Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/FCEeIR0U57Dc4ziNJx71ZqeKh9Y.roa
File: FCEeIR0U57Dc4ziNJx71ZqeKh9Y.roa (raw, json)
Hash identifier: vbWMXzKS4D5+2q+2t821SHbD4J+yqJXDqLxiG6blyO0=
Subject key identifier: 14:21:1E:21:1D:14:E7:B0:DC:E3:38:8D:27:1E:F5:66:A7:8A:87:D6
Certificate issuer: /CN=d5a42a0ffd0274c655070609549e6420b63284df
Certificate serial: 019F23683CF965E5FDD81ADC2FC561F6BCE0
Authority key identifier: D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/FCEeIR0U57Dc4ziNJx71ZqeKh9Y.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61149
IP address blocks: 45.82.106.0/24 maxlen: 24
45.82.107.0/24 maxlen: 24
86.104.226.0/24 maxlen: 24
91.235.107.0/24 maxlen: 24
185.16.88.0/22 maxlen: 22
185.16.88.0/23 maxlen: 23
185.16.88.0/24 maxlen: 24
185.16.89.0/24 maxlen: 24
185.16.90.0/23 maxlen: 23
185.16.90.0/24 maxlen: 24
185.16.91.0/24 maxlen: 24
2a03:cac0:2::/48 maxlen: 48
2a03:cac0:a::/48 maxlen: 48
2a03:cac0:b::/48 maxlen: 48
2a03:cac0:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3c:f9:65:e5:fd:d8:1a:dc:2f:c5:61:f6:bc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a42a0ffd0274c655070609549e6420b63284df
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14211e211d14e7b0dce3388d271ef566a78a87d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bb:17:04:32:14:01:5a:e8:2a:cd:1f:84:45:
f2:b7:ea:cd:a0:2e:58:81:3d:a1:3e:05:d0:4e:2c:
c8:c8:31:27:fe:49:bb:c6:38:56:2a:ab:68:3b:1c:
c3:51:9d:1f:c6:88:f3:56:11:5a:5b:e8:72:11:66:
85:36:af:6a:cb:f6:5e:91:56:b1:a4:5f:94:4d:65:
17:4f:c8:c4:1f:cd:65:aa:06:5b:4a:50:e6:9c:db:
8a:01:3d:6f:6d:ae:fc:f3:5f:04:fa:36:5a:de:7f:
2e:48:f5:da:14:0f:7e:87:f8:1f:50:09:4c:ae:6f:
a8:28:fc:19:d9:55:28:f1:83:4d:7e:ef:91:7c:bd:
d5:f9:98:ed:d9:69:dd:62:c9:b5:45:49:06:28:1d:
2e:91:be:87:86:24:39:48:a8:8e:e7:fa:6d:ac:6d:
c7:ea:c9:0f:cf:dc:c4:a2:f6:6d:52:b9:fb:e4:91:
f0:c9:68:f1:10:1a:82:f3:54:24:4b:db:05:41:91:
34:f1:3f:7a:e9:09:28:f1:e4:b4:e8:39:f4:a8:21:
90:61:91:26:03:b1:3b:f5:d9:78:1e:d7:07:7a:f0:
7e:10:98:fa:8c:50:c3:d3:51:17:60:41:21:03:78:
05:a1:05:e9:10:41:80:1b:3d:1f:30:7d:c0:63:13:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:21:1E:21:1D:14:E7:B0:DC:E3:38:8D:27:1E:F5:66:A7:8A:87:D6
X509v3 Authority Key Identifier:
keyid:D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/FCEeIR0U57Dc4ziNJx71ZqeKh9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.106.0/23
86.104.226.0/24
91.235.107.0/24
185.16.88.0/22
IPv6:
2a03:cac0:2::/48
2a03:cac0:a::-2a03:cac0:c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2d:b9:57:cb:cc:2e:6f:f3:ae:f1:87:17:d5:c2:c0:86:84:68:
4e:8d:30:24:47:a2:99:c9:c4:c0:32:4d:cd:7c:ab:b4:b9:b0:
57:ad:fa:67:a2:72:28:c5:c8:d6:e6:e2:ff:c0:3e:40:89:83:
f8:7f:d7:69:ce:30:d1:c8:c5:e2:b1:2e:c9:6b:09:cf:dd:0b:
e5:cc:82:25:7e:e5:a9:da:bb:48:51:3b:b7:c5:b1:c0:51:ab:
51:6e:ac:85:09:89:cd:da:78:2b:a9:62:70:a0:63:dd:e0:60:
cf:16:e4:36:6b:19:fa:66:c3:b3:34:58:a8:45:4b:2e:d9:d4:
11:2f:b5:b3:9e:b3:91:bc:fe:51:ad:25:ba:20:5d:79:aa:a2:
37:0f:c6:e7:1f:db:6f:15:34:10:12:d3:5f:d6:de:12:0f:1c:
48:cf:21:d0:d8:71:ca:65:86:1c:ea:e6:d1:32:de:72:09:02:
fb:71:7f:02:c2:35:e5:f0:fb:57:d2:d4:c2:2c:cc:28:89:72:
ba:89:65:b8:5e:57:59:da:a2:61:bb:e6:d1:4e:b8:04:27:e2:
e9:5c:91:a4:6e:20:48:69:53:ef:7b:63:22:83:77:4f:12:56:
10:02:d0:ed:39:09:3f:57:5c:33:e8:14:e8:81:f4:14:32:8f:
72:67:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 23:53:56 2026 by rpki-client