Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/7c3549-5a55-4de8-a8e0-01d6ca14e3c4/1/FrqBb5Pbg-oIym1Uf7rnSdHjYBQ.roa
File: FrqBb5Pbg-oIym1Uf7rnSdHjYBQ.roa (raw, json)
Hash identifier: CC6eeJ1X5oM8b9JHjCGpo8kFJ00fVO5gB5UZiqIPkX4=
Subject key identifier: 16:BA:81:6F:93:DB:83:EA:08:CA:6D:54:7F:BA:E7:49:D1:E3:60:14
Certificate issuer: /CN=652a659927a3e79b8d1fe59e343c6d89c05cad8a
Certificate serial: 01A11BA2E1BC5639F4C4ACA5223202A0FB04
Authority key identifier: 65:2A:65:99:27:A3:E7:9B:8D:1F:E5:9E:34:3C:6D:89:C0:5C:AD:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSplmSej55uNH-WeNDxticBcrYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7c3549-5a55-4de8-a8e0-01d6ca14e3c4/1/FrqBb5Pbg-oIym1Uf7rnSdHjYBQ.roa
Signing time: Thu 08 Oct 2026 13:10:21 +0000
ROA not before: Thu 08 Oct 2026 13:10:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5610
IP address blocks: 193.84.12.0/22 maxlen: 22
193.84.12.0/23 maxlen: 23
193.84.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7c3549-5a55-4de8-a8e0-01d6ca14e3c4/1/ZSplmSej55uNH-WeNDxticBcrYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7c3549-5a55-4de8-a8e0-01d6ca14e3c4/1/ZSplmSej55uNH-WeNDxticBcrYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSplmSej55uNH-WeNDxticBcrYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:a2:e1:bc:56:39:f4:c4:ac:a5:22:32:02:a0:fb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652a659927a3e79b8d1fe59e343c6d89c05cad8a
Validity
Not Before: Oct 8 13:10:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16ba816f93db83ea08ca6d547fbae749d1e36014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:85:b5:c0:71:97:df:f5:5d:04:26:43:e1:
bd:c1:c5:d0:ac:1d:eb:db:83:61:8e:ef:16:cd:a8:
d0:58:35:45:0b:02:1b:e2:1a:30:2c:57:0d:68:19:
2b:98:cf:3c:c9:6c:14:40:b9:39:6b:26:ac:0e:81:
fd:13:d1:8e:8a:26:b4:7e:ad:3d:27:ae:03:77:c8:
e6:ba:73:e6:02:5a:1f:ea:ec:41:74:1c:4b:73:e2:
a0:15:70:e6:ed:8d:79:31:40:85:fe:5b:15:72:25:
b9:10:f5:37:a4:38:9d:a4:69:2f:5f:c3:0f:6e:3d:
5b:4b:c9:25:e0:f1:b0:b7:1d:76:3a:bb:a8:38:13:
e6:a7:24:71:49:5a:e6:0e:30:28:6e:a2:82:fd:e6:
e5:97:73:b8:49:f0:6f:44:eb:8e:94:66:49:44:c5:
d3:6c:23:1b:ee:d1:87:4e:cf:50:02:ff:21:20:92:
d9:3a:3c:4a:9c:89:97:3a:c0:e1:d8:09:64:cc:01:
5a:40:2f:b2:a0:7f:77:0c:32:39:fb:07:06:fb:6c:
61:ea:c5:56:19:6d:6e:0b:62:3b:12:5d:0a:af:32:
37:45:65:0b:4b:5f:98:1f:6f:91:59:8d:f8:54:ef:
37:03:70:dc:18:64:c0:86:c9:0e:e3:35:08:f3:7f:
36:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BA:81:6F:93:DB:83:EA:08:CA:6D:54:7F:BA:E7:49:D1:E3:60:14
X509v3 Authority Key Identifier:
keyid:65:2A:65:99:27:A3:E7:9B:8D:1F:E5:9E:34:3C:6D:89:C0:5C:AD:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSplmSej55uNH-WeNDxticBcrYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7c3549-5a55-4de8-a8e0-01d6ca14e3c4/1/FrqBb5Pbg-oIym1Uf7rnSdHjYBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7c3549-5a55-4de8-a8e0-01d6ca14e3c4/1/ZSplmSej55uNH-WeNDxticBcrYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.12.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:1e:d4:62:ef:00:9f:e9:10:b7:64:6f:7a:c0:75:c0:8c:be:
94:f9:f1:3b:2c:c1:13:55:9b:19:65:b6:2a:af:39:4d:73:4e:
ee:db:b5:70:1b:a9:13:16:18:13:9c:b6:a9:aa:d7:8d:33:96:
cb:5f:38:96:c7:b0:e8:3c:e7:fb:45:02:b5:d1:dd:40:25:9b:
23:f7:19:2d:ce:a7:62:9f:4b:ee:4d:e1:36:33:45:b0:9f:93:
15:18:08:b4:cc:61:69:5a:65:65:71:ca:c8:05:6f:5f:c7:e5:
6e:08:e2:9c:2d:f2:55:d7:6e:09:e2:0d:41:7b:74:7f:8d:37:
06:a7:22:f8:4a:e4:be:77:ab:f1:37:e7:07:f8:5a:ef:5e:3c:
4a:07:a2:f2:94:41:65:b5:0c:f2:7d:93:92:84:76:ef:d4:aa:
0f:9d:23:4d:09:3d:19:bd:bf:30:bc:14:37:a9:a8:62:b7:5f:
1c:5f:4a:5a:67:90:12:c2:fc:b5:97:d3:63:d8:2a:0d:24:77:
9c:b3:58:f3:17:26:f8:04:22:b8:e1:23:2a:3d:a2:bb:de:d1:
54:c2:67:4b:af:a0:dd:d5:f8:86:c8:33:fe:bf:fe:9b:8e:2f:
b9:8a:dc:e6:af:24:ed:05:89:c5:4a:b0:f4:61:13:b7:e4:8c:
63:14:df:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:42:41 2026 by rpki-client