Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/FpZLKm-2HuyBs9RMbUcbmbopMuU.roa
File: FpZLKm-2HuyBs9RMbUcbmbopMuU.roa (raw, json)
Hash identifier: 3TSsOddEtljGL8cZUDm9jJjfR573z1TKNPv7WQMwWsE=
Subject key identifier: 16:96:4B:2A:6F:B6:1E:EC:81:B3:D4:4C:6D:47:1B:99:BA:29:32:E5
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 019EFFA97630CCB93362C57538CCC7D94A3F
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/FpZLKm-2HuyBs9RMbUcbmbopMuU.roa
Signing time: Thu 25 Jun 2026 16:42:36 +0000
ROA not before: Thu 25 Jun 2026 16:42:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219374
IP address blocks: 200.162.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:a9:76:30:cc:b9:33:62:c5:75:38:cc:c7:d9:4a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jun 25 16:42:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16964b2a6fb61eec81b3d44c6d471b99ba2932e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:0e:15:3c:16:74:c7:fc:9b:42:85:2a:4e:
0a:be:44:7f:a8:9b:36:51:8e:4b:c0:db:ac:f3:60:
fb:bb:f3:82:37:a2:88:a1:6d:aa:76:e2:45:0f:18:
0d:da:9c:6e:65:6d:ae:92:45:5a:33:67:b6:8f:b8:
33:da:5e:f9:19:be:3f:27:67:71:f8:a5:71:44:5d:
f3:e5:e9:c5:90:d2:58:88:df:02:e9:e8:f2:07:f0:
dc:28:9e:b4:48:9b:b3:60:d5:c0:78:89:2b:73:80:
91:9c:75:59:63:73:6e:80:73:05:83:c4:fb:ee:da:
0d:16:a9:48:19:b7:d3:90:69:0c:89:bc:44:0c:b9:
50:62:d6:ac:4e:42:45:40:b5:74:c2:7a:84:ca:e9:
b3:66:e3:30:3a:fb:30:91:35:1f:94:8e:7a:08:e3:
d4:44:bc:a8:81:1b:17:ee:02:95:11:c1:bf:5c:44:
7f:1a:be:2c:37:ee:a1:49:9f:0e:bc:3c:35:a9:22:
71:6e:da:4f:e5:03:86:73:0b:13:95:9c:00:20:d4:
18:07:e3:4a:ef:33:1f:95:34:1c:0f:f3:80:67:99:
79:5d:19:8b:7c:1e:dd:54:c7:40:93:ce:0a:5a:52:
f4:85:da:bc:5f:31:31:8e:2f:91:8b:54:e9:a9:a0:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:96:4B:2A:6F:B6:1E:EC:81:B3:D4:4C:6D:47:1B:99:BA:29:32:E5
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/FpZLKm-2HuyBs9RMbUcbmbopMuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.162.158.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d6:5b:dd:f4:cb:a5:ae:a7:7d:f6:d8:4d:9d:39:e2:53:ea:
33:69:7b:f7:be:52:80:17:02:f2:0c:d0:4c:7e:32:f4:23:1e:
57:dc:c0:5d:5f:db:77:92:25:37:33:db:1f:13:77:0a:dc:96:
c4:a8:e7:09:33:2d:e4:e8:5c:0e:2a:26:dc:9d:5f:38:0e:0f:
8a:24:4c:f6:ab:a2:5b:7c:d1:f6:2e:81:18:9f:61:39:0b:f9:
7a:ad:4a:b4:56:21:ac:e9:cf:82:32:b6:79:25:b2:fa:3e:7a:
e2:80:03:42:d6:17:27:64:b2:7a:ba:dc:d9:f4:b4:3f:d5:fb:
38:e0:a1:47:d0:ea:6a:8c:c3:9c:a7:c2:82:cb:fe:86:92:e3:
64:49:b5:0e:e8:b9:3c:29:86:12:a4:c5:6f:3f:1f:da:56:7b:
9f:bf:21:ab:ed:0c:f0:cc:1d:20:1b:39:ee:08:c9:c2:95:1f:
2a:40:9c:09:23:af:d9:41:b3:cf:09:91:ff:d1:90:f4:d4:da:
dd:62:40:ea:82:53:d0:2e:d8:68:e5:14:11:a9:fb:c6:81:8f:
1a:ff:5c:21:a3:2c:73:4d:2a:2d:db:c4:39:13:aa:06:4b:69:
8f:c6:0c:b3:ca:09:ff:2c:60:16:80:fb:eb:26:cb:53:73:e7:
c4:ee:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:01 2026 by rpki-client