Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/FcGNPYwz5_J_IpZa2PQ-hVZxs3s.roa
File: FcGNPYwz5_J_IpZa2PQ-hVZxs3s.roa (raw, json)
Hash identifier: zBwo4xD9J4OLhTz0HKnWTIlad5vyr6fVYYxN7r1dvp8=
Subject key identifier: 15:C1:8D:3D:8C:33:E7:F2:7F:22:96:5A:D8:F4:3E:85:56:71:B3:7B
Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial: 019F8A7C10634D975FD3D2D46ABBD926437D
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/FcGNPYwz5_J_IpZa2PQ-hVZxs3s.roa
Signing time: Wed 22 Jul 2026 15:40:14 +0000
ROA not before: Wed 22 Jul 2026 15:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59796
IP address blocks: 143.246.36.0/22 maxlen: 24
193.104.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:7c:10:63:4d:97:5f:d3:d2:d4:6a:bb:d9:26:43:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Validity
Not Before: Jul 22 15:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15c18d3d8c33e7f27f22965ad8f43e855671b37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:db:b9:40:01:13:34:84:5a:41:42:bb:1b:
c4:08:60:e1:22:08:ed:f0:66:85:06:81:ec:cf:bb:
ce:f8:3e:ce:6b:ce:ec:f2:e1:09:99:f0:fe:62:6b:
a3:e7:df:4f:28:8b:5a:ad:0e:03:49:2d:71:5a:b0:
85:ac:06:b7:50:78:c6:7a:66:9a:9f:80:54:cc:8f:
c0:76:56:df:3d:52:ac:03:9d:78:76:19:3d:5e:c6:
cf:0d:9f:de:47:c8:66:a6:5c:c7:4d:86:ba:f6:60:
c2:b0:b8:e0:e6:ad:7d:55:0d:1b:b2:06:7c:1d:69:
79:3a:ed:f5:2e:23:b2:a0:3e:c8:ff:19:5f:39:1e:
70:99:f6:ba:ff:c6:a9:05:f8:8f:85:f4:f1:2d:69:
2e:03:ff:d2:27:61:23:3e:2f:55:2c:d6:7c:99:69:
ef:56:ab:d9:10:d8:cb:78:72:89:39:2d:62:4f:a0:
49:12:29:6b:b3:1c:f9:6d:1c:d1:8a:44:ee:72:64:
81:80:d0:12:5c:74:b6:5d:c5:9d:9e:e1:af:0b:f9:
cf:74:8d:f4:59:1d:19:e9:76:41:f7:e2:d9:68:2e:
8b:1d:75:a6:07:35:4b:2e:73:65:74:51:cc:34:55:
f5:f2:c6:28:bd:dd:7b:b8:69:aa:6e:95:30:1e:80:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C1:8D:3D:8C:33:E7:F2:7F:22:96:5A:D8:F4:3E:85:56:71:B3:7B
X509v3 Authority Key Identifier:
keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/FcGNPYwz5_J_IpZa2PQ-hVZxs3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.36.0/22
193.104.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:fa:f6:2f:d4:04:4d:5a:e3:83:6e:68:90:d6:da:43:cd:87:
8e:96:92:2a:39:4e:d3:e7:91:7b:7e:01:56:3f:b1:57:ca:15:
ca:4c:93:15:19:27:04:7e:eb:df:df:89:23:49:30:5d:c1:c6:
6a:8a:96:00:fe:87:17:0b:dd:fc:f3:6b:3f:0f:9b:59:b2:7d:
ac:4a:9f:40:e8:ce:2e:c5:9d:4c:f5:fc:bd:6e:da:50:db:70:
57:59:60:9a:32:45:de:63:c4:3c:e6:2b:22:dc:b9:c5:88:95:
a8:96:e0:dd:3b:c5:25:9f:bc:c9:65:c1:47:b7:d5:e9:d4:54:
72:10:a8:0a:5a:4b:40:88:0a:77:0d:90:03:c8:89:31:10:66:
7c:9b:4f:d4:38:cd:15:e3:9d:80:1c:54:99:34:56:f2:a5:6d:
4f:0e:2c:99:d5:ac:e6:a2:74:eb:29:bb:b5:05:f8:26:9b:d1:
bd:99:fd:10:30:02:96:91:3f:23:a3:ed:df:8f:d3:44:cf:f6:
d4:61:0d:8d:e6:22:0f:44:85:34:ba:ba:0e:f8:f0:08:0e:1b:
42:bb:6d:9a:a1:d1:82:6c:e6:45:64:3b:54:2c:3b:2c:3e:06:
c7:34:10:19:d0:f1:f6:9c:4f:29:c5:44:00:4f:96:5c:93:db:
8d:f7:2c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:48:34 2026 by rpki-client