Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/_bFSWkVNyyV-JG00IdO9DOc1tJQ.roa
File: _bFSWkVNyyV-JG00IdO9DOc1tJQ.roa (raw, json)
Hash identifier: w+Qxdy9l318WPVe4tQ0sejDpt2qVThufOQLUi1qDqSk=
Subject key identifier: FD:B1:52:5A:45:4D:CB:25:7E:24:6D:34:21:D3:BD:0C:E7:35:B4:94
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 019FD0C936AFF3295A26948C3CE0B0CBC6F3
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/_bFSWkVNyyV-JG00IdO9DOc1tJQ.roa
Signing time: Wed 05 Aug 2026 07:17:55 +0000
ROA not before: Wed 05 Aug 2026 07:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59816
IP address blocks: 185.70.132.0/22 maxlen: 22
185.241.36.0/24 maxlen: 24
185.241.37.0/24 maxlen: 24
185.241.38.0/24 maxlen: 24
185.241.39.0/24 maxlen: 24
185.251.224.0/22 maxlen: 22
185.251.225.0/24 maxlen: 24
185.251.226.0/24 maxlen: 24
185.254.88.0/22 maxlen: 22
194.147.120.0/22 maxlen: 22
194.147.120.0/24 maxlen: 24
194.147.121.0/24 maxlen: 24
194.147.122.0/24 maxlen: 24
2a05:2a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:c9:36:af:f3:29:5a:26:94:8c:3c:e0:b0:cb:c6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Aug 5 07:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdb1525a454dcb257e246d3421d3bd0ce735b494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:55:78:c3:1e:95:48:2e:60:fa:ee:fb:a6:
c0:e7:a6:d1:fe:06:84:9c:e4:05:fa:1b:0f:e2:0c:
33:c1:5b:d3:06:a0:4e:19:d0:ad:97:b7:9c:f3:87:
9f:c6:23:2e:f2:10:f7:88:70:19:d5:b5:e1:20:6b:
e5:21:f4:7e:fd:84:2a:14:7a:a8:9f:f8:3a:37:90:
dc:dd:11:93:01:a1:92:76:6e:0e:c4:ad:19:e1:fd:
52:a9:fa:b8:30:22:fc:e0:6f:29:29:d6:c8:71:3b:
54:be:1c:2e:95:95:9f:5d:34:41:50:91:ef:0d:82:
7c:2d:e9:dd:4d:fc:42:8c:5c:83:99:d1:98:07:7f:
86:0e:57:b7:6c:c9:61:42:ee:32:4e:b2:e0:3a:01:
6b:e0:74:d0:9b:3a:50:8f:1d:0a:e2:5e:7e:89:29:
4c:7c:2f:4a:a6:45:82:d6:a9:6a:d8:6d:d2:e0:4f:
c4:00:70:72:8d:02:8b:16:42:ef:57:5e:5f:1a:c1:
85:99:b4:76:24:16:ad:59:9a:cc:76:4a:21:8c:9f:
eb:32:c2:13:cf:01:9f:74:50:d5:4e:36:55:8b:6f:
98:60:3d:38:00:39:dd:b9:77:c5:c9:54:31:e7:4d:
1b:e8:4d:dd:e8:a9:10:4f:f1:c3:38:b2:ce:26:92:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B1:52:5A:45:4D:CB:25:7E:24:6D:34:21:D3:BD:0C:E7:35:B4:94
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/_bFSWkVNyyV-JG00IdO9DOc1tJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.132.0/22
185.241.36.0/22
185.251.224.0/22
185.254.88.0/22
194.147.120.0/22
IPv6:
2a05:2a00::/29
