Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FKqza9Yoa14fQTW0Fobyw9CglSI.roa
File: FKqza9Yoa14fQTW0Fobyw9CglSI.roa (raw, json)
Hash identifier: 7M8kSkO0BYARzVD1jHx1hOmaMlLNr3AbVcsweD/h1PA=
Subject key identifier: 14:AA:B3:6B:D6:28:6B:5E:1F:41:35:B4:16:86:F2:C3:D0:A0:95:22
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F39087B1B736A4511103519D3055482E9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FKqza9Yoa14fQTW0Fobyw9CglSI.roa
Signing time: Mon 06 Jul 2026 20:04:44 +0000
ROA not before: Mon 06 Jul 2026 20:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36352
IP address blocks: 5.181.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:08:7b:1b:73:6a:45:11:10:35:19:d3:05:54:82:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 6 20:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14aab36bd6286b5e1f4135b41686f2c3d0a09522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5b:31:d6:e3:90:ab:8d:f8:c5:95:de:4c:d6:
10:7a:a0:b2:77:56:f6:b9:50:3f:8b:15:f6:04:cf:
0b:28:35:81:81:8b:f0:69:f2:5f:53:4e:d1:fd:f9:
c0:f7:ab:7c:82:70:21:51:b2:6c:f2:b7:3b:36:2e:
c1:56:de:3f:e5:25:47:f6:4f:88:e5:5d:3d:ec:fb:
41:36:5f:05:e9:ff:e7:a7:d8:65:e5:d4:da:1f:a3:
27:55:42:b9:6c:bf:6a:62:f4:fd:2f:1e:15:02:ec:
e9:4d:46:26:74:09:79:97:a8:ca:9f:c0:2f:1c:b6:
57:01:6d:57:4d:14:0c:fd:3e:6d:0d:e4:4c:8d:2b:
8d:c8:6d:f6:c9:1a:a4:ea:c6:5e:00:aa:8f:21:74:
9c:b6:78:69:53:ea:bb:c2:94:75:94:80:b1:1f:f5:
73:a2:42:f5:a1:99:7a:98:c2:ea:d8:23:fe:42:4c:
61:17:a5:d8:bd:be:9f:68:7c:15:b5:ad:9a:b7:69:
f9:0f:87:df:0d:91:4c:92:1f:35:6e:37:75:83:b0:
1b:aa:60:5c:ba:2a:2f:40:f9:c2:16:07:9b:18:1b:
95:ee:54:59:33:96:61:78:76:f5:7c:38:57:3f:4d:
5c:fc:33:3d:53:54:c0:b8:3f:a2:96:71:15:45:99:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AA:B3:6B:D6:28:6B:5E:1F:41:35:B4:16:86:F2:C3:D0:A0:95:22
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FKqza9Yoa14fQTW0Fobyw9CglSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.182.0/24
Signature Algorithm: sha256WithRSAEncryption
69:9f:67:87:aa:95:34:25:cc:44:4a:42:3d:bb:2e:56:24:b7:
2a:15:78:93:23:0a:7a:28:4e:b8:1b:66:ac:43:a8:b1:b6:1e:
4b:b3:08:60:41:2a:5b:da:7f:79:86:1f:ff:76:50:37:8d:17:
81:d0:39:07:55:19:1e:4a:d3:89:88:ee:a7:04:a1:1d:21:0c:
66:24:12:6b:b1:0f:24:c6:ed:3d:e6:cb:8d:69:9d:da:aa:c4:
93:48:40:8f:1c:3f:cf:95:b5:86:ad:3c:21:d5:57:16:c2:ff:
ba:9f:9a:e5:84:e4:84:38:ad:15:d5:76:56:2c:77:9c:14:7f:
bc:74:30:25:62:f1:57:60:ff:4a:29:22:b3:f0:69:ce:05:31:
37:cc:bf:a1:63:ce:55:d9:dd:2c:59:f8:22:de:53:84:ca:32:
84:ae:83:56:5f:e7:06:aa:6e:59:14:d3:9a:19:61:da:ec:d9:
37:8d:56:0c:fc:80:ba:49:5e:88:a6:28:c5:04:81:5a:b9:d9:
87:5c:41:26:c8:a8:53:aa:ad:a4:36:86:59:93:e4:f4:f6:fe:
a2:c0:ca:af:b8:e5:05:7b:7f:fe:b3:f4:bf:ef:69:ee:39:43:
41:54:2c:c9:03:14:57:0a:81:7d:58:97:2d:82:bf:8c:42:c1:
81:f6:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:22 2026 by rpki-client