Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/FQNKTNWujcNGigXV8pZHkAVMNZE.roa
File: FQNKTNWujcNGigXV8pZHkAVMNZE.roa (raw, json)
Hash identifier: iC6zv08D3AEY5XiwSyy8m/zH3R4QBAh7AJZZ7JpPyI8=
Subject key identifier: 15:03:4A:4C:D5:AE:8D:C3:46:8A:05:D5:F2:96:47:90:05:4C:35:91
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01A0699D209692DB9C3121EE0988AC56E76B
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/FQNKTNWujcNGigXV8pZHkAVMNZE.roa
Signing time: Thu 03 Sep 2026 23:31:40 +0000
ROA not before: Thu 03 Sep 2026 23:31:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218878
IP address blocks: 5.182.208.0/22 maxlen: 24
62.68.71.0/24 maxlen: 24
91.217.200.0/24 maxlen: 24
91.226.227.0/24 maxlen: 24
91.230.49.0/24 maxlen: 24
185.46.70.0/24 maxlen: 24
185.244.36.0/22 maxlen: 24
2a0d:2400::/29 maxlen: 39
2a0d:2780::/29 maxlen: 29
2a0e:2000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:69:9d:20:96:92:db:9c:31:21:ee:09:88:ac:56:e7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Sep 3 23:31:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15034a4cd5ae8dc3468a05d5f2964790054c3591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:b2:2d:b5:af:28:76:e8:1d:be:d7:ad:85:
ef:13:b4:a5:c1:80:8c:1d:65:46:ef:26:cd:3a:29:
5a:98:cc:e0:6b:a5:c5:d2:a2:3f:fb:54:99:04:64:
0e:0d:88:ee:ca:5c:73:db:1d:8b:f2:f7:93:2a:1b:
59:74:ce:9e:ac:33:80:5f:be:33:65:5e:07:4a:8e:
b0:b2:4b:cb:a6:71:f4:cf:27:c1:7c:b2:00:4a:08:
8b:2c:6b:00:e2:4d:75:d4:f9:c1:1f:fd:64:1f:fb:
36:0d:99:4a:0d:cb:e4:80:22:29:86:e4:b1:ed:3f:
fc:42:cc:11:95:ca:e9:96:37:e5:a7:e9:e3:b0:b5:
51:c7:41:e8:2b:09:8c:21:95:70:96:ab:d6:53:aa:
c6:21:fc:e5:be:09:a8:b7:7e:ee:6b:c2:52:58:7e:
cd:7e:81:9b:24:ec:10:70:de:ce:f1:96:b7:ba:72:
11:22:57:9f:a4:10:1e:9f:27:4b:68:f8:da:89:60:
b0:c7:62:5c:8a:14:a8:33:7d:76:47:d9:22:25:72:
a2:ae:04:f6:8c:16:ec:c1:ee:26:a1:bb:7c:b5:16:
8d:0e:ee:67:09:40:f8:ca:96:42:79:8c:0e:e7:af:
e3:31:b3:3a:f1:6f:a5:b3:75:cc:c4:f1:45:f2:47:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:03:4A:4C:D5:AE:8D:C3:46:8A:05:D5:F2:96:47:90:05:4C:35:91
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/FQNKTNWujcNGigXV8pZHkAVMNZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.208.0/22
62.68.71.0/24
91.217.200.0/24
91.226.227.0/24
91.230.49.0/24
185.46.70.0/24
185.244.36.0/22
IPv6:
2a0d:2400::/29
2a0d:2780::/29
2a0e:2000::/29
