Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FKEvPdVmg-HS25725VQpiKFyYJ4.roa
File: FKEvPdVmg-HS25725VQpiKFyYJ4.roa (raw, json)
Hash identifier: qc94+NH8sXv4Fsq5EWq5HmvmUb6H6gCs5DD7aoqveAY=
Subject key identifier: 14:A1:2F:3D:D5:66:83:E1:D2:DB:9E:F6:E5:54:29:88:A1:72:60:9E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A13F19D41A91CD3F571072D8C7AD3E3C70
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FKEvPdVmg-HS25725VQpiKFyYJ4.roa
Signing time: Thu 15 Oct 2026 10:26:59 +0000
ROA not before: Thu 15 Oct 2026 10:26:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 9.247.49.0/24 maxlen: 24
9.247.55.0/24 maxlen: 24
9.247.57.0/24 maxlen: 24
9.247.59.0/24 maxlen: 24
9.247.61.0/24 maxlen: 24
9.247.66.0/24 maxlen: 24
9.247.68.0/24 maxlen: 24
9.247.69.0/24 maxlen: 24
9.247.73.0/24 maxlen: 24
9.247.75.0/24 maxlen: 24
9.247.76.0/24 maxlen: 24
9.247.77.0/24 maxlen: 24
9.247.85.0/24 maxlen: 24
9.247.87.0/24 maxlen: 24
9.247.93.0/24 maxlen: 24
9.247.94.0/24 maxlen: 24
9.247.95.0/24 maxlen: 24
9.247.97.0/24 maxlen: 24
9.247.99.0/24 maxlen: 24
9.247.101.0/24 maxlen: 24
9.247.105.0/24 maxlen: 24
9.247.106.0/24 maxlen: 24
9.247.108.0/24 maxlen: 24
9.247.114.0/24 maxlen: 24
9.247.116.0/24 maxlen: 24
9.247.117.0/24 maxlen: 24
9.247.120.0/24 maxlen: 24
9.247.123.0/24 maxlen: 24
9.247.125.0/24 maxlen: 24
9.247.129.0/24 maxlen: 24
9.247.130.0/24 maxlen: 24
9.247.137.0/24 maxlen: 24
9.247.152.0/24 maxlen: 24
9.247.153.0/24 maxlen: 24
9.247.154.0/24 maxlen: 24
9.247.156.0/24 maxlen: 24
9.247.161.0/24 maxlen: 24
9.247.162.0/24 maxlen: 24
9.247.163.0/24 maxlen: 24
9.247.170.0/24 maxlen: 24
9.247.176.0/24 maxlen: 24
9.247.182.0/24 maxlen: 24
9.247.198.0/24 maxlen: 24
9.247.203.0/24 maxlen: 24
9.247.205.0/24 maxlen: 24
9.247.207.0/24 maxlen: 24
9.247.208.0/24 maxlen: 24
9.247.211.0/24 maxlen: 24
9.247.214.0/24 maxlen: 24
9.247.216.0/24 maxlen: 24
9.247.219.0/24 maxlen: 24
9.247.220.0/24 maxlen: 24
9.247.232.0/24 maxlen: 24
9.247.242.0/24 maxlen: 24
9.247.254.0/24 maxlen: 24
78.17.228.0/24 maxlen: 24
78.17.235.0/24 maxlen: 24
78.17.241.0/24 maxlen: 24
78.17.252.0/24 maxlen: 24
78.17.253.0/24 maxlen: 24
78.17.254.0/24 maxlen: 24
206.245.144.0/24 maxlen: 24
206.245.147.0/24 maxlen: 24
206.245.150.0/24 maxlen: 24
206.245.155.0/24 maxlen: 24
206.245.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:19:d4:1a:91:cd:3f:57:10:72:d8:c7:ad:3e:3c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 15 10:26:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14a12f3dd56683e1d2db9ef6e5542988a172609e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:d0:c3:bd:e6:49:41:70:1e:d4:a6:e3:dc:
11:bd:76:fb:55:00:f0:cc:a9:d3:e1:5c:fa:d6:6d:
7a:89:12:1c:d5:33:8b:31:f4:0a:6c:69:34:52:f8:
e9:49:9b:73:94:62:be:6e:a4:f2:c2:aa:be:48:8a:
f5:e4:4b:97:75:ab:68:8a:c5:0d:6c:c5:81:28:7b:
60:53:53:86:2c:af:24:ba:b4:b3:4f:51:42:7b:cb:
74:3a:27:9e:81:f2:cf:a5:0a:95:11:42:72:a5:f3:
e4:7b:a2:4f:bf:67:54:7c:9b:c8:88:bb:fb:50:ce:
e5:43:c7:0d:c7:59:40:f8:3c:44:28:75:af:1d:0a:
b5:c7:e6:99:0b:66:5a:bc:49:79:f0:04:1b:ba:9d:
12:34:03:71:e2:c1:40:0e:31:92:19:8a:a5:c7:66:
5d:f8:47:61:80:dc:bb:85:c1:e4:f8:f7:73:b5:8e:
2b:2f:bf:ab:67:c9:70:07:77:cc:e9:26:7e:14:30:
f7:69:27:40:36:74:1b:85:85:df:5d:ed:67:ae:f6:
da:1e:b7:64:7a:25:74:63:e7:c9:1b:f7:2a:26:d1:
8f:0d:4c:dc:fd:27:7d:f5:ae:23:50:f0:c4:d9:81:
4c:69:c9:f3:ef:80:55:c2:cf:ad:40:dd:3b:56:7c:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A1:2F:3D:D5:66:83:E1:D2:DB:9E:F6:E5:54:29:88:A1:72:60:9E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FKEvPdVmg-HS25725VQpiKFyYJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.49.0/24
9.247.55.0/24
9.247.57.0/24
9.247.59.0/24
9.247.61.0/24
9.247.66.0/24
9.247.68.0/23
9.247.73.0/24
9.247.75.0-9.247.77.255
9.247.85.0/24
9.247.87.0/24
9.247.93.0-9.247.95.255
9.247.97.0/24
9.247.99.0/24
9.247.101.0/24
9.247.105.0-9.247.106.255
9.247.108.0/24
9.247.114.0/24
9.247.116.0/23
9.247.120.0/24
9.247.123.0/24
9.247.125.0/24
9.247.129.0-9.247.130.255
9.247.137.0/24
9.247.152.0-9.247.154.255
9.247.156.0/24
9.247.161.0-9.247.163.255
9.247.170.0/24
9.247.176.0/24
9.247.182.0/24
9.247.198.0/24
9.247.203.0/24
9.247.205.0/24
9.247.207.0-9.247.208.255
9.247.211.0/24
9.247.214.0/24
9.247.216.0/24
9.247.219.0-9.247.220.255
9.247.232.0/24
9.247.242.0/24
9.247.254.0/24
78.17.228.0/24
78.17.235.0/24
78.17.241.0/24
78.17.252.0-78.17.254.255
206.245.144.0/24
206.245.147.0/24
206.245.150.0/24
206.245.155.0-206.245.156.255
Signature Algorithm: sha256WithRSAEncryption
2f:86:39:ec:59:2a:2f:63:b7:86:0d:80:ce:d9:27:cc:b9:1e:
2e:d5:93:a0:49:72:8c:a3:56:b8:4b:4b:d5:b2:96:06:b3:9a:
14:ab:84:06:c5:ce:8c:99:5e:e0:73:55:b1:8f:0c:7c:bf:50:
a5:c5:2f:00:f5:7c:58:a4:fe:fa:65:92:5c:46:59:f2:f0:19:
10:5e:f9:1d:b0:e6:60:7f:c3:9b:6a:c4:39:62:0d:42:ba:8d:
c3:31:40:33:08:a1:1c:8a:a7:a8:05:26:37:2b:f7:96:70:92:
78:7f:79:92:af:86:85:68:ee:c7:f2:5b:e9:1a:1d:5e:fb:46:
48:8f:fe:8d:f9:a9:46:7d:77:d2:71:ad:e4:a8:0e:00:35:36:
e2:1c:74:0a:99:ee:e4:1a:48:86:1e:fb:aa:76:cf:96:b0:2a:
be:e4:46:a9:4f:b9:08:6e:ba:c6:c9:1e:98:88:1a:56:aa:04:
7d:10:ec:a1:a9:c3:67:a9:37:09:1c:2a:77:3a:a0:f7:6c:89:
6a:c8:9d:16:24:1a:51:9a:60:d3:0e:d0:e8:5b:23:6d:3c:2e:
3a:ab:43:f5:e5:ee:8c:76:b7:27:5f:84:8d:2f:1a:95:d3:e1:
f0:ba:2c:47:37:7d:ba:b8:59:02:f8:c3:0f:5b:c4:5d:9e:fb:
f9:17:46:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:07:55 2026 by rpki-client