Signature Algorithm: sha256WithRSAEncryption
87:85:03:2e:7a:d1:b6:60:b0:f7:13:bb:73:f9:7f:fd:83:25:
ba:1c:cf:47:d1:e5:d6:ab:bb:5e:be:57:2b:b4:02:a1:b9:46:
de:89:94:ca:0a:49:3d:6b:81:24:a3:74:70:a5:e7:8d:65:61:
fa:8d:d1:8d:f8:f9:36:84:79:e9:0c:ea:31:69:83:0f:b8:96:
86:5f:be:ff:7a:7c:16:f0:7d:cc:8d:b4:0f:07:eb:4f:81:52:
5c:e0:a7:54:6c:de:f5:4a:75:2e:75:2a:56:77:86:70:ac:f3:
3d:8b:7e:19:59:07:a4:2c:68:97:0f:b4:39:7b:0b:e1:dc:6c:
55:ee:73:92:a6:35:d5:5d:39:d3:f3:1b:f9:82:a1:bf:42:d5:
ad:70:aa:ca:0e:a6:48:21:59:5f:97:4d:1b:a2:80:74:ed:02:
35:6c:d2:a2:c8:b5:32:eb:5e:70:db:74:14:e3:5e:38:2f:42:
5d:f4:1a:42:bb:67:d6:70:10:af:74:77:99:3e:7a:da:29:ce:
d9:3e:c1:32:52:96:d9:74:b8:8f:91:50:02:e2:ae:12:ad:09:
83:f2:28:a4:f0:42:72:ec:a6:1a:74:36:8e:77:8c:74:dd:81:
e4:a6:99:81:6a:4e:26:90:c4:84:95:c4:69:93:ea:22:85:05:
fa:99:50:c6
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZ/QyTav8ylaJpSMPOCwy8bzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MmU2NTM2YjJlNzQyMjBlZjRiMDkyYmMwOTBjYzRjMjUw
ZjNlZDYwHhcNMjYwODA1MDcxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGIxNTI1YTQ1NGRjYjI1N2UyNDZkMzQyMWQzYmQwY2U3MzViNDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwotVeMMelUguYPru+6bA56bR/gaE
nOQF+hsP4gwzwVvTBqBOGdCtl7ec84efxiMu8hD3iHAZ1bXhIGvlIfR+/YQqFHqo
n/g6N5Dc3RGTAaGSdm4OxK0Z4f1Sqfq4MCL84G8pKdbIcTtUvhwulZWfXTRBUJHv
DYJ8LendTfxCjFyDmdGYB3+GDle3bMlhQu4yTrLgOgFr4HTQmzpQjx0K4l5+iSlM
fC9KpkWC1qlq2G3S4E/EAHByjQKLFkLvV15fGsGFmbR2JBatWZrMdkohjJ/rMsIT
zwGfdFDVTjZVi2+YYD04ADnduXfFyVQx500b6E3d6KkQT/HDOLLOJpKDHQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFP2xUlpFTcslfiRtNCHTvQznNbSUMB8GA1UdIwQY
MBaAFDQuZTay50Ig70sJK8CQzEwlDz7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUt
ZWNkOGEyNDc0YTAyLzEvX2JGU1drVk55eVYtSkcwMElkTzlET2MxdEpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUtZWNkOGEyNDc0YTAy
LzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCuUaEAwQC
ufEkAwQCufvgAwQCuf5YAwQCwpN4MA0EAgACMAcDBQMqBSoAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHhQMuetG2YLD3E7tz+X/9gyW6HM9H0eXWq7tevlcrtAKhuUbeiZTK
Ckk9a4Eko3RwpeeNZWH6jdGN+Pk2hHnpDOoxaYMPuJaGX77/enwW8H3MjbQPB+tP
gVJc4KdUbN71SnUudSpWd4ZwrPM9i34ZWQekLGiXD7Q5ewvh3GxV7nOSpjXVXTnT
8xv5gqG/QtWtcKrKDqZIIVlfl00booB07QI1bNKiyLUy615w23QU4144L0Jd9BpC
u2fWcBCvdHeZPnraKc7ZPsEyUpbZdLiPkVAC4q4SrQmD8iik8EJy7KYadDaOd4x0
3YHkppmBak4mkMSElcRpk+oihQX6mVDG
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:03:27 2026 by rpki-client