Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/Fag_-4Y1Ca3eJmzPJzZsnoWeEhE.roa
File: Fag_-4Y1Ca3eJmzPJzZsnoWeEhE.roa (raw, json)
Hash identifier: Yf29YV0BbQQtiRrP1gHJzaYdNv3Dn8ojz+UE6LkKdVc=
Subject key identifier: 15:A8:3F:FB:86:35:09:AD:DE:26:6C:CF:27:36:6C:9E:85:9E:12:11
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 01A0EF5FF8EDB9FF8925119C9A0F437DEEF3
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/Fag_-4Y1Ca3eJmzPJzZsnoWeEhE.roa
Signing time: Tue 29 Sep 2026 22:53:59 +0000
ROA not before: Tue 29 Sep 2026 22:53:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210619
IP address blocks: 185.137.221.0/24 maxlen: 24
185.137.222.0/24 maxlen: 24
185.137.223.0/24 maxlen: 24
193.36.4.0/24 maxlen: 24
193.36.5.0/24 maxlen: 24
193.36.6.0/24 maxlen: 24
193.36.7.0/24 maxlen: 24
2a0a:a501::/32 maxlen: 32
2a0a:a501::/48 maxlen: 48
2a0a:a502::/32 maxlen: 32
2a0a:a502::/48 maxlen: 48
2a0a:a503::/32 maxlen: 32
2a0a:a504::/32 maxlen: 32
2a0a:a505::/32 maxlen: 32
2a0a:a507::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:5f:f8:ed:b9:ff:89:25:11:9c:9a:0f:43:7d:ee:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Sep 29 22:53:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15a83ffb863509adde266ccf27366c9e859e1211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:f6:5e:99:0c:93:46:09:80:a9:ff:fb:de:
a8:69:5a:da:40:11:fe:b0:1d:fa:a4:b8:28:29:cc:
9c:b3:8d:27:3a:2f:98:8f:a1:c6:df:91:32:03:a6:
37:e9:a1:3b:0c:38:6e:ee:f3:d4:d5:88:d6:bd:fa:
d6:77:b2:36:64:c7:1b:ea:0f:96:b3:5e:ec:34:74:
c2:f7:3d:06:6e:73:6d:26:43:ec:92:b1:45:3d:78:
27:6c:fd:45:bd:b4:f2:cf:52:d8:62:f3:67:33:e4:
97:db:d6:78:37:6c:98:b5:cf:24:5c:0f:02:80:69:
be:83:92:7d:2e:df:c6:b7:8a:26:9d:63:91:2e:40:
4c:c7:b8:66:26:60:28:b0:21:e0:f7:c3:1e:4e:3e:
c7:8d:33:2a:90:dd:ec:80:26:42:4c:79:7d:11:3b:
8b:72:8b:91:51:00:20:00:17:98:d1:12:cd:8e:2b:
a7:84:ca:3b:d2:f6:c2:19:d6:d0:14:36:23:94:78:
48:b1:e6:2a:76:8a:58:c4:01:51:13:19:c2:c3:40:
3d:d9:89:9c:af:17:f3:71:76:55:05:4c:58:71:2f:
b6:76:26:03:cf:d7:fc:44:07:7d:eb:59:88:e4:a1:
21:02:4c:04:b7:ed:e9:5d:0e:53:04:69:57:51:bf:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A8:3F:FB:86:35:09:AD:DE:26:6C:CF:27:36:6C:9E:85:9E:12:11
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/Fag_-4Y1Ca3eJmzPJzZsnoWeEhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.221.0-185.137.223.255
193.36.4.0/22
IPv6:
2a0a:a501::-2a0a:a505:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:a507::/32
Signature Algorithm: sha256WithRSAEncryption
8e:ca:5d:58:e6:bd:0f:a4:26:ff:a8:23:7d:ba:d1:47:86:5e:
e4:9e:2e:e3:51:4e:40:69:41:d3:e1:69:43:7a:7a:23:21:b1:
f2:d4:59:dd:84:cf:49:86:57:0a:3b:1e:5e:bc:4a:62:56:f3:
4c:64:40:94:81:96:c4:01:d8:16:34:5e:9e:87:f9:b6:ea:e1:
f7:1c:2b:18:3c:62:06:ed:83:29:94:3b:84:5a:67:dd:e6:c7:
c8:67:eb:1f:23:9c:2d:ca:ea:90:23:c4:b0:f5:d3:d5:c7:f6:
c2:4c:b4:2b:00:79:80:82:ed:ba:dd:81:70:69:75:cf:27:de:
1b:77:8d:e6:4f:4e:95:16:3e:01:c5:1c:70:5a:d9:1d:52:e0:
a1:a0:b9:0a:59:6e:1b:c9:8c:a4:48:17:c0:0e:d7:3b:98:02:
68:18:6b:79:0b:82:f9:81:39:82:aa:9c:30:8d:5c:7f:d2:fa:
88:16:5f:dd:f7:d8:32:87:b5:72:58:1e:45:59:28:87:38:f5:
82:86:ea:6a:63:b7:a8:43:02:22:17:11:8b:02:67:c4:9f:19:
a3:44:53:e6:7c:0e:79:cd:99:6c:a8:ea:c1:3e:ca:a0:56:82:
6f:90:97:46:e9:da:78:1e:36:b3:25:3b:a4:71:98:01:ca:70:
59:cf:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:43 2026 by rpki-client