Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/FneKNxnzANLquvs5RDh285FbFjo.roa
File: FneKNxnzANLquvs5RDh285FbFjo.roa (raw, json)
Hash identifier: wM7MaFPVmqdgH2laeuL0dQ1Y/ck3S2iV1sW46582MtM=
Subject key identifier: 16:77:8A:37:19:F3:00:D2:EA:BA:FB:39:44:38:76:F3:91:5B:16:3A
Certificate issuer: /CN=fd945a40fee9190b5dae357545e9d237dd7f2abd
Certificate serial: 019F2368DAC40F456B3257A466ACF1136F03
Authority key identifier: FD:94:5A:40:FE:E9:19:0B:5D:AE:35:75:45:E9:D2:37:DD:7F:2A:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/FneKNxnzANLquvs5RDh285FbFjo.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64411
IP address blocks: 185.165.164.0/22 maxlen: 22
2a0a:3e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:da:c4:0f:45:6b:32:57:a4:66:ac:f1:13:6f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd945a40fee9190b5dae357545e9d237dd7f2abd
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16778a3719f300d2eabafb39443876f3915b163a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:29:63:85:35:c3:09:20:38:38:e5:71:20:
32:51:18:6e:a2:1f:43:8e:d7:94:e2:88:de:71:57:
ff:a1:ec:9b:83:7d:32:94:7c:4c:d9:50:69:1e:ec:
86:81:be:05:33:76:22:0e:84:77:23:d5:a4:50:4f:
61:33:7a:8d:cc:a4:d4:33:23:0b:66:d5:be:73:4b:
bc:13:04:57:4d:32:78:71:6c:65:27:51:f5:2b:85:
18:8a:b8:d4:6d:a6:e1:99:66:bd:f5:b3:8a:22:15:
87:76:6a:6a:5f:4d:d2:e5:9e:cf:09:11:d3:c0:79:
21:5c:86:f9:07:47:f3:8b:41:ca:a6:0f:91:56:51:
dd:d6:46:5f:bc:d1:cc:a7:9f:df:7d:0f:a7:73:d5:
c5:c1:f8:80:ea:71:16:2c:dd:6e:0b:89:bc:da:cf:
8c:b5:c9:27:06:2e:41:43:1b:e7:e4:c7:df:be:b3:
b8:be:55:57:4a:72:5a:d2:9d:e8:fc:46:ee:76:8a:
c2:18:0f:0f:7a:2b:ba:7a:49:12:2d:fc:b4:98:5d:
cb:2c:61:e5:20:21:01:53:e9:45:87:3a:f2:ba:21:
86:bd:e6:1e:92:58:b8:54:f3:fa:4f:a4:d0:95:8f:
b7:ac:5f:08:e0:cd:51:ea:e8:52:0b:ac:3a:6a:ce:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:77:8A:37:19:F3:00:D2:EA:BA:FB:39:44:38:76:F3:91:5B:16:3A
X509v3 Authority Key Identifier:
keyid:FD:94:5A:40:FE:E9:19:0B:5D:AE:35:75:45:E9:D2:37:DD:7F:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/FneKNxnzANLquvs5RDh285FbFjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.164.0/22
IPv6:
2a0a:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
31:5e:7c:ed:ad:d9:0b:9d:3e:fd:19:aa:9e:23:36:e8:81:42:
e8:62:5b:03:b5:ff:ac:ad:db:33:c6:d9:0e:7f:cf:98:f1:aa:
6f:3a:17:73:62:64:4b:a8:2e:0a:df:83:40:22:46:48:83:15:
75:15:e7:1a:ee:48:03:06:d2:bc:c2:c8:01:55:9a:06:11:14:
1b:94:64:04:a4:99:10:f1:d9:0d:5a:fc:8a:b6:94:3b:2c:de:
48:91:79:37:96:df:04:48:5b:95:54:bd:bd:23:91:78:f5:ce:
8b:6d:6b:e5:8d:a3:12:e2:01:94:c6:2d:f9:1a:c2:10:c5:54:
0b:39:2e:a5:1a:f1:a5:c8:29:7e:ed:84:4f:78:6e:bf:8f:c3:
bf:a1:65:d8:76:5e:83:bb:ff:87:ab:86:b6:40:11:bc:1e:21:
95:90:9f:7c:11:56:ef:a6:b4:96:3c:a9:72:18:0b:b5:64:75:
12:78:64:18:f6:ad:a9:89:3e:dd:c7:28:6e:9a:99:9e:95:81:
e3:63:99:9c:8c:7e:ad:7a:59:62:05:a2:30:a6:3b:5c:92:47:
4f:86:f3:7b:eb:37:d9:6c:14:59:ea:42:3f:f5:ef:7d:a2:d8:
7a:53:49:42:db:62:1c:37:17:22:64:36:19:30:b3:d8:dc:2a:
5a:a5:1a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:57:53 2026 by rpki-client