Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/fPrz8jPJEk9lWUWa88NgBMGn76U.roa
File: fPrz8jPJEk9lWUWa88NgBMGn76U.roa (raw, json)
Hash identifier: JiBo3DSQpARHAej5zMxRDRB9J/XVNOly/XQgzdS8cVM=
Subject key identifier: 7C:FA:F3:F2:33:C9:12:4F:65:59:45:9A:F3:C3:60:04:C1:A7:EF:A5
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019E5B1A64DF44DE4EE18F48D0932E851897
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/fPrz8jPJEk9lWUWa88NgBMGn76U.roa
Signing time: Sun 24 May 2026 17:48:36 +0000
ROA not before: Sun 24 May 2026 17:48:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50529
IP address blocks: 2a05:3d40::/29 maxlen: 29
2a05:b440::/29 maxlen: 29
2a05:c500::/29 maxlen: 29
2a06:5c00::/29 maxlen: 29
2a06:77c0::/29 maxlen: 29
2a06:b180::/29 maxlen: 29
2a07:3700::/29 maxlen: 29
2a07:bc40::/29 maxlen: 29
2a07:cc40::/29 maxlen: 29
2a09:a80::/29 maxlen: 29
2a09:1100::/29 maxlen: 29
2a09:1200::/29 maxlen: 29
2a09:1a00::/29 maxlen: 29
2a09:2380::/29 maxlen: 29
2a09:2a80::/29 maxlen: 29
2a09:2c80::/29 maxlen: 29
2a09:2d00::/29 maxlen: 29
2a09:3280::/29 maxlen: 29
2a09:3480::/29 maxlen: 29
2a09:3780::/29 maxlen: 29
2a09:3a80::/29 maxlen: 29
2a09:3f80::/29 maxlen: 29
2a09:4000::/29 maxlen: 29
2a09:4100::/29 maxlen: 29
2a09:4a00::/29 maxlen: 29
2a09:5200::/29 maxlen: 29
2a09:5280::/29 maxlen: 29
2a09:7980::/29 maxlen: 29
2a09:7c80::/29 maxlen: 29
2a09:8100::/29 maxlen: 29
2a09:8800::/29 maxlen: 29
2a09:8e00::/29 maxlen: 29
2a09:8f00::/29 maxlen: 29
2a09:8f40::/29 maxlen: 29
2a09:91c0::/29 maxlen: 29
2a09:9480::/29 maxlen: 29
2a09:9640::/29 maxlen: 29
2a09:9800::/29 maxlen: 29
2a09:9d80::/29 maxlen: 29
2a09:a880::/29 maxlen: 29
2a09:b980::/29 maxlen: 29
2a09:cb40::/29 maxlen: 29
2a09:d440::/29 maxlen: 29
2a09:e000::/29 maxlen: 29
2a09:ed00::/29 maxlen: 29
2a09:f500::/29 maxlen: 29
2a0a:6c0::/29 maxlen: 29
2a0a:780::/29 maxlen: 29
2a0a:1f80::/29 maxlen: 29
2a0a:c500::/29 maxlen: 29
2a0a:ebc0::/29 maxlen: 29
2a0b:5780::/29 maxlen: 29
2a0b:9c80::/29 maxlen: 29
2a0b:ac80::/29 maxlen: 29
2a0b:f340::/29 maxlen: 29
2a0c:3740::/29 maxlen: 29
2a0c:4a80::/29 maxlen: 29
2a0c:5580::/29 maxlen: 29
2a0c:8580::/29 maxlen: 29
2a0c:a280::/29 maxlen: 29
2a0d:1800::/29 maxlen: 29
2a0d:4840::/29 maxlen: 29
2a0d:64c0::/29 maxlen: 29
2a0d:8740::/29 maxlen: 29
2a0d:d2c0::/29 maxlen: 29
2a0d:e040::/29 maxlen: 29
2a0d:fac0::/29 maxlen: 29
2a0e:2340::/29 maxlen: 29
2a0e:2bc0::/29 maxlen: 29
2a0e:4e40::/29 maxlen: 29
2a0e:4ec0::/29 maxlen: 29
2a0e:5500::/29 maxlen: 29
2a0e:61c0::/29 maxlen: 29
