
c6:85:43:6d:36:b1:ba:e3:9f:c6:73:e9:70:46:99:
20:97:b1:2a:85:6f:c3:8f:66:88:77:14:ad:10:29:
73:cc:39:41:bd:34:78:1e:78:78:51:cc:7b:7c:fd:
3a:24:ce:d0:32:4b:ff:e8:d3:3f:13:66:d9:be:27:
e8:67:7f:3c:26:44:8c:c5:f4:95:76:e5:a7:50:9d:
55:eb:58:ad:6b:b1:f5:71:ff:1c:8a:5c:fd:c7:39:
b6:b0:60:7d:2d:41:99:d6:88:23:06:2a:74:dc:75:
58:ac:ad:84:53:aa:4e:cf:2a:e4:17:d8:c5:69:84:
88:85:d6:bc:2b:aa:83:71:23:a2:91:43:8b:2f:32:
7c:aa:11:f1:9a:49:c1:31:64:01:98:e3:e3:77:9b:
c6:fc:1a:8a:e9:7e:c9:90:16:fc:e2:02:67:9b:a3:
b7:a5:36:8b:a1:f4:6c:c5:85:8d:23:68:49:bb:a3:
94:bf:27:bf:28:b8:14:48:1c:40:95:65:83:ee:cb:
9e:83:9b:1e:6a:83:5b:55:c5:9a:49:96:47:f2:ef:
17:1a:28:fd:df:43:9f:2b:7f:f9:11:c9:5c:af:e5:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CF:E8:06:DD:E4:B1:9C:B5:F8:13:FA:0E:4C:9E:F0:AA:4F:1E:8F
X509v3 Authority Key Identifier:
keyid:2B:8F:24:E6:52:46:D0:BE:58:07:20:72:93:18:9F:5D:80:29:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K48k5lJG0L5YByBykxifXYAppfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/53322e-8f1d-4360-b57c-4e0edc0b6c03/1/fc_oBt3ksZy1-BP6Dkye8KpPHo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/53322e-8f1d-4360-b57c-4e0edc0b6c03/1/K48k5lJG0L5YByBykxifXYAppfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.64.0/19
45.129.156.0/22
IPv6:
2a06:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
20:88:27:aa:3c:8d:39:78:37:fe:c5:7c:14:41:c6:4c:6e:c7:
a4:c7:4c:dd:57:94:3e:48:97:04:aa:50:d0:50:c9:72:e7:d2:
3f:28:cf:89:2d:28:a3:f7:23:38:ad:8e:19:3b:74:51:b2:b4:
af:2a:1f:94:c9:2f:5d:ad:6e:92:f1:7d:7b:76:8b:7b:99:3a:
41:8f:fc:1e:76:70:56:23:ec:f3:81:89:02:c9:60:da:95:9a:
67:03:ff:d3:86:d4:cb:e4:c2:eb:15:16:33:39:ae:97:50:f0:
04:91:96:8a:2c:7b:ff:57:c3:e7:5c:04:2f:83:df:2b:38:7b:
66:19:bd:f5:55:3e:c5:72:9f:2b:3c:32:77:b4:ff:4d:04:93:
3d:07:ed:13:53:65:13:12:fb:97:5a:18:41:a4:23:99:05:da:
ec:4f:7b:44:73:95:38:04:54:64:b7:86:30:fe:e7:9b:8f:9c:
4f:3a:3c:08:30:6d:15:fb:e7:dc:d3:a0:9e:62:e9:0d:a4:c5:
14:e1:61:60:0d:c0:47:41:10:74:f6:3c:b0:89:71:77:c5:fe:
21:aa:39:e7:f5:80:63:b2:25:df:33:32:26:2c:cd:35:35:72:
09:57:a8:fd:1c:13:6e:93:d5:90:c0:21:e6:37:1b:b4:06:7f:
a5:4c:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:49 2026 by rpki-client