Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/8b1feb-ef43-4dbf-9ede-8ec0250bf9dd/1/pEX_FQo31r7RkPhq4wC_ZykaNOE.roa
File: pEX_FQo31r7RkPhq4wC_ZykaNOE.roa (raw, json)
Hash identifier: 9SfawN5THYUSdAON+YTv8IvJdJ6gD8bcU3/siyGzH9o=
Subject key identifier: A4:45:FF:15:0A:37:D6:BE:D1:90:F8:6A:E3:00:BF:67:29:1A:34:E1
Certificate issuer: /CN=fa084100276eb71b54b05754f282396f254c2959
Certificate serial: 01A01FD4B0C30B46281F943DE60272155973
Authority key identifier: FA:08:41:00:27:6E:B7:1B:54:B0:57:54:F2:82:39:6F:25:4C:29:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ghBACdutxtUsFdU8oI5byVMKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/8b1feb-ef43-4dbf-9ede-8ec0250bf9dd/1/pEX_FQo31r7RkPhq4wC_ZykaNOE.roa
Signing time: Thu 20 Aug 2026 15:40:27 +0000
ROA not before: Thu 20 Aug 2026 15:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198880
IP address blocks: 91.240.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/8b1feb-ef43-4dbf-9ede-8ec0250bf9dd/1/1-ghBACdutxtUsFdU8oI5byVMKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/8b1feb-ef43-4dbf-9ede-8ec0250bf9dd/1/1-ghBACdutxtUsFdU8oI5byVMKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ghBACdutxtUsFdU8oI5byVMKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:d4:b0:c3:0b:46:28:1f:94:3d:e6:02:72:15:59:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa084100276eb71b54b05754f282396f254c2959
Validity
Not Before: Aug 20 15:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a445ff150a37d6bed190f86ae300bf67291a34e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:a7:16:b2:54:4d:18:99:08:6d:1f:12:3f:
f8:3c:b6:2a:f5:3a:ac:25:ee:9d:d0:c8:2e:8d:b8:
e0:47:bc:be:2d:30:4d:85:99:cd:ae:18:e9:c4:af:
00:bf:37:3a:a5:c6:ee:81:44:f8:3d:4a:27:eb:49:
a8:07:6b:c6:18:af:c5:d1:48:d7:88:3c:5b:81:fa:
94:06:40:67:74:86:b8:50:cc:a9:7c:40:80:af:12:
6b:48:af:1d:f9:5f:3e:df:aa:4d:9f:eb:65:ce:06:
80:a2:ef:fe:f9:bf:2b:55:26:29:eb:31:cd:00:7c:
30:92:32:92:a6:53:ba:98:57:7f:df:43:09:40:d8:
51:f0:28:db:8b:c2:19:10:c7:20:5d:19:24:9f:37:
37:d8:a8:24:fd:9f:80:1d:f4:b9:58:77:bf:70:b2:
25:98:60:9c:fa:57:f9:a6:3f:34:64:64:87:b0:96:
d8:12:9b:03:d6:4b:32:66:38:6c:e0:1e:f6:4f:ea:
80:04:95:e1:23:6f:e7:5d:40:7d:32:be:ed:ee:c6:
d6:50:8c:7c:a0:6b:f3:cc:0b:1b:49:f5:a1:e1:ef:
6d:f8:a4:56:b2:d0:4f:d0:aa:6d:c9:34:ac:91:a1:
8e:b5:68:cd:a1:cd:62:e7:c3:76:f9:ee:ca:ae:54:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:45:FF:15:0A:37:D6:BE:D1:90:F8:6A:E3:00:BF:67:29:1A:34:E1
X509v3 Authority Key Identifier:
keyid:FA:08:41:00:27:6E:B7:1B:54:B0:57:54:F2:82:39:6F:25:4C:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ghBACdutxtUsFdU8oI5byVMKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8b1feb-ef43-4dbf-9ede-8ec0250bf9dd/1/pEX_FQo31r7RkPhq4wC_ZykaNOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8b1feb-ef43-4dbf-9ede-8ec0250bf9dd/1/1-ghBACdutxtUsFdU8oI5byVMKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:0a:ab:59:40:57:5a:80:56:ad:85:7d:61:22:08:64:85:42:
8c:a8:90:0d:30:23:22:64:4a:20:bc:ef:fb:d0:8d:4b:53:28:
97:ed:57:41:ae:aa:d0:3a:29:db:73:1a:55:43:9c:f9:cc:4e:
a7:d1:7c:d8:42:00:85:64:58:1c:f1:09:89:20:81:99:69:a0:
28:53:92:97:d1:99:03:2e:35:e7:ed:9d:a6:cd:f8:1e:18:ee:
15:a5:cc:6c:0e:51:c6:78:6c:1e:44:0a:9e:35:b3:0e:d1:4a:
42:80:22:98:8f:12:2c:6c:ba:91:5c:8b:dd:e5:c1:d9:1c:ef:
83:ce:8a:4e:1b:3f:a0:86:c5:91:55:2d:5e:6d:ea:7b:f9:db:
e0:85:03:bb:2a:68:9a:bb:52:b8:3b:0d:dc:68:d2:29:38:35:
df:dd:56:4c:fd:f2:e5:94:e8:fa:bc:d7:98:6a:93:27:02:3a:
fd:46:91:e9:db:3c:e4:e6:7f:d6:1e:d6:b6:4c:37:f0:74:d5:
65:cb:ab:d1:3f:61:7a:08:13:0c:d1:9a:de:76:be:c6:fb:7c:
cd:9a:4e:90:37:89:04:99:af:63:d1:5c:4f:40:bb:61:38:70:
e5:51:31:e6:6d:1b:c4:4b:fc:6c:fe:ae:01:4b:86:60:4c:5d:
43:c6:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:36:56 2026 by rpki-client