2a0e:6d80::/29 maxlen: 29
2a0e:7840::/29 maxlen: 29
2a0e:7940::/29 maxlen: 29
2a0e:86c0::/29 maxlen: 29
2a0e:90c0::/29 maxlen: 29
2a0e:9600::/29 maxlen: 29
2a0e:a040::/29 maxlen: 29
2a0e:a340::/29 maxlen: 29
2a0e:a740::/29 maxlen: 29
2a0e:b840::/29 maxlen: 29
2a0e:bc80::/29 maxlen: 29
2a0e:bd40::/29 maxlen: 29
2a0e:c540::/29 maxlen: 29
2a0e:c8c0::/29 maxlen: 29
2a0e:cc40::/29 maxlen: 29
2a0e:d900::/29 maxlen: 29
2a0e:da00::/29 maxlen: 29
2a0e:ea40::/29 maxlen: 29
2a0e:f740::/29 maxlen: 29
2a0e:fbc0::/29 maxlen: 29
2a0f:880::/29 maxlen: 29
2a0f:ec0::/29 maxlen: 29
2a0f:1280::/29 maxlen: 29
2a0f:26c0::/29 maxlen: 29
2a0f:4140::/29 maxlen: 29
2a0f:5600::/29 maxlen: 29
2a0f:5a00::/29 maxlen: 29
2a0f:65c0::/29 maxlen: 29
2a0f:9e40::/29 maxlen: 29
2a0f:aa00::/29 maxlen: 29
2a0f:b600::/29 maxlen: 29
2a0f:b800::/29 maxlen: 29
2a0f:c880::/29 maxlen: 29
2a12:3c0::/29 maxlen: 29
2a12:4bc0::/29 maxlen: 29
2a12:4cc0::/29 maxlen: 29
2a12:4d40::/29 maxlen: 29
2a12:4dc0::/29 maxlen: 29
2a12:4fc0::/29 maxlen: 29
2a12:55c0::/29 maxlen: 29
2a12:a880::/29 maxlen: 29
2a12:e700::/29 maxlen: 29
2a12:ed80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5b:1a:64:df:44:de:4e:e1:8f:48:d0:93:2e:85:18:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: May 24 17:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cfaf3f233c9124f6559459af3c36004c1a7efa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:5f:21:d0:a5:6b:43:6a:c3:48:ec:bd:ba:
8c:b5:17:cd:1f:0c:ef:22:70:3f:68:46:7f:ad:8e:
ff:25:05:3b:49:5b:2c:18:73:c8:db:89:a9:75:18:
5a:40:c2:30:48:6b:6b:ec:ae:c7:6a:9b:cb:78:7e:
a6:86:30:fd:2e:6e:69:32:69:04:4c:2c:b2:a7:34:
fc:24:a9:13:76:50:62:f9:bd:47:f9:f7:54:23:5d:
8a:85:cc:12:66:6c:77:8c:c4:84:7b:10:b6:ec:01:
54:81:55:fe:ca:78:a9:46:99:54:f1:26:b8:62:10:
88:24:11:df:c4:26:1a:04:1e:8e:0a:12:61:8a:90:
d3:01:08:d5:06:16:1b:dc:9d:4e:ba:56:2d:5d:e8:
06:3d:0b:86:c6:76:6b:83:8c:ea:3c:8e:e9:60:43:
c3:c3:05:39:91:5e:80:54:1a:cd:87:83:81:e2:17:
fc:63:57:a1:d2:02:c0:b7:cb:01:ab:a0:84:83:dc:
27:2d:2e:42:53:54:d4:56:53:8f:10:17:27:84:25:
01:2b:88:a4:27:28:81:01:84:a2:1b:ff:e2:8d:39:
af:da:e6:7e:32:09:0b:63:62:90:0b:0f:54:8b:f5:
46:58:6c:fb:4f:55:a7:08:b0:b4:3c:12:b9:df:07:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FA:F3:F2:33:C9:12:4F:65:59:45:9A:F3:C3:60:04:C1:A7:EF:A5
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/fPrz8jPJEk9lWUWa88NgBMGn76U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:3d40::/29
2a05:b440::/29
2a05:c500::/29
2a06:5c00::/29
2a06:77c0::/29
2a06:b180::/29
2a07:3700::/29
