Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/FR_oKwdjBubCIyT2P1UWZ-MNAKY.roa
File: FR_oKwdjBubCIyT2P1UWZ-MNAKY.roa (raw, json)
Hash identifier: y10sjjs5/ERmuMRrsh5dgSMUXVGeBqMRYorQt8kIZ/c=
Subject key identifier: 15:1F:E8:2B:07:63:06:E6:C2:23:24:F6:3F:55:16:67:E3:0D:00:A6
Certificate issuer: /CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
Certificate serial: 01A0CD6CFD3749B993E8F792E5EDDB682A7A
Authority key identifier: 3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/FR_oKwdjBubCIyT2P1UWZ-MNAKY.roa
Signing time: Wed 23 Sep 2026 08:41:07 +0000
ROA not before: Wed 23 Sep 2026 08:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25563
IP address blocks: 92.43.216.0/21 maxlen: 24
185.84.192.0/22 maxlen: 24
2a01:768::/32 maxlen: 48
2a01:769::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:6c:fd:37:49:b9:93:e8:f7:92:e5:ed:db:68:2a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
Validity
Not Before: Sep 23 08:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=151fe82b076306e6c22324f63f551667e30d00a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:e7:73:98:20:ff:cc:b5:72:cf:19:9c:eb:
8f:5c:21:f8:d7:39:46:16:ec:bd:1e:ff:a0:07:99:
28:f8:aa:03:d4:83:a8:c7:d0:16:45:d5:bd:c4:27:
c8:18:09:b0:0a:d0:32:c5:c9:e7:78:b9:92:a0:c9:
16:2b:29:f3:96:a8:58:b7:6a:2c:d2:f6:05:fe:c5:
99:02:06:36:b4:62:93:26:65:c5:c6:1d:11:8c:56:
01:c9:85:6b:b4:1a:81:d4:e9:b0:68:95:af:59:d9:
d2:a7:7b:90:0e:70:53:8c:97:be:8f:fb:cb:2f:67:
9d:8a:c9:80:9e:5f:65:85:98:b5:0a:9d:3d:b7:00:
75:1c:db:80:72:68:06:12:fc:78:89:24:cc:59:6b:
0e:74:e6:5d:62:d0:79:94:9a:de:5c:b3:63:af:16:
7d:77:94:bc:ac:1d:ef:e1:ce:70:43:d6:29:97:a9:
d4:41:e5:9d:6b:ae:1b:8a:91:de:5e:65:7f:a7:d2:
6d:99:81:dd:b1:81:75:f8:76:ee:00:bd:ac:bb:9e:
a6:aa:b9:bb:77:7a:de:21:7a:d6:51:e7:50:ad:0c:
94:23:61:85:62:40:15:82:78:3c:ee:dc:58:83:fc:
03:62:d4:2d:46:de:b0:ed:76:09:5e:50:77:bb:5d:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1F:E8:2B:07:63:06:E6:C2:23:24:F6:3F:55:16:67:E3:0D:00:A6
X509v3 Authority Key Identifier:
keyid:3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/FR_oKwdjBubCIyT2P1UWZ-MNAKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.216.0/21
185.84.192.0/22
IPv6:
2a01:768::/31
Signature Algorithm: sha256WithRSAEncryption
80:c9:9e:b9:0d:37:81:91:2f:47:4d:29:42:0e:ca:3c:7c:95:
9c:ba:fe:57:ce:95:fd:a1:6f:34:f8:4d:7d:07:e1:c5:57:81:
0d:1a:d1:5c:bf:b4:1e:c1:90:a1:ce:39:e7:fb:5b:9c:8a:c6:
b3:0a:5a:fd:3e:b8:33:cb:a1:4b:a0:12:bd:a5:0c:52:d5:66:
e8:ed:11:ec:b3:8d:9e:7e:28:9f:58:54:d9:3b:b5:db:9b:23:
b6:ad:14:a7:a6:14:c1:aa:d2:52:e8:0d:c2:5e:19:43:8a:d4:
3d:95:44:53:25:8f:36:32:d2:3e:0d:0c:5c:51:6e:54:50:3e:
17:18:d5:76:2e:15:79:f2:ba:f1:fe:e3:91:fe:f5:7a:ec:ab:
75:3b:22:a8:34:1b:7f:85:d4:a4:9f:ce:64:d7:65:31:7c:d0:
54:f0:0f:d5:e5:0b:b2:90:37:11:bd:cc:97:d1:c4:69:25:e8:
38:02:97:8b:5f:d7:c4:b4:b4:11:68:b1:22:8e:ae:14:55:e8:
ec:90:92:c4:24:3b:26:95:6e:f6:1a:d5:26:ba:30:5c:7c:8c:
16:19:a6:ac:76:19:97:aa:9c:69:87:b3:83:f9:2b:4f:4f:95:
71:3a:09:9c:e7:a9:4f:ba:89:57:b2:81:91:5e:ea:8d:3e:92:
61:71:8e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:17:56 2026 by rpki-client