Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/FoFGFEJN7JmxSrI1HKXm8RufIAA.roa
File: FoFGFEJN7JmxSrI1HKXm8RufIAA.roa (raw, json)
Hash identifier: CyYdZh6OwjavuzET4c6IW42F7cF/aEDSAUhzjh72zmw=
Subject key identifier: 16:81:46:14:42:4D:EC:99:B1:4A:B2:35:1C:A5:E6:F1:1B:9F:20:00
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 01A0DAA5801AD9DF7D013CE2DF76B0311DBA
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/FoFGFEJN7JmxSrI1HKXm8RufIAA.roa
Signing time: Fri 25 Sep 2026 22:17:54 +0000
ROA not before: Fri 25 Sep 2026 22:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 185.87.57.0/24 maxlen: 24
185.87.58.0/24 maxlen: 24
185.87.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:a5:80:1a:d9:df:7d:01:3c:e2:df:76:b0:31:1d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Sep 25 22:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16814614424dec99b14ab2351ca5e6f11b9f2000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:88:f7:2b:1c:42:c6:e5:b5:72:01:86:48:
7d:14:f4:d1:47:04:52:27:2e:aa:28:13:0d:7b:ae:
c4:6a:f2:49:09:b4:4e:ed:5e:4c:38:98:d2:45:56:
fb:5f:3b:81:11:85:52:ed:28:d7:8a:a9:c4:fc:d0:
f8:7e:4a:60:d1:a8:7f:82:3c:16:19:59:e3:8b:73:
47:1d:b3:ba:8b:15:b4:63:57:69:06:31:25:f1:88:
9c:c4:4f:68:b6:d8:75:b7:22:56:a9:30:28:4d:55:
c6:e7:4c:80:39:c8:4c:95:01:a8:ba:6c:d6:19:78:
75:ab:30:2f:b4:80:cf:95:28:3e:af:37:06:96:9a:
b1:47:12:7f:4c:31:52:f5:21:02:eb:a6:c7:72:af:
c0:39:06:6f:f8:30:50:18:f1:d9:74:a1:55:2b:0b:
6c:6a:d6:04:a2:8c:a4:2e:ee:5a:29:8c:5a:24:cf:
d8:97:d8:8d:d7:7e:28:43:c1:98:06:59:ee:82:bb:
ea:e4:77:53:90:73:d5:a4:19:53:12:10:38:02:f2:
5f:10:62:d9:36:50:ec:a9:56:d6:05:44:0c:a6:61:
d4:9d:01:05:44:86:3d:63:e7:33:81:2d:55:2b:20:
33:3c:ef:fd:a2:4c:56:98:84:cb:51:c4:a2:a3:58:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:81:46:14:42:4D:EC:99:B1:4A:B2:35:1C:A5:E6:F1:1B:9F:20:00
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/FoFGFEJN7JmxSrI1HKXm8RufIAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.57.0-185.87.59.255
Signature Algorithm: sha256WithRSAEncryption
55:8c:e5:d9:39:4a:0a:00:6c:bf:09:74:ff:43:96:b7:d2:4c:
25:7a:7a:46:e8:81:52:bd:51:64:70:b6:5b:7a:6c:b0:10:c4:
45:9e:fd:bf:1b:17:83:a8:e3:a2:4a:eb:db:c9:9b:09:30:57:
5c:95:39:56:1e:43:7a:54:a9:4c:40:d4:a2:02:88:36:9e:2b:
a0:7c:9a:fc:e2:7c:71:6d:13:ad:aa:ce:d0:a0:7f:df:5b:67:
05:12:67:82:82:fc:36:0f:f4:e9:82:8f:c5:32:10:23:31:58:
33:ee:94:85:67:5c:ab:fb:fb:6a:2e:0f:12:f1:f0:14:72:de:
6d:a3:dd:ee:c5:01:57:d6:89:16:03:2f:31:bc:a7:8a:e2:37:
44:d1:98:13:56:c9:41:7d:b6:07:50:0c:6c:0f:e6:58:92:1b:
03:93:06:52:48:1a:26:95:a8:da:a6:21:02:ec:14:20:94:03:
a8:05:df:d8:52:69:b7:58:e8:04:52:5a:0e:13:cf:1a:5c:c9:
78:70:19:98:ef:00:08:02:9b:11:19:c3:70:83:46:af:43:fd:
ea:6a:02:09:42:d3:70:e9:b3:c3:eb:75:35:ab:9a:6e:90:80:
7c:a7:34:7f:f3:1e:c1:63:de:43:1e:c7:87:e3:84:5a:09:3d:
ad:dc:b1:72
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaDapYAa2d99ATzi33awMR26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx
NGMzY2IwHhcNMjYwOTI1MjIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjgxNDYxNDQyNGRlYzk5YjE0YWIyMzUxY2E1ZTZmMTFiOWYyMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4mI9yscQsbltXIBhkh9FPTRRwRS
Jy6qKBMNe67EavJJCbRO7V5MOJjSRVb7XzuBEYVS7SjXiqnE/ND4fkpg0ah/gjwW
GVnji3NHHbO6ixW0Y1dpBjEl8YicxE9otth1tyJWqTAoTVXG50yAOchMlQGoumzW
GXh1qzAvtIDPlSg+rzcGlpqxRxJ/TDFS9SEC66bHcq/AOQZv+DBQGPHZdKFVKwts
atYEooykLu5aKYxaJM/Yl9iN134oQ8GYBlnugrvq5HdTkHPVpBlTEhA4AvJfEGLZ
NlDsqVbWBUQMpmHUnQEFRIY9Y+czgS1VKyAzPO/9okxWmITLUcSio1iWIwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBaBRhRCTeyZsUqyNRyl5vEbnyAAMB8GA1UdIwQY
MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt
MWRkNmQyODFjODhhLzEvRm9GR0ZFSk43Sm14U3JJMUhLWG04UnVmSUFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh
LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5VzkD
BAK5VzgwDQYJKoZIhvcNAQELBQADggEBAFWM5dk5SgoAbL8JdP9DlrfSTCV6ekbo
gVK9UWRwtlt6bLAQxEWe/b8bF4Oo46JK69vJmwkwV1yVOVYeQ3pUqUxA1KICiDae
K6B8mvzifHFtE62qztCgf99bZwUSZ4KC/DYP9OmCj8UyECMxWDPulIVnXKv7+2ou
DxLx8BRy3m2j3e7FAVfWiRYDLzG8p4riN0TRmBNWyUF9tgdQDGwP5liSGwOTBlJI
GiaVqNqmIQLsFCCUA6gF39hSabdY6ARSWg4TzxpcyXhwGZjvAAgCmxEZw3CDRq9D
/epqAglC03Dps8PrdTWrmm6QgHynNH/zHsFj3kMex4fjhFoJPa3csXI=
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:51 2026 by rpki-client