Signature Algorithm: sha256WithRSAEncryption
89:d0:20:54:d6:7f:87:37:bc:1d:3d:cf:59:5d:c8:91:81:0d:
9a:88:fc:bc:7d:81:4f:de:5b:52:e3:d1:7c:92:f3:e7:ee:84:
63:87:75:f8:17:ae:15:8d:a1:64:49:d6:57:77:0e:3e:b9:5a:
e7:e5:f3:86:a8:dc:90:be:a7:19:24:45:12:28:26:c4:e1:7c:
2a:b1:35:94:cb:40:67:bb:f8:93:07:4b:4c:5c:f9:40:99:d2:
86:2b:df:45:59:b4:ac:ec:62:e0:99:71:c7:92:00:04:b0:ef:
67:4b:c7:b3:49:51:0e:ca:36:cb:0b:25:b6:83:cd:0b:ee:b6:
ab:81:03:0f:1c:f8:0f:d4:b1:29:92:cb:b0:fb:f0:70:b2:62:
84:c1:28:1f:47:d2:92:96:83:ef:07:e1:4d:14:8f:0a:65:5f:
6b:44:26:d4:11:f5:6d:45:e6:7e:cf:f0:c3:59:04:76:44:90:
3f:3d:37:da:2f:ed:b7:f6:fc:f0:77:12:0e:c1:d1:d1:22:d0:
b8:f6:c2:7f:2c:77:95:27:a4:53:02:bb:f2:a1:29:b0:e0:3e:
57:a3:3a:6b:4b:8c:68:6a:b0:50:a9:d0:4d:f9:f5:2f:44:3d:
00:e5:19:72:df:f1:a3:a4:ef:4f:38:e6:5b:1d:11:de:c3:0d:
82:20:b2:15
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAaBpnSCWktucMSHuCYisVudrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1
OGE0YzAwHhcNMjYwOTAzMjMzMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTAzNGE0Y2Q1YWU4ZGMzNDY4YTA1ZDVmMjk2NDc5MDA1NGMzNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQeyLbWvKHboHb7XrYXvE7SlwYCM
HWVG7ybNOilamMzga6XF0qI/+1SZBGQODYjuylxz2x2L8veTKhtZdM6erDOAX74z
ZV4HSo6wskvLpnH0zyfBfLIASgiLLGsA4k111PnBH/1kH/s2DZlKDcvkgCIphuSx
7T/8QswRlcrpljflp+njsLVRx0HoKwmMIZVwlqvWU6rGIfzlvgmot37ua8JSWH7N
foGbJOwQcN7O8Za3unIRIlefpBAenydLaPjaiWCwx2JcihSoM312R9kiJXKirgT2
jBbswe4mobt8tRaNDu5nCUD4ypZCeYwO56/jMbM68W+ls3XMxPFF8kfuoQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFBUDSkzVro3DRooF1fKWR5AFTDWRMB8GA1UdIwQY
MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt
Y2U1NzE1MDY5NWE5LzEvRlFOS1ROV3VqY05HaWdYVjhwWkhrQVZNTlpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5
LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzAwBAIAATAqAwQCBbbQAwQA
PkRHAwQAW9nIAwQAW+LjAwQAW+YxAwQAuS5GAwQCufQkMBsEAgACMBUDBQMqDSQA
AwUDKg0ngAMFAyoOIAAwDQYJKoZIhvcNAQELBQADggEBAInQIFTWf4c3vB09z1ld
yJGBDZqI/Lx9gU/eW1Lj0XyS8+fuhGOHdfgXrhWNoWRJ1ld3Dj65Wufl84ao3JC+
pxkkRRIoJsThfCqxNZTLQGe7+JMHS0xc+UCZ0oYr30VZtKzsYuCZcceSAASw72dL
x7NJUQ7KNssLJbaDzQvutquBAw8c+A/UsSmSy7D78HCyYoTBKB9H0pKWg+8H4U0U
jwplX2tEJtQR9W1F5n7P8MNZBHZEkD89N9ov7bf2/PB3Eg7B0dEi0Lj2wn8sd5Un
pFMCu/KhKbDgPlejOmtLjGhqsFCp0E359S9EPQDlGXLf8aOk70845lsdEd7DDYIg
shU=
-----END CERTIFICATE-----
Generated at Sat Sep 19 00:08:05 2026 by rpki-client