Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/FoGUD06rd_TJRHfW1oj5Vtj-B-g.roa
File: FoGUD06rd_TJRHfW1oj5Vtj-B-g.roa (raw, json)
Hash identifier: UxU+4uV4Z9ZA8Y6eecKhAE8WlpQOigi0vkJ1j/lhlTY=
Subject key identifier: 16:81:94:0F:4E:AB:77:F4:C9:44:77:D6:D6:88:F9:56:D8:FE:07:E8
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019ED5EAB25C19B26EEA4D7CA3BF89D10BC5
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/FoGUD06rd_TJRHfW1oj5Vtj-B-g.roa
Signing time: Wed 17 Jun 2026 14:09:48 +0000
ROA not before: Wed 17 Jun 2026 14:09:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219415
IP address blocks: 78.128.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:ea:b2:5c:19:b2:6e:ea:4d:7c:a3:bf:89:d1:0b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jun 17 14:09:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1681940f4eab77f4c94477d6d688f956d8fe07e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:10:9c:cf:75:da:d7:0f:21:40:59:8a:b3:
5d:b1:68:a8:54:43:11:89:d1:24:02:2f:91:3b:42:
5e:c1:c9:f9:2f:03:29:d5:eb:7f:33:4c:fc:c5:44:
bd:81:8c:09:9f:2f:7a:1d:d7:0a:ac:47:98:40:50:
c8:b9:48:39:03:41:1b:75:63:65:35:11:ac:8d:9f:
f9:26:2d:8f:c1:9e:10:f8:bd:b5:74:e6:fd:d7:00:
65:fd:56:4e:28:59:a8:dd:6e:9b:34:7d:55:13:9e:
87:c0:06:c6:df:92:1c:ed:6e:b8:8f:9f:f2:41:df:
96:ee:df:9b:74:65:89:33:39:84:48:3d:64:22:2d:
4c:82:c9:f6:33:2a:66:a3:ad:a4:ae:9e:7b:ca:c1:
d2:ed:b8:18:a7:e0:a9:e2:a6:17:52:cd:4d:69:50:
98:7e:cb:4a:e5:0e:46:e4:69:f5:50:d5:a2:0a:07:
cd:71:fa:22:74:34:5b:c4:b6:f7:b5:26:46:c4:f3:
8b:66:b9:8d:65:1e:3d:ce:f9:f0:22:58:7b:92:00:
3c:70:b8:93:c8:b6:4a:67:73:7c:57:97:42:9a:56:
3d:9d:84:6e:ba:fb:da:27:04:fe:bd:fe:e7:ca:c6:
49:94:25:17:71:9a:fa:e3:d4:fb:18:92:83:d9:a9:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:81:94:0F:4E:AB:77:F4:C9:44:77:D6:D6:88:F9:56:D8:FE:07:E8
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/FoGUD06rd_TJRHfW1oj5Vtj-B-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.104.0/24
Signature Algorithm: sha256WithRSAEncryption
60:4d:e4:81:48:be:e0:44:05:fc:35:31:ef:96:32:b2:83:43:
57:e2:d6:ee:88:7b:16:b1:88:e3:dc:26:ab:6a:3b:9d:38:b6:
88:1c:9c:19:d2:77:42:79:bb:bb:30:68:95:1e:7d:69:b5:54:
3e:a9:eb:09:da:6c:c8:54:fa:e9:ab:80:66:c6:99:5f:b8:ce:
ab:54:f0:b1:93:09:0d:f3:d7:85:f0:50:6f:ca:32:cc:9d:41:
b0:ac:f0:ce:56:dc:a0:12:fc:54:40:d7:a2:e9:06:54:cb:6c:
e3:60:b9:44:6e:19:2d:ef:17:16:81:78:2b:b3:ad:84:93:8d:
e0:fc:9f:0a:0b:eb:ea:51:bf:f0:ef:69:9c:a7:1d:e7:15:6a:
3f:85:d5:3f:e1:f2:6a:13:a1:18:a2:c7:82:d7:18:8c:4e:b6:
a6:02:49:42:d4:df:ac:0d:22:b2:f7:68:00:78:b5:a6:aa:59:
c4:52:b7:6d:cd:aa:51:52:93:c6:6e:43:7f:ab:a6:4d:72:e4:
21:c7:31:91:72:92:ea:e3:9b:35:84:c3:b2:3f:7f:eb:98:5d:
5a:02:7b:f4:29:d5:45:c2:3f:f2:59:e8:3c:e0:e3:26:52:c6:
89:60:ed:15:ff:e1:c4:b3:1b:51:39:77:35:04:27:b5:c3:1a:
08:80:14:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:54 2026 by rpki-client