Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/fv3wDoK7gubD7F2uUC9fFAWmbnc.roa
File: fv3wDoK7gubD7F2uUC9fFAWmbnc.roa (raw, json)
Hash identifier: GcX1nVNQAG4e2hwyiI/mDoRhGMnl7k3faogXbsq5XU0=
Subject key identifier: 7E:FD:F0:0E:82:BB:82:E6:C3:EC:5D:AE:50:2F:5F:14:05:A6:6E:77
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A163F5FAB2746DF4F6285A65F40533F424
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/fv3wDoK7gubD7F2uUC9fFAWmbnc.roa
Signing time: Thu 22 Oct 2026 14:13:47 +0000
ROA not before: Thu 22 Oct 2026 14:13:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 200.96.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:f5:fa:b2:74:6d:f4:f6:28:5a:65:f4:05:33:f4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Oct 22 14:13:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7efdf00e82bb82e6c3ec5dae502f5f1405a66e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:e8:0b:4d:8a:2d:51:55:70:5b:0b:80:d9:
86:58:4a:f0:28:01:c3:7c:6b:09:d1:3b:d0:45:4b:
a7:e8:cb:8e:ff:fb:56:92:e5:92:07:0f:b5:a6:54:
af:4f:ec:03:cf:9a:d9:67:ac:48:69:b2:7d:0e:26:
53:c6:cd:98:16:7b:82:b9:da:fd:a8:a7:13:24:23:
83:35:29:09:e2:5e:40:36:69:0d:ea:d4:42:f5:c2:
5d:8a:5a:57:8d:e9:de:2f:36:02:00:e7:3d:4b:1c:
cd:ed:6d:f7:53:43:97:ab:c8:fe:0f:02:7d:4d:dd:
81:c8:49:e0:2e:ab:63:9b:32:4d:7c:9c:42:6e:71:
7c:32:91:94:84:6c:e6:30:33:ab:12:94:ee:f4:c2:
53:27:f5:a3:a9:4c:15:ba:b4:3b:df:8a:69:f2:b8:
34:9d:90:99:f3:8c:e6:b2:95:a9:55:2f:68:ca:59:
cb:1d:c5:45:f7:0b:dd:88:29:17:3c:3d:82:3e:a0:
5d:a8:3e:cb:2c:6a:61:99:55:02:1d:85:a6:2d:12:
c3:9d:49:7f:da:67:cc:38:38:1c:91:58:08:75:cc:
86:5a:d9:2a:4a:1c:d0:8d:6d:ad:10:4a:4a:05:fd:
b5:b2:e7:da:ac:ec:ac:1f:f6:6a:1b:4b:af:f7:58:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FD:F0:0E:82:BB:82:E6:C3:EC:5D:AE:50:2F:5F:14:05:A6:6E:77
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/fv3wDoK7gubD7F2uUC9fFAWmbnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.96.107.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a6:7b:5f:8d:ce:57:12:9c:d2:a4:b1:eb:44:d8:ac:fd:27:
1a:70:ee:20:fd:49:b1:48:d3:c8:cc:7d:17:df:04:2b:1b:59:
81:2a:b9:e8:c8:56:ce:40:0e:3a:b2:d3:31:33:87:ef:8d:eb:
d8:c2:4e:f0:3a:e2:78:47:ec:e8:6d:84:0c:45:65:5e:96:5e:
20:1d:ec:51:77:da:ca:20:ae:ee:31:f3:8b:22:50:19:e2:a1:
37:68:a0:27:ae:94:34:94:26:c6:62:04:a4:95:d7:89:eb:43:
17:15:38:6d:34:25:40:53:a7:0e:7c:b1:f7:04:53:c0:a8:9c:
6f:9e:fd:8f:b5:1b:ba:49:12:00:80:d6:ef:52:05:5d:16:0c:
6c:b4:41:db:62:4e:c2:52:55:aa:ba:1e:50:c5:9d:a2:95:50:
b5:95:4d:e3:fb:c9:eb:96:a2:fe:8a:1c:e2:16:e5:57:16:cf:
78:ff:1d:80:c3:22:a3:fe:0b:98:6e:60:63:01:f3:5d:e8:2f:
f8:72:17:d7:ef:e1:32:4f:fd:81:37:3b:6f:f8:2c:71:fb:16:
e7:f7:86:6c:ce:9f:3f:34:00:20:b3:f9:5d:97:30:e4:bc:c0:
80:5f:c4:90:c0:d6:18:4f:49:dd:38:7b:76:d5:fd:ac:88:f8:
19:b6:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:23:06 2026 by rpki-client