Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FlB-IgO9no981oRKR7aDUyuUKM0.roa
File: FlB-IgO9no981oRKR7aDUyuUKM0.roa (raw, json)
Hash identifier: 1nkrVpWVVM3GwJ8jjn/yHYJU6O6OERgVyUfkto8J3Ug=
Subject key identifier: 16:50:7E:22:03:BD:9E:8F:7C:D6:84:4A:47:B6:83:53:2B:94:28:CD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019E2AC99FA09853024140FD61E6076F56C4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FlB-IgO9no981oRKR7aDUyuUKM0.roa
Signing time: Fri 15 May 2026 08:38:37 +0000
ROA not before: Fri 15 May 2026 08:38:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395793
IP address blocks: 146.19.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:c9:9f:a0:98:53:02:41:40:fd:61:e6:07:6f:56:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 15 08:38:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16507e2203bd9e8f7cd6844a47b683532b9428cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2f:97:b8:86:cb:6c:40:91:d6:c6:54:56:1e:
2e:78:e3:a6:98:eb:dc:07:a2:35:3e:c8:ff:11:9b:
11:1e:08:20:8f:51:ee:4f:60:43:95:a2:fa:87:04:
90:61:69:8f:7d:0a:e5:b3:66:06:e8:d4:ef:bc:39:
6c:ae:bb:cd:6f:f7:4c:a4:72:20:3a:ee:f1:5c:46:
e7:99:d3:80:02:d0:64:50:9c:5c:c7:dd:ba:46:e5:
a1:d4:75:4e:e9:42:9c:e5:5c:7c:26:58:d7:13:0b:
9f:a5:61:54:10:c5:a0:cd:3a:8c:b6:67:23:ec:98:
63:05:77:df:3f:ef:de:5e:da:3a:9e:84:56:d3:70:
7f:8f:2f:d4:6e:bb:30:37:72:13:f2:4e:64:5a:a8:
3c:f9:ec:3a:31:31:ce:40:d2:bf:2d:b4:55:63:f9:
dd:67:cf:cb:86:19:47:cc:f1:42:3a:a9:7e:21:d9:
29:68:2f:c7:c7:ca:d9:be:02:57:1a:ef:bc:41:1d:
d0:16:47:5d:29:c0:34:09:52:22:30:09:da:87:54:
e2:19:57:b0:cc:16:47:c1:08:33:96:8f:57:0c:27:
e5:bd:70:2a:9f:7c:ee:0d:3c:9b:61:7c:57:d3:ff:
30:97:67:50:89:4f:d1:85:e7:b8:98:b6:5c:fe:b9:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:50:7E:22:03:BD:9E:8F:7C:D6:84:4A:47:B6:83:53:2B:94:28:CD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FlB-IgO9no981oRKR7aDUyuUKM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.122.0/24
Signature Algorithm: sha256WithRSAEncryption
31:00:7a:22:a0:99:07:63:19:f8:46:75:28:85:25:e0:9c:c6:
41:93:45:29:b2:c6:13:c4:7d:e3:29:a3:b3:e7:6a:2d:ce:c5:
74:63:85:2f:48:de:2f:52:c7:ff:cd:a4:51:62:b9:c5:b7:f7:
f8:da:5d:5a:25:37:15:0d:cd:65:26:74:07:d6:37:2f:5c:0e:
38:32:05:b8:16:b2:09:1f:59:a7:2b:3c:39:3f:50:d1:4b:2a:
0f:c2:a6:2e:49:b3:b8:fb:13:92:54:3c:12:40:71:ec:b5:c7:
32:e6:4d:bb:2d:8a:5a:59:85:7d:11:60:a6:89:eb:e5:0e:57:
2c:87:ee:a3:70:84:86:29:61:44:4a:3b:ae:91:ae:59:d0:bd:
5e:a2:c9:8d:a8:be:1b:a7:7d:15:7e:a3:a2:ce:21:5f:f1:99:
b7:7e:8b:4e:c5:58:da:09:e9:0e:25:09:e9:a3:04:d4:68:4b:
c2:ec:9c:74:74:ee:df:4b:9d:d0:4e:7e:79:d6:70:07:19:dd:
77:03:46:81:a5:84:95:64:9d:48:9f:4c:c2:d7:2e:74:c2:f9:
52:0e:d5:ef:29:e0:94:81:57:48:ce:b5:11:43:89:fc:8d:b3:
8d:1d:21:09:99:16:c5:d1:ea:95:2b:1c:24:ab:c7:94:cb:f4:
dc:15:26:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4qyZ+gmFMCQUD9YeYHb1bEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwNTE1MDgzODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjUwN2UyMjAzYmQ5ZThmN2NkNjg0NGE0N2I2ODM1MzJiOTQyOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C+XuIbLbECR1sZUVh4ueOOmmOvc
B6I1Psj/EZsRHgggj1HuT2BDlaL6hwSQYWmPfQrls2YG6NTvvDlsrrvNb/dMpHIg
Ou7xXEbnmdOAAtBkUJxcx926RuWh1HVO6UKc5Vx8JljXEwufpWFUEMWgzTqMtmcj
7JhjBXffP+/eXto6noRW03B/jy/UbrswN3IT8k5kWqg8+ew6MTHOQNK/LbRVY/nd
Z8/LhhlHzPFCOql+IdkpaC/Hx8rZvgJXGu+8QR3QFkddKcA0CVIiMAnah1TiGVew
zBZHwQgzlo9XDCflvXAqn3zuDTybYXxX0/8wl2dQiU/Rhee4mLZc/rkCyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZQfiIDvZ6PfNaESke2g1MrlCjNMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvRmxCLUlnTzlubzk4MW9SS1I3YURVeXVVS00wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhN6MA0G
CSqGSIb3DQEBCwUAA4IBAQAxAHoioJkHYxn4RnUohSXgnMZBk0UpssYTxH3jKaOz
52otzsV0Y4UvSN4vUsf/zaRRYrnFt/f42l1aJTcVDc1lJnQH1jcvXA44MgW4FrIJ
H1mnKzw5P1DRSyoPwqYuSbO4+xOSVDwSQHHstccy5k27LYpaWYV9EWCmievlDlcs
h+6jcISGKWFESjuuka5Z0L1eosmNqL4bp30VfqOiziFf8Zm3fotOxVjaCekOJQnp
owTUaEvC7Jx0dO7fS53QTn551nAHGd13A0aBpYSVZJ1In0zC1y50wvlSDtXvKeCU
gVdIzrURQ4n8jbONHSEJmRbF0eqVKxwkq8eUy/TcFSYL
-----END CERTIFICATE-----
Generated at Mon May 25 02:50:14 2026 by rpki-client