Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F8M3rxMZXVu8BBbKZXS2p7XcFL8.roa
File: F8M3rxMZXVu8BBbKZXS2p7XcFL8.roa (raw, json)
Hash identifier: Tg+h3HZqYg0ZfgY6VlikbvCINXrB6mWsaFEgPcWpecY=
Subject key identifier: 17:C3:37:AF:13:19:5D:5B:BC:04:16:CA:65:74:B6:A7:B5:DC:14:BF
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01A0C8B0D7A9FD917906CAE300CC22194139
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F8M3rxMZXVu8BBbKZXS2p7XcFL8.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 2a11:b300::/29 maxlen: 29
2a12:2900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d7:a9:fd:91:79:06:ca:e3:00:cc:22:19:41:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17c337af13195d5bbc0416ca6574b6a7b5dc14bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:19:da:e3:8b:e8:7e:11:d3:05:cc:ea:80:
ff:42:a6:77:31:67:d6:34:53:a7:cf:d8:12:6d:5a:
55:79:66:62:9b:ec:0d:b5:a4:05:fe:c2:8e:46:d5:
2d:a3:f4:83:48:b0:2b:9e:7a:7c:f0:5c:1f:24:10:
84:3c:98:44:0a:07:f0:b0:e1:ea:b0:34:e4:e0:88:
06:22:9f:7e:dd:da:c6:a9:a0:18:82:24:ea:01:be:
c2:12:13:c9:02:8d:42:07:87:02:fd:4d:c2:15:b4:
f7:65:fa:9b:2c:4a:43:8d:ea:c4:83:f9:41:17:3b:
c0:1a:90:b6:ee:13:b2:38:27:0a:4b:e8:3f:35:aa:
24:76:d5:d2:a4:1f:6c:84:1d:3b:19:d3:fa:7b:2e:
56:32:66:a2:a0:a8:6f:9f:dc:01:9c:8d:26:d5:e8:
14:b5:da:fa:9b:0f:e4:fd:df:b5:0c:fe:b8:47:9c:
56:54:cb:3e:f3:60:c1:67:ef:ec:cd:d0:0e:30:8c:
ce:79:34:09:2e:d5:75:99:40:03:41:b2:94:c4:7c:
60:8e:1c:d6:81:10:af:5b:c7:3f:03:01:4e:c5:80:
3a:66:85:19:ee:78:ac:e3:8e:fa:be:99:80:d8:ef:
4d:aa:f3:35:5c:9a:37:bc:b8:a6:6d:9b:7a:c1:49:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C3:37:AF:13:19:5D:5B:BC:04:16:CA:65:74:B6:A7:B5:DC:14:BF
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F8M3rxMZXVu8BBbKZXS2p7XcFL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:b300::/29
2a12:2900::/29
Signature Algorithm: sha256WithRSAEncryption
65:5a:89:4d:ba:bf:61:5f:c8:33:df:ed:b7:53:c4:ff:8c:92:
a9:d6:83:d3:b3:8d:6c:2c:fe:e8:3a:62:64:79:37:e9:f5:d3:
4c:8a:7d:63:8c:a2:16:e4:7d:fd:ac:e6:31:57:f0:aa:07:1c:
f1:9e:4e:f8:a5:6d:64:96:fd:ef:20:f1:5f:fe:19:a2:db:23:
2c:64:d1:2b:f5:b1:77:2d:06:76:47:69:9c:fb:21:7c:bf:f5:
02:02:ff:8c:00:4f:01:4d:c8:00:c0:9d:08:1f:79:21:03:3f:
58:86:2a:ad:f3:10:96:34:84:48:c4:02:ec:18:71:0e:e3:e7:
69:e4:34:71:f5:3b:16:5f:85:f1:84:a6:96:9c:1d:41:71:7f:
52:44:8c:2f:4c:d2:90:2a:1a:60:99:9e:d7:db:b3:3a:e3:a2:
3f:5b:c0:80:81:11:83:2d:f2:4f:84:59:39:f7:42:3a:a1:d2:
58:de:44:ce:11:36:08:4b:73:fa:35:11:8f:80:0c:a4:d8:0b:
8b:ae:35:b9:20:71:9b:bf:3b:8a:72:ab:d7:b3:c0:b6:24:cd:
1a:99:07:c2:b7:fd:93:21:9a:67:82:c0:26:e5:65:e5:c7:87:
73:2e:a3:fc:4a:77:20:06:94:c0:80:f3:81:0f:3b:0b:cc:1f:
e1:97:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:13:06 2026 by rpki-client