Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/FuaYYjgBfEQcCzdt3IfIOZHBF18.roa
File: FuaYYjgBfEQcCzdt3IfIOZHBF18.roa (raw, json)
Hash identifier: lZIUFdAbzhx1VS24I+2a5RfR2Jz8EjNumHCTBfayC3U=
Subject key identifier: 16:E6:98:62:38:01:7C:44:1C:0B:37:6D:DC:87:C8:39:91:C1:17:5F
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 019DEE68F75A3B989313860D39F163445533
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/FuaYYjgBfEQcCzdt3IfIOZHBF18.roa
Signing time: Sun 03 May 2026 15:15:49 +0000
ROA not before: Sun 03 May 2026 15:15:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51714
IP address blocks: 2a09:ff00:103::/48 maxlen: 48
2a09:ff00:300::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:68:f7:5a:3b:98:93:13:86:0d:39:f1:63:44:55:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: May 3 15:15:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16e6986238017c441c0b376ddc87c83991c1175f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:2e:6a:63:ea:e3:1c:1a:5c:43:68:c2:f3:
d3:1f:7d:29:a4:af:f7:83:7c:a8:49:5f:b9:ce:66:
60:07:3f:26:03:84:34:26:57:17:fb:0c:b5:24:94:
76:4b:60:3f:0c:24:54:8d:7f:17:1a:ad:3b:bb:5a:
47:09:11:23:a2:51:d4:9a:2b:6a:e5:19:d0:2d:c8:
9a:49:7c:87:8e:88:d1:52:26:bc:81:cf:e3:f2:27:
1f:4a:79:90:f7:8d:20:27:35:6a:1d:43:31:1c:63:
91:da:82:97:fe:8b:50:f7:0c:9c:b8:ba:03:5f:0c:
ab:86:42:a4:85:b5:80:0e:59:bc:34:a6:9b:18:d5:
fd:b0:2b:d0:de:06:29:67:0a:c0:8c:4a:68:70:86:
46:e3:c2:40:80:7c:f5:6b:03:2d:0c:00:b4:ad:88:
fc:20:17:76:a5:a7:b6:39:2b:b3:2c:a1:86:9f:6b:
e6:4d:7a:39:43:d9:c9:c4:23:07:3e:f5:fc:08:ee:
cf:9c:de:73:e9:ff:9f:59:fd:cd:6c:4f:55:d4:3e:
27:7c:d5:24:95:7d:44:e0:80:b3:ca:2c:a1:df:ed:
32:4c:7a:b5:12:8d:7e:45:78:f7:73:97:21:2f:ae:
aa:9b:39:5c:dd:b1:d9:2c:ee:e6:e1:fe:8b:9c:5f:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E6:98:62:38:01:7C:44:1C:0B:37:6D:DC:87:C8:39:91:C1:17:5F
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/FuaYYjgBfEQcCzdt3IfIOZHBF18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:ff00:103::/48
2a09:ff00:300::/44
Signature Algorithm: sha256WithRSAEncryption
0a:fe:ff:f1:50:3a:b0:ae:10:02:4b:57:a5:57:a1:55:4f:0a:
cd:a8:1b:be:7e:bb:8d:2f:0d:f2:7c:59:99:59:cf:c2:fa:c2:
70:89:a3:fb:e5:24:e5:e8:64:8c:ef:db:88:93:44:75:f4:ae:
fa:de:cc:70:56:3a:59:9f:a1:f2:2d:ea:1b:e2:fd:d9:3b:bf:
57:eb:f7:ff:70:f6:4a:6a:13:9f:e0:f2:c4:0f:62:c6:7e:92:
bf:19:5d:5a:22:13:30:f0:02:2b:b0:3f:ae:21:d9:d8:1f:c4:
ef:5f:7b:ef:3e:c6:6a:d4:db:dc:17:b4:c9:73:56:9b:a2:2d:
03:69:4e:da:5a:54:2b:25:12:d4:d6:e8:fc:14:c3:b3:ff:33:
04:bb:1c:cb:9e:f1:b2:9d:10:b7:51:c3:02:5f:d1:de:cd:7b:
42:33:1d:55:f1:90:fc:23:eb:49:c6:0c:79:f6:79:52:14:9c:
d9:40:91:7c:03:69:56:55:b2:69:53:41:e3:cb:52:5b:82:e3:
36:07:35:cc:67:8a:fd:5d:5e:14:e0:a0:61:16:41:b1:79:ef:
ef:28:6a:b0:ce:75:17:6a:68:87:38:4f:10:11:3a:31:b1:a8:
4b:b7:dc:38:35:bb:eb:40:06:b2:ce:de:b5:e8:1f:7a:e3:40:
a9:ec:62:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:39 2026 by rpki-client