2a07:bc40::/29
2a07:cc40::/29
2a09:a80::/29
2a09:1100::/29
2a09:1200::/29
2a09:1a00::/29
2a09:2380::/29
2a09:2a80::/29
2a09:2c80::/29
2a09:2d00::/29
2a09:3280::/29
2a09:3480::/29
2a09:3780::/29
2a09:3a80::/29
2a09:3f80::/29
2a09:4000::/29
2a09:4100::/29
2a09:4a00::/29
2a09:5200::/29
2a09:5280::/29
2a09:7980::/29
2a09:7c80::/29
2a09:8100::/29
2a09:8800::/29
2a09:8e00::/29
2a09:8f00::/29
2a09:8f40::/29
2a09:91c0::/29
2a09:9480::/29
2a09:9640::/29
2a09:9800::/29
2a09:9d80::/29
2a09:a880::/29
2a09:b980::/29
2a09:cb40::/29
2a09:d440::/29
2a09:e000::/29
2a09:ed00::/29
2a09:f500::/29
2a0a:6c0::/29
2a0a:780::/29
2a0a:1f80::/29
2a0a:c500::/29
2a0a:ebc0::/29
2a0b:5780::/29
2a0b:9c80::/29
2a0b:ac80::/29
2a0b:f340::/29
2a0c:3740::/29
2a0c:4a80::/29
2a0c:5580::/29
2a0c:8580::/29
2a0c:a280::/29
2a0d:1800::/29
2a0d:4840::/29
2a0d:64c0::/29
2a0d:8740::/29
2a0d:d2c0::/29
2a0d:e040::/29
2a0d:fac0::/29
2a0e:2340::/29
2a0e:2bc0::/29
2a0e:4e40::/29
2a0e:4ec0::/29
2a0e:5500::/29
2a0e:61c0::/29
2a0e:6d80::/29
2a0e:7840::/29
2a0e:7940::/29
2a0e:86c0::/29
2a0e:90c0::/29
2a0e:9600::/29
2a0e:a040::/29
2a0e:a340::/29
2a0e:a740::/29
2a0e:b840::/29
2a0e:bc80::/29
2a0e:bd40::/29
2a0e:c540::/29
2a0e:c8c0::/29
2a0e:cc40::/29
2a0e:d900::/29
2a0e:da00::/29
2a0e:ea40::/29
2a0e:f740::/29
2a0e:fbc0::/29
2a0f:880::/29
2a0f:ec0::/29
2a0f:1280::/29
2a0f:26c0::/29
2a0f:4140::/29
2a0f:5600::/29
2a0f:5a00::/29
2a0f:65c0::/29
2a0f:9e40::/29
2a0f:aa00::/29
2a0f:b600::/29
2a0f:b800::/29
2a0f:c880::/29
2a12:3c0::/29
2a12:4bc0::/29
2a12:4cc0::/29
2a12:4d40::/29
2a12:4dc0::/29
2a12:4fc0::/29
2a12:55c0::/29
2a12:a880::/29
2a12:e700::/29
2a12:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
b2:db:21:8a:f5:a6:46:dc:f3:11:84:4a:d7:f0:b5:dc:32:41:
87:8a:0f:1f:2d:7c:ee:59:eb:03:2c:6b:2f:8e:51:5a:a3:e0:
f7:6b:d6:f5:f8:50:b0:18:d0:c0:de:e3:ad:2a:2b:1b:ad:92:
72:44:2c:00:5d:26:d3:86:89:a0:55:0c:98:fa:bb:f6:6b:28:
30:f9:ba:fc:55:ea:e7:d8:a0:45:9a:05:2d:f0:de:73:0f:e2:
e4:cd:96:28:d4:b5:ca:97:d3:15:c3:5e:6c:d8:69:8a:ef:34:
22:0b:5e:77:6a:50:f4:19:73:87:07:81:5f:4d:8d:04:0c:2c:
48:fd:20:27:3b:c1:b2:d3:ea:d7:b6:4c:84:b6:46:f4:66:5b:
89:a9:f6:b7:60:3e:57:47:16:50:ec:0f:23:e4:80:34:73:51:
1f:19:36:57:22:34:60:32:21:d5:e5:d1:b9:af:e5:80:dd:46:
ac:c7:a6:cf:aa:a6:06:35:c1:fc:e1:93:fe:53:b1:ff:46:b6:
e4:4f:50:9f:63:0b:07:45:db:fd:31:a3:37:67:e5:0b:eb:86:
6f:64:2a:0e:99:e5:7f:d0:35:7a:b6:ae:2e:7a:03:e3:79:4a:
15:5b:40:64:fd:62:bb:a1:dd:43:4d:00:88:f8:e4:66:33:ba:
11:44:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:36 2026 by rpki-client