Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/ffhG675LxT4v_xcW5mh9Hi7IP8Q.roa
File: ffhG675LxT4v_xcW5mh9Hi7IP8Q.roa (raw, json)
Hash identifier: /FzWd2pt+DEuzLd5wcBEXjk1TadHeD7SzgdDiUmqFKQ=
Subject key identifier: 7D:F8:46:EB:BE:4B:C5:3E:2F:FF:17:16:E6:68:7D:1E:2E:C8:3F:C4
Certificate issuer: /CN=227994b66f9fd67c175e343c62aee6077cd4245f
Certificate serial: 01A0CE3B0904EF0020038DDD7CD77DFA1609
Authority key identifier: 22:79:94:B6:6F:9F:D6:7C:17:5E:34:3C:62:AE:E6:07:7C:D4:24:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/ffhG675LxT4v_xcW5mh9Hi7IP8Q.roa
Signing time: Wed 23 Sep 2026 12:26:10 +0000
ROA not before: Wed 23 Sep 2026 12:26:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 129.101.96.0/20 maxlen: 32
129.101.112.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:3b:09:04:ef:00:20:03:8d:dd:7c:d7:7d:fa:16:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227994b66f9fd67c175e343c62aee6077cd4245f
Validity
Not Before: Sep 23 12:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7df846ebbe4bc53e2fff1716e6687d1e2ec83fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:9c:b9:f7:e7:58:16:30:f6:56:0d:1d:5a:
7b:82:a3:e2:92:8e:7b:d0:41:58:06:e1:cd:cc:c6:
c8:4e:cd:3e:fb:98:8f:2d:fc:c8:36:11:22:48:72:
08:26:e5:79:16:72:55:28:1e:00:65:94:8e:c6:c5:
3c:37:29:08:00:91:fa:e8:2a:da:9d:99:bb:3f:ae:
4d:25:b5:2e:7e:ed:b0:90:30:cb:4b:0b:30:b9:45:
a9:7b:78:2c:d1:71:19:39:bb:16:ad:21:fc:69:42:
41:77:da:25:89:73:c4:69:ce:ab:b1:c3:f0:1d:12:
ed:be:94:ef:da:8e:ce:66:f1:12:1e:df:93:67:9e:
d9:99:1a:cf:e3:d5:09:bc:d9:08:a6:e4:01:2a:98:
00:bb:43:f4:cc:63:37:51:d4:fa:95:57:27:ae:b2:
59:a3:8c:b8:a3:1d:d3:62:e1:27:f1:92:5a:57:bc:
e7:71:8b:03:90:51:7d:fd:05:98:05:f9:3c:c5:8e:
1a:90:6a:8e:d9:7c:9b:77:72:77:d6:df:07:c4:0c:
17:57:c5:94:fe:dc:3d:b9:05:43:b1:dd:dc:fa:be:
9a:05:45:a9:ff:fc:45:1b:b7:45:c1:15:d6:b4:84:
23:16:a8:44:f7:1a:d9:73:44:80:5c:82:53:0a:38:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F8:46:EB:BE:4B:C5:3E:2F:FF:17:16:E6:68:7D:1E:2E:C8:3F:C4
X509v3 Authority Key Identifier:
keyid:22:79:94:B6:6F:9F:D6:7C:17:5E:34:3C:62:AE:E6:07:7C:D4:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/ffhG675LxT4v_xcW5mh9Hi7IP8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.101.96.0-129.101.119.255
Signature Algorithm: sha256WithRSAEncryption
50:5b:52:2a:dd:20:d4:b5:44:2c:7b:bc:76:27:15:13:46:c4:
41:46:6e:a1:23:b1:49:88:c8:66:73:4c:e1:f4:85:2a:fb:a1:
