Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/fxWmde1lYpnmv1qlBgUIhStrc-Q.roa
File: fxWmde1lYpnmv1qlBgUIhStrc-Q.roa (raw, json)
Hash identifier: UFn29qENTzIr/39V/CVVG1hMK0bOX75UygEimx6us78=
Subject key identifier: 7F:15:A6:75:ED:65:62:99:E6:BF:5A:A5:06:05:08:85:2B:6B:73:E4
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01A1CF80C7CD5565FBAF5B83215FC33BCC25
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/fxWmde1lYpnmv1qlBgUIhStrc-Q.roa
Signing time: Thu 12 Nov 2026 11:24:45 +0000
ROA not before: Thu 12 Nov 2026 11:24:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 2a04:a5c0::/30 maxlen: 30
2a04:a5c4::/30 maxlen: 30
2a0e:d00::/30 maxlen: 30
2a0e:d04::/30 maxlen: 30
2a12:5a00::/30 maxlen: 30
2a12:5a04::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:80:c7:cd:55:65:fb:af:5b:83:21:5f:c3:3b:cc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 12 11:24:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f15a675ed656299e6bf5aa5060508852b6b73e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c4:3e:ad:32:c6:cc:27:e8:0d:ea:80:17:d6:
8c:d0:38:bc:be:13:0e:0b:f1:20:67:7b:41:e6:47:
10:e9:3e:b6:77:93:11:3f:7f:c9:2c:1f:c0:97:74:
d5:f9:dd:12:21:f3:f4:2a:d0:22:d6:be:37:e7:cb:
57:df:0f:a7:18:06:15:e0:2d:e7:f3:3e:35:fb:ca:
87:56:8c:69:94:1e:27:de:8e:ad:fa:27:da:a9:71:
4e:d4:00:2c:54:cb:3b:c9:07:80:07:2e:34:c3:7c:
c2:34:97:f6:fc:67:1f:fe:5c:1d:dd:be:fa:d1:ce:
1b:a8:cf:af:13:d1:98:cb:d0:66:1f:48:cc:38:d9:
e1:06:4e:ef:02:8b:65:99:6e:e7:17:07:21:e1:b1:
33:9a:f2:9d:b1:63:cc:73:f9:87:48:82:16:04:e8:
4c:26:ad:1a:b2:79:bd:a3:81:b0:4b:68:35:09:23:
46:d0:8b:54:5e:4e:71:e0:fa:44:ae:8f:c9:54:fa:
8e:ff:35:5b:7e:6a:fd:f5:ec:d9:42:3c:05:e5:f4:
fa:4d:9d:8a:af:a8:9d:b0:92:92:83:62:43:f3:a5:
75:47:8f:ec:4a:84:06:e0:82:63:d9:b4:94:15:c2:
5e:0f:73:ef:a3:d2:30:fd:c4:16:8a:85:56:19:ba:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:15:A6:75:ED:65:62:99:E6:BF:5A:A5:06:05:08:85:2B:6B:73:E4
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/fxWmde1lYpnmv1qlBgUIhStrc-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a5c0::/29
2a0e:d00::/29
2a12:5a00::/29
Signature Algorithm: sha256WithRSAEncryption
94:58:bf:86:06:f6:f3:a4:41:f9:e5:b6:95:98:e9:fb:bf:6d:
5d:2f:70:53:b9:27:0e:60:8b:8c:89:58:d9:87:5a:68:88:33:
bd:74:64:a1:99:23:02:1c:22:45:2f:f5:5e:d7:f8:3d:ce:8b:
97:8e:e9:50:73:af:7e:c6:1a:32:c3:72:d2:66:ab:4d:d1:e6:
5c:a0:f2:44:d3:a3:f0:ac:a4:ca:19:3a:1e:ff:33:fa:4c:6e:
55:9f:a3:77:79:1c:6f:24:f5:be:7b:d1:84:5d:3d:5b:cd:16:
01:2d:da:6a:c4:fc:76:c1:79:db:02:4e:8a:15:eb:d2:a2:73:
13:ed:a9:ee:66:3b:84:51:69:1d:22:d3:d8:02:2e:8c:29:c9:
84:30:94:e7:fd:6c:91:e2:3e:b2:f2:ab:79:9c:f2:18:81:bb:
2c:60:29:fb:85:dd:0f:82:0b:f5:09:49:f6:81:85:97:c7:99:
7a:6a:01:7e:b1:61:d3:af:d2:c9:05:0a:50:68:2e:64:0c:bd:
0d:9d:0f:e0:d1:94:17:6a:e6:0f:8b:65:f1:54:43:5d:eb:c8:
ce:10:85:e5:18:1c:98:d3:15:26:1d:b3:ce:e1:8e:70:f9:5d:
e5:91:ea:42:61:a7:95:8e:a8:94:b2:11:f6:ce:87:03:ad:82:
ae:71:76:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:06 2026 by rpki-client