Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Fqd9CiVtXICF7fkUl7kmSEJrslg.roa
File: Fqd9CiVtXICF7fkUl7kmSEJrslg.roa (raw, json)
Hash identifier: P0MD0ty95bldNCHqdPgd7411Cky2iN6dvwj7mvcRfpI=
Subject key identifier: 16:A7:7D:0A:25:6D:5C:80:85:ED:F9:14:97:B9:26:48:42:6B:B2:58
Certificate issuer: /CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Certificate serial: 019F23690FE8365B49B57DA22190E7B0BF58
Authority key identifier: DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Fqd9CiVtXICF7fkUl7kmSEJrslg.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201992
IP address blocks: 217.23.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0f:e8:36:5b:49:b5:7d:a2:21:90:e7:b0:bf:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16a77d0a256d5c8085edf91497b92648426bb258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:7f:9e:f2:1c:68:c7:c0:95:8f:cc:95:62:
61:8b:90:dc:d6:93:c9:9f:79:7b:25:f5:c6:fd:b2:
87:21:a3:23:5b:7f:ab:2a:2b:e0:99:10:f9:c0:20:
71:36:bf:6e:94:79:9c:54:39:aa:8e:9b:e3:ee:a6:
2c:5c:c2:b5:bf:fd:75:c6:61:a0:e2:ff:00:b2:cc:
d1:cc:bc:8f:5b:79:88:08:3c:e3:ed:1f:21:8e:d2:
9c:77:ae:55:46:88:06:b5:a2:d2:74:1b:df:75:c5:
02:39:42:c0:00:e9:88:fa:5f:3d:18:21:17:d0:af:
d8:55:89:72:bc:32:74:a4:a6:71:6d:fc:da:30:f1:
65:ba:d4:25:b5:01:fe:be:ad:5d:4a:cf:7e:63:be:
b7:4d:95:df:59:52:6d:84:2e:e0:4e:2b:93:1e:f9:
f5:ed:35:19:61:73:9c:52:e3:c8:87:e3:a7:66:6a:
e6:d5:64:f1:72:f5:0d:05:ae:44:8d:af:b4:58:4e:
73:be:46:8b:ce:42:b6:09:f6:e0:ce:b2:2b:48:ca:
fa:60:fa:3a:8f:c7:a1:e4:e8:b2:a5:12:0f:66:62:
73:35:97:67:f7:af:6e:7f:be:8b:3d:0c:f1:20:36:
24:4f:00:b1:08:61:0a:b9:87:34:81:27:e5:1f:d0:
1d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A7:7D:0A:25:6D:5C:80:85:ED:F9:14:97:B9:26:48:42:6B:B2:58
X509v3 Authority Key Identifier:
keyid:DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Fqd9CiVtXICF7fkUl7kmSEJrslg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.23.112.0/24
Signature Algorithm: sha256WithRSAEncryption
34:21:48:0a:3d:53:1f:9d:48:43:f6:e3:3d:04:87:6c:41:17:
75:05:59:7d:98:f7:07:2b:bf:39:b5:07:a6:03:6f:4c:f1:11:
f6:ea:00:c0:cf:13:cb:67:b6:1d:cf:12:36:bb:e4:c8:0e:eb:
1b:45:f7:e2:24:45:7d:49:01:ec:2a:54:bd:41:c4:6a:13:41:
95:12:40:82:e8:40:e4:1b:7d:17:9e:ae:81:e0:4f:ce:52:eb:
5c:a5:ff:cc:bc:74:2c:d0:79:a0:dc:47:e2:02:55:a7:5f:57:
9f:cc:89:c0:4c:03:75:6d:ff:21:44:ea:c5:4f:f3:71:a2:0d:
06:1e:a7:03:ad:82:9c:33:c0:08:c3:d5:a3:8f:eb:b1:a3:09:
22:6b:0e:84:6c:da:88:47:ce:7c:bc:fd:c1:29:ae:4b:4e:4c:
5b:69:48:4f:0d:cb:71:13:71:c6:9c:e2:91:5b:41:0b:d9:4d:
d0:40:c8:74:75:aa:3c:bf:53:ea:c8:5b:23:9e:64:08:28:31:
17:34:90:70:30:48:5b:99:4a:39:6b:a4:c8:bc:6c:0b:c4:1a:
fc:5e:dd:fb:15:8b:3a:05:a7:75:a9:61:8a:12:e9:f5:c7:62:
4f:2f:6c:45:c3:29:3d:1d:3a:80:e3:fb:84:30:4a:db:69:15:
45:78:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:26 2026 by rpki-client