1d:78:f9:8d:c5:55:32:ac:c7:67:17:3e:21:bb:c5:0d:3a:6c:
31:f0:ff:29:65:27:6d:42:58:58:92:2f:03:44:22:bd:1b:59:
9e:b7:52:52:76:f6:e1:75:14:17:cd:a5:65:6c:3f:a8:27:72:
3f:f0:f0:b2:09:4b:d2:78:93:ed:52:7b:d6:3f:11:2c:cb:9e:
54:ef:19:9e:cf:1a:15:39:5a:e0:30:a4:a5:c5:2f:8f:24:76:
80:3a:77:f7:fd:9e:a4:30:10:ce:07:9e:2c:41:1e:ab:ae:00:
f7:75:b8:5c:20:1a:41:9d:2f:05:fb:75:c2:50:83:d7:6f:dd:
10:4a:a2:4d:e5:6f:a2:0b:03:84:d8:11:68:b9:ef:7b:68:0f:
65:32:92:27:a8:a4:59:02:2a:2e:1d:22:4a:74:e7:52:95:db:
17:b1:4a:3e:eb:bd:72:2e:24:74:7b:49:15:be:e4:dd:45:80:
c3:ff:5d:a8:74:e1:fd:30:8e:2b:48:f4:f4:c0:ed:cb:9e:28:
ea:b1:4d:e6:77:11:21:28:86:ac:94:4f:5a:5b:45:3b:bc:11:
de:69:d9:ad
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaDOOwkE7wAgA43dfNd9+hYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNzk5NGI2NmY5ZmQ2N2MxNzVlMzQzYzYyYWVlNjA3N2Nk
NDI0NWYwHhcNMjYwOTIzMTIyNjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGY4NDZlYmJlNGJjNTNlMmZmZjE3MTZlNjY4N2QxZTJlYzgzZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1CcuffnWBYw9lYNHVp7gqPiko57
0EFYBuHNzMbITs0++5iPLfzINhEiSHIIJuV5FnJVKB4AZZSOxsU8NykIAJH66Cra
nZm7P65NJbUufu2wkDDLSwswuUWpe3gs0XEZObsWrSH8aUJBd9oliXPEac6rscPw
HRLtvpTv2o7OZvESHt+TZ57ZmRrP49UJvNkIpuQBKpgAu0P0zGM3UdT6lVcnrrJZ
o4y4ox3TYuEn8ZJaV7zncYsDkFF9/QWYBfk8xY4akGqO2Xybd3J31t8HxAwXV8WU
/tw9uQVDsd3c+r6aBUWp//xFG7dFwRXWtIQjFqhE9xrZc0SAXIJTCjimDQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFH34Ruu+S8U+L/8XFuZofR4uyD/EMB8GA1UdIwQY
MBaAFCJ5lLZvn9Z8F140PGKu5gd81CRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW5tVXRtLWYxbndYWGpROFlxN21CM3pVSkY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjE5NmEtMDcwNC00YTRjLTllMWEt
ZGE1MTJmYjlkMTJhLzEvZmZoRzY3NUx4VDR2X3hjVzVtaDlIaTdJUDhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mYjE5NmEtMDcwNC00YTRjLTllMWEtZGE1MTJmYjlkMTJh
LzEvSW5tVXRtLWYxbndYWGpROFlxN21CM3pVSkY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWBZWAD
BAOBZXAwDQYJKoZIhvcNAQELBQADggEBAFBbUirdINS1RCx7vHYnFRNGxEFGbqEj
sUmIyGZzTOH0hSr7oR14+Y3FVTKsx2cXPiG7xQ06bDHw/yllJ21CWFiSLwNEIr0b
WZ63UlJ29uF1FBfNpWVsP6gncj/w8LIJS9J4k+1Se9Y/ESzLnlTvGZ7PGhU5WuAw
pKXFL48kdoA6d/f9nqQwEM4HnixBHquuAPd1uFwgGkGdLwX7dcJQg9dv3RBKok3l
b6ILA4TYEWi573toD2UykieopFkCKi4dIkp051KV2xexSj7rvXIuJHR7SRW+5N1F
gMP/Xah04f0wjitI9PTA7cueKOqxTeZ3ESEohqyUT1pbRTu8Ed5p2a0=
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:01:36 2026 by rpki-client