Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FGXMOB1LQ-sCND2rNzvfmwRUhwc.roa
File: FGXMOB1LQ-sCND2rNzvfmwRUhwc.roa (raw, json)
Hash identifier: dFPYQ8mlmDqONRDNM4fZOad+UGnoPVbAOnPF62xUKi0=
Subject key identifier: 14:65:CC:38:1D:4B:43:EB:02:34:3D:AB:37:3B:DF:9B:04:54:87:07
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0342B4D694CCFDBED13026FC637C546E1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FGXMOB1LQ-sCND2rNzvfmwRUhwc.roa
Signing time: Mon 24 Aug 2026 14:27:28 +0000
ROA not before: Mon 24 Aug 2026 14:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219288
IP address blocks: 195.133.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:2b:4d:69:4c:cf:db:ed:13:02:6f:c6:37:c5:46:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 24 14:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1465cc381d4b43eb02343dab373bdf9b04548707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:ff:5a:12:a1:36:c0:93:b8:2d:6a:91:cf:
0f:2b:a5:a0:24:07:68:2d:d2:75:12:72:85:13:9b:
25:2d:ce:cd:b9:e6:e2:ab:ab:08:fd:3c:b7:3b:9b:
8b:c3:92:bf:cd:6e:06:36:ea:73:9d:3d:28:12:c8:
57:b2:8b:7a:23:1c:24:99:d8:6f:62:f8:9a:f0:6d:
98:48:6b:34:c4:ac:b2:b8:35:6f:b2:f1:16:42:21:
d1:07:c3:24:e6:55:83:9f:77:ac:ea:c5:d7:c4:b8:
5d:80:3b:c7:03:69:9a:be:8a:9e:ae:7a:0b:8b:9a:
5c:6c:4b:7f:77:70:e5:2b:a7:52:5d:22:e4:06:fb:
e4:68:b1:6c:d4:5f:0d:7f:62:43:a1:eb:d7:bb:86:
ee:27:5f:97:66:b4:29:80:6d:12:93:38:ac:55:95:
74:e0:75:b1:37:d4:a2:d3:7c:d0:ff:6c:86:8a:56:
88:09:dd:f9:23:02:4f:0c:f6:83:9b:e1:60:39:2a:
68:fe:6c:d1:08:78:ac:58:2d:9a:d7:fb:ec:a0:4b:
7a:11:c9:ee:6b:f0:21:c7:c6:72:8d:23:a9:95:5d:
66:74:da:a0:fb:c1:4f:77:44:7c:76:fe:f5:2b:bf:
e8:3b:5c:1c:0e:4d:ac:a8:a5:8e:e3:37:42:62:df:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:65:CC:38:1D:4B:43:EB:02:34:3D:AB:37:3B:DF:9B:04:54:87:07
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FGXMOB1LQ-sCND2rNzvfmwRUhwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b2:31:db:2c:45:1e:c2:53:05:1f:95:3d:a3:c9:b1:94:1c:
c7:d3:5d:fb:d7:fe:a3:5a:67:e3:4e:f5:1c:33:70:ce:30:3e:
23:42:ae:0e:37:1e:be:93:67:f5:36:b1:2b:d5:9c:d9:41:c6:
25:67:95:af:c7:78:55:ca:cc:c0:6e:48:89:89:b3:da:e5:9d:
59:62:b3:76:8b:ab:19:d7:53:e6:e6:48:3c:c4:52:80:11:53:
d2:56:ff:0c:53:9c:59:73:91:6f:05:6d:61:1e:af:8e:50:2b:
98:20:c0:e2:65:16:ac:e6:8d:d2:a7:35:7a:28:7a:84:5a:e2:
78:dc:96:a7:64:6c:bc:30:d5:33:fd:cc:1c:73:ee:cf:10:1b:
2b:c3:4a:d9:fd:39:50:d2:79:5d:7c:8f:81:ba:11:60:00:b3:
c7:95:7f:46:d9:88:88:18:fc:41:b0:ae:ce:02:73:3a:b7:92:
c3:01:65:b4:4e:47:d5:2d:1f:cb:a6:e9:57:84:16:42:ac:b5:
4b:14:7d:a0:c7:14:91:2a:77:f2:e9:30:00:22:29:c3:e6:7d:
74:8e:ca:d7:ff:69:4c:3d:59:3b:95:59:c4:73:c6:28:78:00:
0f:59:40:08:7f:f1:3e:61:de:12:0a:36:3a:5e:f1:4d:cd:a0:
d8:82:d5:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA0K01pTM/b7RMCb8Y3xUbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwODI0MTQyNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDY1Y2MzODFkNGI0M2ViMDIzNDNkYWIzNzNiZGY5YjA0NTQ4NzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMH/WhKhNsCTuC1qkc8PK6WgJAdo
LdJ1EnKFE5slLc7Nuebiq6sI/Ty3O5uLw5K/zW4GNupznT0oEshXsot6Ixwkmdhv
Yvia8G2YSGs0xKyyuDVvsvEWQiHRB8Mk5lWDn3es6sXXxLhdgDvHA2mavoqernoL
i5pcbEt/d3DlK6dSXSLkBvvkaLFs1F8Nf2JDoevXu4buJ1+XZrQpgG0SkzisVZV0
4HWxN9Si03zQ/2yGilaICd35IwJPDPaDm+FgOSpo/mzRCHisWC2a1/vsoEt6Ecnu
a/Ahx8ZyjSOplV1mdNqg+8FPd0R8dv71K7/oO1wcDk2sqKWO4zdCYt9HfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBRlzDgdS0PrAjQ9qzc735sEVIcHMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvRkdYTU9CMUxRLXNDTkQyck56dmZtd1JVaHdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4VQMA0G
CSqGSIb3DQEBCwUAA4IBAQBfsjHbLEUewlMFH5U9o8mxlBzH01371/6jWmfjTvUc
M3DOMD4jQq4ONx6+k2f1NrEr1ZzZQcYlZ5Wvx3hVyszAbkiJibPa5Z1ZYrN2i6sZ
11Pm5kg8xFKAEVPSVv8MU5xZc5FvBW1hHq+OUCuYIMDiZRas5o3SpzV6KHqEWuJ4
3JanZGy8MNUz/cwcc+7PEBsrw0rZ/TlQ0nldfI+BuhFgALPHlX9G2YiIGPxBsK7O
AnM6t5LDAWW0TkfVLR/LpulXhBZCrLVLFH2gxxSRKnfy6TAAIinD5n10jsrX/2lM
PVk7lVnEc8YoeAAPWUAIf/E+Yd4SCjY6XvFNzaDYgtVv
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:04 2026 by rpki-client