Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/fmT6qGd_82DfL36JETvp_cYAJEA.roa
File: fmT6qGd_82DfL36JETvp_cYAJEA.roa (raw, json)
Hash identifier: +LPv3kGR0ahEJ11+PYzJHGAwvNRYkD0wo7DqeBKeWd0=
Subject key identifier: 7E:64:FA:A8:67:7F:F3:60:DF:2F:7E:89:11:3B:E9:FD:C6:00:24:40
Certificate issuer: /CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Certificate serial: 019F23688A690CF0CC9CFFED59513854EEE3
Authority key identifier: 29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/fmT6qGd_82DfL36JETvp_cYAJEA.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 213.109.176.0/24 maxlen: 24
213.109.177.0/24 maxlen: 24
213.109.178.0/24 maxlen: 24
213.109.179.0/24 maxlen: 24
2a00:de61::/40 maxlen: 48
2a00:de61:100::/40 maxlen: 48
2a00:de61:200::/40 maxlen: 48
2a00:de61:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8a:69:0c:f0:cc:9c:ff:ed:59:51:38:54:ee:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e64faa8677ff360df2f7e89113be9fdc6002440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:5f:2b:a2:d4:15:81:f3:23:0c:ab:4c:d0:
54:2e:61:7c:5d:30:e2:93:6e:e6:be:15:73:5c:b9:
b2:0e:94:1b:7b:12:0d:78:c1:c8:30:94:e9:62:82:
c9:70:d0:6d:2b:f6:ca:f7:0d:23:10:77:5a:d1:4a:
72:d2:72:cf:9d:f2:b4:e6:fc:f5:1c:07:34:30:28:
f8:32:95:06:60:15:97:e7:a9:48:98:b2:0a:cd:59:
34:39:11:5a:a7:8c:76:8d:8e:9d:b5:e8:16:cf:9d:
40:53:cb:79:ac:83:85:28:c9:a1:8c:25:bd:95:a0:
3c:81:0a:0b:5d:51:2f:fe:72:89:4a:84:41:4a:35:
a9:ec:04:03:7f:26:c3:64:e4:f9:3a:6a:bd:e3:74:
f9:11:8d:fa:97:3c:ed:0b:4f:92:0c:91:98:1c:fa:
74:45:8d:7f:80:85:72:cb:e4:25:a1:4c:2e:0f:f3:
05:50:e7:6e:4b:3e:0c:15:1a:b4:da:19:af:94:1b:
5a:3a:74:15:d9:67:53:9b:3e:4c:d7:97:ea:db:23:
98:8c:01:c8:d6:39:bc:e3:60:22:51:05:a6:67:91:
94:3b:c6:cc:1a:78:54:7d:16:38:29:89:2c:c1:b2:
a0:0c:87:87:32:a9:c2:d5:f7:6d:a1:06:b0:ba:7b:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:64:FA:A8:67:7F:F3:60:DF:2F:7E:89:11:3B:E9:FD:C6:00:24:40
X509v3 Authority Key Identifier:
keyid:29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/fmT6qGd_82DfL36JETvp_cYAJEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.176.0/22
IPv6:
2a00:de61::/38
Signature Algorithm: sha256WithRSAEncryption
4e:a5:d1:ac:91:11:58:11:6f:1b:dd:91:72:76:a0:c7:8b:de:
52:c7:e9:0f:1f:03:eb:bf:8a:0f:69:90:a8:42:73:31:dc:43:
50:11:27:ef:b5:fc:fd:79:21:6e:ea:46:29:d2:07:dd:1e:86:
c0:b8:f3:b0:6c:50:f1:08:9b:35:5b:e8:1e:ff:ad:d3:c9:fd:
88:f2:8e:40:cd:83:3f:23:a8:79:2f:6e:1e:6d:d5:9a:56:ad:
f2:fd:0c:79:f0:0a:28:0e:ed:6c:8d:c4:40:16:5e:8f:ec:9c:
ba:94:4c:15:ba:e4:82:c2:af:e6:51:b5:bd:11:ee:82:87:e0:
77:4a:c9:98:0d:56:12:b6:8b:b3:44:00:eb:32:ba:61:64:24:
5b:cb:2b:a1:95:94:c1:ed:4a:ce:24:de:41:0a:11:cd:f9:f9:
48:e4:31:26:1d:13:f4:80:30:74:10:62:39:dd:34:29:fa:e9:
80:8f:f9:25:e7:22:62:dc:72:a8:a2:65:6c:76:6c:17:81:38:
f5:1b:eb:76:f8:42:c0:5f:08:fd:fc:55:5f:44:69:46:17:a3:
92:5a:cb:76:f3:48:1d:19:8f:a9:6a:05:0c:29:d1:c6:92:e1:
d0:37:21:47:da:22:0a:d0:fd:09:e0:15:50:ba:95:d9:61:71:
fe:56:f9:70
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZ8jaIppDPDMnP/tWVE4VO7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2EwZDljODYxNGY1MzJiZGU5ZjQ2NWRkNGY3N2E2ODEx
N2U5NTYwHhcNMjYwNzAyMTUxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTY0ZmFhODY3N2ZmMzYwZGYyZjdlODkxMTNiZTlmZGM2MDAyNDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor9fK6LUFYHzIwyrTNBULmF8XTDi
k27mvhVzXLmyDpQbexINeMHIMJTpYoLJcNBtK/bK9w0jEHda0Upy0nLPnfK05vz1
HAc0MCj4MpUGYBWX56lImLIKzVk0ORFap4x2jY6dtegWz51AU8t5rIOFKMmhjCW9
laA8gQoLXVEv/nKJSoRBSjWp7AQDfybDZOT5Omq943T5EY36lzztC0+SDJGYHPp0
RY1/gIVyy+QloUwuD/MFUOduSz4MFRq02hmvlBtaOnQV2WdTmz5M15fq2yOYjAHI
1jm842AiUQWmZ5GUO8bMGnhUfRY4KYkswbKgDIeHMqnC1fdtoQawunseFwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFH5k+qhnf/Ng3y9+iRE76f3GACRAMB8GA1UdIwQY
MBaAFCl6DZyGFPUyven0Zd1Pd6aBF+lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hvTm5JWVU5VEs5NmZSbDNVOTNwb0VYNlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iYTI3ZmItMjU1MC00OWFkLWIwZWYt
NWI4M2QwZTk2MDEyLzEvZm1UNnFHZF84MkRmTDM2SkVUdnBfY1lBSkVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iYTI3ZmItMjU1MC00OWFkLWIwZWYtNWI4M2QwZTk2MDEy
LzEvS1hvTm5JWVU5VEs5NmZSbDNVOTNwb0VYNlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC1W2wMA4E
AgACMAgDBgIqAN5hADANBgkqhkiG9w0BAQsFAAOCAQEATqXRrJERWBFvG92Rcnag
x4veUsfpDx8D67+KD2mQqEJzMdxDUBEn77X8/XkhbupGKdIH3R6GwLjzsGxQ8Qib
NVvoHv+t08n9iPKOQM2DPyOoeS9uHm3Vmlat8v0MefAKKA7tbI3EQBZej+ycupRM
FbrkgsKv5lG1vRHugofgd0rJmA1WEraLs0QA6zK6YWQkW8sroZWUwe1KziTeQQoR
zfn5SOQxJh0T9IAwdBBiOd00KfrpgI/5JeciYtxyqKJlbHZsF4E49RvrdvhCwF8I
/fxVX0RpRhejklrLdvNIHRmPqWoFDCnRxpLh0DchR9oiCtD9CeAVULqV2WFx/lb5
cA==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:13 2026 by rpki-client