Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/FZtcSlvmXihw5Qq6e3ZWE2XieTY.roa
File: FZtcSlvmXihw5Qq6e3ZWE2XieTY.roa (raw, json)
Hash identifier: KdSHvEwXWSIIzFD6WB2kEm9XNIDRXxM/OD8Fg+qGiXI=
Subject key identifier: 15:9B:5C:4A:5B:E6:5E:28:70:E5:0A:BA:7B:76:56:13:65:E2:79:36
Certificate issuer: /CN=eddb392f49c127fab9529b6871a786885e981930
Certificate serial: 019F23690AE9976CE7EB9783D319625C0C77
Authority key identifier: ED:DB:39:2F:49:C1:27:FA:B9:52:9B:68:71:A7:86:88:5E:98:19:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ds5L0nBJ_q5UptocaeGiF6YGTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/FZtcSlvmXihw5Qq6e3ZWE2XieTY.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208026
IP address blocks: 194.60.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/7ds5L0nBJ_q5UptocaeGiF6YGTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/7ds5L0nBJ_q5UptocaeGiF6YGTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ds5L0nBJ_q5UptocaeGiF6YGTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0a:e9:97:6c:e7:eb:97:83:d3:19:62:5c:0c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddb392f49c127fab9529b6871a786885e981930
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=159b5c4a5be65e2870e50aba7b76561365e27936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:69:dd:49:4c:54:e7:b6:9f:e7:12:93:f1:
18:63:6f:3c:d2:96:5c:74:0c:9c:aa:97:ab:a7:c4:
37:dc:75:c8:c1:d9:ba:99:74:70:51:56:51:e8:9e:
2e:3e:98:4e:de:1b:a5:29:c0:44:3c:fd:a9:35:0a:
77:4a:b1:ea:2a:b4:65:78:ea:aa:5f:74:81:0d:bd:
2e:8c:a5:d6:51:35:17:13:be:4d:99:71:62:05:e3:
49:5b:01:4a:d5:6e:5c:1d:f6:89:0c:ba:6e:81:71:
e9:0c:f8:3b:41:a8:d1:60:52:02:6b:94:c5:72:2e:
37:25:f1:74:8e:0e:ba:88:4e:8b:1d:e6:34:11:78:
29:cb:49:fe:46:50:1f:45:9b:4b:b8:67:e8:c0:db:
92:66:f6:4e:d5:f3:39:11:22:1a:45:c1:08:a9:2f:
2e:e3:62:b6:87:0b:90:15:74:78:b4:50:9c:99:e0:
bd:8d:9a:8e:12:96:dd:73:6b:ec:0f:42:f2:f2:e7:
aa:2f:5b:fa:0a:e3:e9:20:e0:a8:97:ce:fb:85:78:
3c:38:58:a0:d4:eb:f9:5b:d6:13:93:93:1d:42:d1:
fc:0d:41:42:10:c1:c2:2c:4a:73:d6:b3:5e:71:07:
2f:82:1f:de:31:f0:ad:70:78:92:51:ac:d1:b7:27:
56:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9B:5C:4A:5B:E6:5E:28:70:E5:0A:BA:7B:76:56:13:65:E2:79:36
X509v3 Authority Key Identifier:
keyid:ED:DB:39:2F:49:C1:27:FA:B9:52:9B:68:71:A7:86:88:5E:98:19:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ds5L0nBJ_q5UptocaeGiF6YGTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/FZtcSlvmXihw5Qq6e3ZWE2XieTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/7ds5L0nBJ_q5UptocaeGiF6YGTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.112.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:88:65:f7:19:b6:dc:c0:64:3a:b4:7c:6f:73:f8:8b:ba:09:
53:1f:74:ea:bb:34:df:77:9e:b4:d4:82:cb:6b:a8:1b:7e:ef:
4d:b4:02:7a:6e:7e:f4:43:99:63:c0:9d:95:ec:22:24:97:af:
b3:e4:17:70:9d:8e:e6:20:9e:4d:8d:7e:76:31:f7:44:20:f3:
e8:22:df:32:73:e2:fb:5a:ce:9b:b7:03:5b:26:f7:39:db:b4:
9a:a7:fa:54:d9:d2:8a:de:10:4e:72:3c:5d:38:c9:ae:18:89:
7e:fd:a8:b7:e1:ca:ce:e0:0d:b3:31:87:a5:15:ec:b7:95:50:
df:b7:d4:5a:6f:7e:72:8a:40:c8:45:57:30:fc:f8:85:7d:9d:
17:76:26:e3:7c:a4:ce:ce:48:6d:a2:9a:32:67:fa:b1:98:7d:
1e:f9:3b:bc:ab:81:97:d6:5d:0a:f6:49:0b:37:33:de:10:67:
f5:01:2d:f7:5d:4e:a1:a3:84:29:41:2c:37:6e:4a:83:09:98:
39:ea:a4:53:02:63:45:5a:7a:d2:07:de:25:ee:b5:ed:f3:82:
1a:cc:1f:de:57:d1:c6:19:52:cf:d7:2f:ca:7b:3d:0d:d1:aa:
a4:47:98:b2:7a:5e:93:5a:ab:20:d5:15:f2:79:fa:32:b8:32:
68:4f:f5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:59 2026 by rpki-client