Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/FA9Nx6h2GDGuDWivaetY48_JZBY.roa
File: FA9Nx6h2GDGuDWivaetY48_JZBY.roa (raw, json)
Hash identifier: qCJEbptC+2Sx+e+Y3VIZydyiW+Q7Yd8NiHhHUmo6rek=
Subject key identifier: 14:0F:4D:C7:A8:76:18:31:AE:0D:68:AF:69:EB:58:E3:CF:C9:64:16
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 01A01E24E28572D3076D3A838E34AA8CFB17
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/FA9Nx6h2GDGuDWivaetY48_JZBY.roa
Signing time: Thu 20 Aug 2026 07:48:48 +0000
ROA not before: Thu 20 Aug 2026 07:48:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3225
IP address blocks: 45.158.96.0/22 maxlen: 24
91.140.128.0/17 maxlen: 24
91.140.128.0/18 maxlen: 18
91.140.128.0/22 maxlen: 24
91.140.132.0/22 maxlen: 24
91.140.136.0/22 maxlen: 22
91.140.140.0/22 maxlen: 24
91.140.144.0/22 maxlen: 22
91.140.148.0/22 maxlen: 24
91.140.152.0/22 maxlen: 24
91.140.156.0/22 maxlen: 22
91.140.160.0/22 maxlen: 24
91.140.164.0/22 maxlen: 24
91.140.168.0/22 maxlen: 22
91.140.172.0/22 maxlen: 24
91.140.176.0/22 maxlen: 22
91.140.180.0/22 maxlen: 24
91.140.184.0/22 maxlen: 22
91.140.188.0/22 maxlen: 24
91.140.192.0/22 maxlen: 24
91.140.196.0/22 maxlen: 24
91.140.200.0/22 maxlen: 24
91.140.201.0/24 maxlen: 24
91.140.202.0/24 maxlen: 24
91.140.203.0/24 maxlen: 24
91.140.204.0/22 maxlen: 24
91.140.207.0/24 maxlen: 24
91.140.208.0/22 maxlen: 24
91.140.211.0/24 maxlen: 24
91.140.212.0/22 maxlen: 24
91.140.216.0/22 maxlen: 24
91.140.219.0/24 maxlen: 24
91.140.220.0/24 maxlen: 24
91.140.221.0/24 maxlen: 24
91.140.222.0/24 maxlen: 24
91.140.223.0/24 maxlen: 24
91.140.224.0/22 maxlen: 24
91.140.224.0/24 maxlen: 24
91.140.226.0/24 maxlen: 24
91.140.227.0/24 maxlen: 24
91.140.228.0/22 maxlen: 24
91.140.228.0/24 maxlen: 24
91.140.229.0/24 maxlen: 24
91.140.230.0/24 maxlen: 24
91.140.231.0/24 maxlen: 24
91.140.232.0/22 maxlen: 22
91.140.232.0/24 maxlen: 24
91.140.233.0/24 maxlen: 24
91.140.234.0/24 maxlen: 24
91.140.235.0/24 maxlen: 24
91.140.236.0/22 maxlen: 22
91.140.236.0/24 maxlen: 24
91.140.237.0/24 maxlen: 24
91.140.238.0/24 maxlen: 24
91.140.239.0/24 maxlen: 24
91.140.240.0/22 maxlen: 22
91.140.240.0/24 maxlen: 24
91.140.241.0/24 maxlen: 24
91.140.242.0/24 maxlen: 24
91.140.244.0/22 maxlen: 24
91.140.244.0/24 maxlen: 24
91.140.245.0/24 maxlen: 24
91.140.246.0/24 maxlen: 24
91.140.248.0/22 maxlen: 24
91.140.248.0/24 maxlen: 24
91.140.249.0/24 maxlen: 24
91.140.250.0/24 maxlen: 24
91.140.251.0/24 maxlen: 24
91.140.252.0/22 maxlen: 24
91.140.252.0/24 maxlen: 24
91.140.253.0/24 maxlen: 24
91.140.254.0/24 maxlen: 24
91.140.255.0/24 maxlen: 24
94.187.224.0/19 maxlen: 24
94.187.224.0/22 maxlen: 22
94.187.224.0/24 maxlen: 24
94.187.225.0/24 maxlen: 24
94.187.226.0/24 maxlen: 24
94.187.227.0/24 maxlen: 24
94.187.228.0/22 maxlen: 24
94.187.228.0/24 maxlen: 24
94.187.230.0/24 maxlen: 24
94.187.232.0/22 maxlen: 24
94.187.232.0/24 maxlen: 24
94.187.236.0/22 maxlen: 24
94.187.240.0/22 maxlen: 24
94.187.241.0/24 maxlen: 24
94.187.244.0/22 maxlen: 24
94.187.248.0/22 maxlen: 24
94.187.249.0/24 maxlen: 24
94.187.252.0/22 maxlen: 24
94.187.252.0/24 maxlen: 24
94.187.255.0/24 maxlen: 24
185.16.4.0/22 maxlen: 24
185.46.144.0/22 maxlen: 24
194.54.192.0/18 maxlen: 24
194.54.192.0/19 maxlen: 24
194.54.192.0/22 maxlen: 22
194.54.194.0/23 maxlen: 24
194.54.196.0/22 maxlen: 24
194.54.200.0/22 maxlen: 24
194.54.202.0/24 maxlen: 24
194.54.204.0/22 maxlen: 24
194.54.208.0/22 maxlen: 24
194.54.208.0/24 maxlen: 24
194.54.209.0/24 maxlen: 24
