Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Fa_g5ufSuvqkGMhbvztPhmXldCw.roa
File: Fa_g5ufSuvqkGMhbvztPhmXldCw.roa (raw, json)
Hash identifier: firUXWafIRa05XY/VmAQ2VmHW3x9z2CVX5SexmWR/LE=
Subject key identifier: 15:AF:E0:E6:E7:D2:BA:FA:A4:18:C8:5B:BF:3B:4F:86:65:E5:74:2C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A06BBDE0C19672A5B49D92BDEEEA0CC196
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Fa_g5ufSuvqkGMhbvztPhmXldCw.roa
Signing time: Fri 04 Sep 2026 09:26:41 +0000
ROA not before: Fri 04 Sep 2026 09:26:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 194.231.194.0/24 maxlen: 24
195.162.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 17:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:bd:e0:c1:96:72:a5:b4:9d:92:bd:ee:ea:0c:c1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 4 09:26:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15afe0e6e7d2bafaa418c85bbf3b4f8665e5742c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:a3:3f:5e:a9:d6:6f:99:8d:59:ce:92:62:
07:c2:b0:d4:1a:e3:e0:d3:a8:73:82:3e:69:3b:d0:
90:aa:28:09:ee:a4:09:8c:7f:bc:a4:90:57:0a:98:
0b:b6:70:b6:63:b0:03:95:4a:aa:05:e4:5e:34:db:
77:c0:77:32:42:ae:25:0b:e4:a4:c1:fc:f8:2c:6d:
ad:dd:79:bb:bc:79:78:16:f2:c3:05:26:bd:13:4a:
08:3e:7a:08:ae:50:af:b4:3b:de:4b:8a:d9:9b:04:
84:0d:c2:c0:e4:ac:d3:32:99:06:fc:77:84:2b:47:
25:c9:bf:19:f8:bb:bd:4a:64:18:c5:d3:88:a0:0d:
6b:6e:82:e4:f4:27:8f:a9:61:38:18:80:b5:42:bf:
bf:77:31:92:b6:7f:34:eb:55:f7:02:a0:19:c2:54:
b6:45:40:e6:de:18:3b:89:c8:37:04:85:17:4f:1a:
37:9b:fe:c4:7c:36:2e:cb:64:8c:9a:0f:92:ae:6b:
62:0e:d0:9b:bf:c4:23:ca:4d:4d:a4:8d:43:36:48:
f9:0e:86:3c:dd:9e:fb:1b:6f:e1:5a:4b:6e:cf:24:
52:a6:63:27:ea:41:62:50:59:b4:ae:d5:85:a7:3f:
d7:26:19:60:7c:22:f1:f1:31:f6:5a:1c:fc:ed:c9:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AF:E0:E6:E7:D2:BA:FA:A4:18:C8:5B:BF:3B:4F:86:65:E5:74:2C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Fa_g5ufSuvqkGMhbvztPhmXldCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.194.0/24
195.162.247.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:72:59:f6:f5:35:c4:ca:53:66:98:90:db:4f:3b:e4:a1:5d:
dc:65:fb:77:19:c8:e1:32:1c:1e:ef:be:b6:81:10:21:33:b6:
7b:0b:52:95:c9:5f:e3:79:37:b0:d2:98:6e:54:36:b2:ff:28:
f3:f6:63:40:13:ec:96:66:1f:c9:9c:28:c3:db:93:30:cb:1a:
18:77:4e:e9:f5:ee:bb:7a:77:18:ff:a5:f7:a9:53:53:ab:ff:
19:23:36:3f:b0:3f:1c:04:2f:35:cf:da:15:fa:66:88:47:a4:
55:37:91:a4:64:f3:44:90:eb:ca:d3:4c:27:17:9e:d5:aa:d2:
d3:06:e4:64:d0:9f:a9:04:90:87:b7:91:4e:e5:1e:1a:a0:e1:
df:6a:8b:8e:9f:44:df:89:ea:b7:d1:5b:ae:52:17:c4:ac:c1:
98:72:df:29:d3:e2:e4:64:7d:49:67:0b:b0:62:25:40:73:79:
48:35:1f:b0:3d:a5:8d:c1:d3:e9:2a:2c:f2:02:29:9a:70:73:
02:6b:53:86:3a:6c:2f:72:05:88:9f:da:d8:71:08:e9:0e:dc:
a4:54:69:cd:c5:30:b4:e2:e8:45:4f:a8:b5:56:02:3e:04:53:
81:0f:81:f8:48:c5:ce:ed:ab:dd:a7:4d:63:fb:01:9f:03:69:
55:eb:39:8d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBrveDBlnKltJ2Sve7qDMGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTA0MDkyNjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWFmZTBlNmU3ZDJiYWZhYTQxOGM4NWJiZjNiNGY4NjY1ZTU3NDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1OjP16p1m+ZjVnOkmIHwrDUGuPg
06hzgj5pO9CQqigJ7qQJjH+8pJBXCpgLtnC2Y7ADlUqqBeReNNt3wHcyQq4lC+Sk
wfz4LG2t3Xm7vHl4FvLDBSa9E0oIPnoIrlCvtDveS4rZmwSEDcLA5KzTMpkG/HeE
K0clyb8Z+Lu9SmQYxdOIoA1rboLk9CePqWE4GIC1Qr+/dzGStn8061X3AqAZwlS2
RUDm3hg7icg3BIUXTxo3m/7EfDYuy2SMmg+SrmtiDtCbv8Qjyk1NpI1DNkj5DoY8
3Z77G2/hWktuzyRSpmMn6kFiUFm0rtWFpz/XJhlgfCLx8TH2Whz87cmmgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBWv4Obn0rr6pBjIW787T4Zl5XQsMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvRmFfZzV1ZlN1dnFrR01oYnZ6dFBobVhsZEN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwufCAwQA
w6L3MA0GCSqGSIb3DQEBCwUAA4IBAQDhcln29TXEylNmmJDbTzvkoV3cZft3Gcjh
Mhwe7762gRAhM7Z7C1KVyV/jeTew0phuVDay/yjz9mNAE+yWZh/JnCjD25MwyxoY
d07p9e67encY/6X3qVNTq/8ZIzY/sD8cBC81z9oV+maIR6RVN5GkZPNEkOvK00wn
F57VqtLTBuRk0J+pBJCHt5FO5R4aoOHfaouOn0Tfieq30VuuUhfErMGYct8p0+Lk
ZH1JZwuwYiVAc3lINR+wPaWNwdPpKizyAimacHMCa1OGOmwvcgWIn9rYcQjpDtyk
VGnNxTC04uhFT6i1VgI+BFOBD4H4SMXO7avdp01j+wGfA2lV6zmN
-----END CERTIFICATE-----
Generated at Wed Sep 9 01:32:41 2026 by rpki-client