Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/FJK3MlyjVAojwF-mVWmHdiKhNPU.roa
File: FJK3MlyjVAojwF-mVWmHdiKhNPU.roa (raw, json)
Hash identifier: TzYYtBzBEMH3oqJKKM05yqeDoBBlOjW5TQHdTV317bs=
Subject key identifier: 14:92:B7:32:5C:A3:54:0A:23:C0:5F:A6:55:69:87:76:22:A1:34:F5
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019F9486DDB9AA5D13BB7A89C95A979CE92F
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/FJK3MlyjVAojwF-mVWmHdiKhNPU.roa
Signing time: Fri 24 Jul 2026 14:28:14 +0000
ROA not before: Fri 24 Jul 2026 14:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a11:240::/29 maxlen: 29
2a11:2000::/29 maxlen: 29
2a11:4fc0::/29 maxlen: 29
2a11:a400::/29 maxlen: 29
2a11:a700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:86:dd:b9:aa:5d:13:bb:7a:89:c9:5a:97:9c:e9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jul 24 14:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1492b7325ca3540a23c05fa65569877622a134f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0a:4e:35:65:4e:bf:ff:fa:6d:e6:13:a6:b4:
6a:f9:ec:17:39:de:70:a3:cd:1c:92:87:24:e6:47:
0d:71:74:5c:2a:ac:8b:b1:32:ae:d4:91:d8:04:58:
c2:57:b2:a4:dc:f5:1e:bc:67:03:e7:a1:cc:64:23:
11:41:a7:93:da:c1:0d:2c:d4:05:e7:48:93:6d:7b:
90:26:41:2a:83:e9:01:d6:46:00:88:e2:9e:1e:10:
c2:90:93:06:ad:67:c4:6b:49:28:0b:6a:09:17:ea:
a1:32:c8:5e:e1:75:8d:a0:b3:0a:b8:45:96:2e:eb:
c0:bc:e8:fc:d0:34:5d:be:9c:fc:12:b5:ce:60:7e:
a7:df:8c:df:76:90:86:e0:36:d7:76:4c:db:43:cf:
8f:90:fd:43:08:a7:1a:7b:09:5e:c5:a2:6f:25:87:
0a:b7:8f:d8:a2:ae:bb:42:e0:6e:86:e5:fe:17:96:
82:68:bf:05:3a:9c:30:20:65:2c:04:35:69:c9:91:
42:70:62:de:d2:4b:18:f4:bb:3e:9d:d1:1a:e8:c7:
d7:f4:2f:9f:d9:dc:d9:b6:65:d9:48:58:ec:44:01:
0a:d6:04:0c:5f:59:0e:b6:e0:8b:77:9b:cc:b0:f5:
e2:7a:93:0b:ee:76:98:ff:f5:d6:20:0e:a8:a9:d8:
14:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:92:B7:32:5C:A3:54:0A:23:C0:5F:A6:55:69:87:76:22:A1:34:F5
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/FJK3MlyjVAojwF-mVWmHdiKhNPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:240::/29
2a11:2000::/29
2a11:4fc0::/29
2a11:a400::/29
2a11:a700::/29
Signature Algorithm: sha256WithRSAEncryption
8f:8b:34:e6:f0:07:3a:4d:d6:81:7f:91:0a:56:d5:65:0b:40:
27:21:66:2f:86:2b:63:f9:c9:32:89:a2:47:77:d4:99:7a:1c:
66:99:44:9c:c6:6a:80:74:2c:bb:47:57:eb:6e:25:7e:06:e0:
f1:71:40:66:d1:fb:43:36:cb:95:87:84:6e:cb:f3:c6:34:42:
90:1c:de:c7:5e:c6:a0:1b:44:4b:59:fa:85:aa:73:4b:e2:85:
07:47:6d:46:fb:a9:31:71:da:56:76:dd:08:f8:70:92:e6:34:
02:95:28:82:2b:c3:f9:15:5b:b5:12:37:04:7b:d1:2b:5d:8f:
63:b6:fd:01:97:05:19:1f:5f:2e:0d:90:c1:43:f5:04:20:41:
89:97:00:25:25:6f:88:46:bd:ba:f9:90:28:e0:81:e7:da:0c:
b5:06:ab:ce:8f:f0:05:c9:fe:97:64:58:96:c8:fd:a6:5a:1e:
25:32:fa:6a:6c:b3:1d:ee:a5:f3:6e:29:2c:e6:8a:20:4f:ab:
61:57:60:e8:0a:9b:de:d2:b0:28:01:07:54:44:e3:a6:8d:c8:
38:01:89:ea:af:25:b4:84:57:0e:e9:4c:98:c9:40:50:4d:18:
31:54:37:48:17:f9:db:dd:51:b9:96:ed:16:d8:82:b3:f6:4b:
4b:6b:1d:e1
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZ+Uht25ql0Tu3qJyVqXnOkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjYwNzI0MTQyODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDkyYjczMjVjYTM1NDBhMjNjMDVmYTY1NTY5ODc3NjIyYTEzNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QpONWVOv//6beYTprRq+ewXOd5w
o80ckock5kcNcXRcKqyLsTKu1JHYBFjCV7Kk3PUevGcD56HMZCMRQaeT2sENLNQF
50iTbXuQJkEqg+kB1kYAiOKeHhDCkJMGrWfEa0koC2oJF+qhMshe4XWNoLMKuEWW
LuvAvOj80DRdvpz8ErXOYH6n34zfdpCG4DbXdkzbQ8+PkP1DCKcaewlexaJvJYcK
t4/Yoq67QuBuhuX+F5aCaL8FOpwwIGUsBDVpyZFCcGLe0ksY9Ls+ndEa6MfX9C+f
2dzZtmXZSFjsRAEK1gQMX1kOtuCLd5vMsPXiepML7naY//XWIA6oqdgUXQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFBSStzJco1QKI8BfplVph3YioTT1MB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvRkpLM01seWpWQW9qd0YtbVZXbUhkaUtoTlBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUDKhECQAMF
AyoRIAADBQMqEU/AAwUDKhGkAAMFAyoRpwAwDQYJKoZIhvcNAQELBQADggEBAI+L
NObwBzpN1oF/kQpW1WULQCchZi+GK2P5yTKJokd31Jl6HGaZRJzGaoB0LLtHV+tu
JX4G4PFxQGbR+0M2y5WHhG7L88Y0QpAc3sdexqAbREtZ+oWqc0vihQdHbUb7qTFx
2lZ23Qj4cJLmNAKVKIIrw/kVW7USNwR70Stdj2O2/QGXBRkfXy4NkMFD9QQgQYmX
ACUlb4hGvbr5kCjggefaDLUGq86P8AXJ/pdkWJbI/aZaHiUy+mpssx3upfNuKSzm
iiBPq2FXYOgKm97SsCgBB1RE46aNyDgBieqvJbSEVw7pTJjJQFBNGDFUN0gX+dvd
UbmW7RbYgrP2S0trHeE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:03 2026 by rpki-client