194.54.212.0/22 maxlen: 24
194.54.216.0/22 maxlen: 24
194.54.220.0/22 maxlen: 24
194.54.220.0/24 maxlen: 24
194.54.224.0/19 maxlen: 24
194.54.224.0/22 maxlen: 24
194.54.228.0/22 maxlen: 24
194.54.232.0/22 maxlen: 24
194.54.234.0/24 maxlen: 24
194.54.236.0/22 maxlen: 24
194.54.240.0/22 maxlen: 24
194.54.241.0/24 maxlen: 24
194.54.243.0/24 maxlen: 24
194.54.244.0/22 maxlen: 24
194.54.248.0/22 maxlen: 24
194.54.252.0/22 maxlen: 24
213.132.224.0/19 maxlen: 19
213.132.224.0/22 maxlen: 22
213.132.224.0/24 maxlen: 24
213.132.228.0/22 maxlen: 22
213.132.228.0/24 maxlen: 24
213.132.229.0/24 maxlen: 24
213.132.230.0/24 maxlen: 24
213.132.231.0/24 maxlen: 24
213.132.232.0/22 maxlen: 22
213.132.236.0/22 maxlen: 22
213.132.240.0/22 maxlen: 22
213.132.244.0/22 maxlen: 22
213.132.244.0/24 maxlen: 24
213.132.245.0/24 maxlen: 24
213.132.246.0/24 maxlen: 24
213.132.247.0/24 maxlen: 24
213.132.248.0/22 maxlen: 22
213.132.248.0/24 maxlen: 24
213.132.249.0/24 maxlen: 24
213.132.251.0/24 maxlen: 24
213.132.252.0/22 maxlen: 22
213.132.252.0/24 maxlen: 24
213.132.254.0/24 maxlen: 24
213.132.255.0/24 maxlen: 24
2a01:7780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:24:e2:85:72:d3:07:6d:3a:83:8e:34:aa:8c:fb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Aug 20 07:48:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=140f4dc7a8761831ae0d68af69eb58e3cfc96416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:ae:f1:c9:f3:9b:0d:ed:54:a2:25:57:e0:
a0:86:54:ef:42:80:e6:28:08:1d:71:86:cb:0e:b6:
45:f6:dd:68:12:df:75:34:c0:6f:14:76:79:12:07:
14:7f:b4:45:ed:19:28:b3:c5:86:05:37:dc:64:60:
1c:fb:c1:00:8e:5e:93:1f:ed:f4:13:ea:b4:06:7b:
5e:dd:04:ff:c2:20:28:a0:62:8d:8d:fb:f2:3c:e9:
97:b5:54:31:a0:a1:48:c9:d7:32:7d:65:a9:39:01:
11:f3:20:a2:e9:06:7b:8c:4a:27:af:f3:68:d6:7e:
e4:32:04:11:9c:f5:5f:0c:69:6d:9e:a3:c3:f9:c6:
0d:a3:c1:8b:2d:c9:62:e1:f6:c2:5b:23:9f:c1:67:
c6:63:28:52:10:a6:c2:2d:d8:78:02:66:4c:f0:0f:
92:d2:c9:af:2d:a3:7b:85:f1:d9:7a:33:2d:e2:b0:
bc:2c:0e:ad:29:27:1b:a5:68:e6:d4:32:57:50:3a:
e7:57:5d:02:17:eb:f0:7d:29:76:63:30:96:ce:a2:
26:eb:fc:30:fc:7c:87:7c:f0:1c:2a:2d:ae:7f:ed:
41:c2:7b:c6:40:e5:3c:8f:56:01:79:ed:1e:28:d9:
bb:a5:e8:ba:8d:19:c5:5a:1b:c6:c0:45:ce:6f:5f:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:4D:C7:A8:76:18:31:AE:0D:68:AF:69:EB:58:E3:CF:C9:64:16
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/FA9Nx6h2GDGuDWivaetY48_JZBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.96.0/22
91.140.128.0/17
94.187.224.0/19
185.16.4.0/22
185.46.144.0/22
194.54.192.0/18
213.132.224.0/19
IPv6:
2a01:7780::/32
Signature Algorithm: sha256WithRSAEncryption
6c:0a:0b:43:0e:6d:c6:63:c5:32:20:27:e3:c2:c1:b0:43:ce:
f5:6b:fa:60:a6:28:35:f0:02:70:39:a6:bc:ae:7b:74:5f:ca:
ed:65:0b:16:3b:f5:c2:e6:f6:5b:52:d1:88:f6:62:e3:8c:9f:
bb:08:68:d6:9f:03:69:f9:bb:5d:0c:2a:15:fe:16:b2:2b:6d:
ee:f1:e5:f2:94:c3:c4:13:78:d7:4c:71:99:18:85:81:19:9f:
71:49:45:f7:89:ca:f1:d4:e4:85:02:c8:49:3f:f3:b3:5a:ff:
ad:e6:75:16:ed:19:62:fb:36:42:91:0f:7a:5f:40:99:56:23:
c0:a9:01:c5:51:7c:7d:d0:8b:eb:19:b0:1e:c8:59:b8:8a:b7:
fc:1a:36:1f:ed:62:5d:76:37:1f:75:da:1d:68:6f:cc:9b:f6:
6d:bb:bc:19:ff:a1:7a:86:5f:6f:52:8a:d2:a1:a7:8c:07:6f:
f2:34:49:ff:44:34:7b:58:55:37:31:06:ff:13:f2:57:ea:4e:
96:ae:57:cd:c3:e7:e7:b1:bc:c4:77:c0:4f:24:3d:db:67:ca:
23:0f:36:c9:01:a1:e2:75:fd:ce:a1:2f:62:1d:e6:11:f5:89:
fa:e1:af:7a:9c:be:b6:38:8e:46:bf:c1:9b:12:c5:cd:57:63:
fc:c3:ce:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:12:59 2026 by rpki-client