Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/FuCsxGCGobQGcxKGgX1_sItFuMQ.roa
File: FuCsxGCGobQGcxKGgX1_sItFuMQ.roa (raw, json)
Hash identifier: KKMKdDfkKvtecewLoB0jeo5sDVD5DcUeJ1Tre1HrWv8=
Subject key identifier: 16:E0:AC:C4:60:86:A1:B4:06:73:12:86:81:7D:7F:B0:8B:45:B8:C4
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 01A166C7D8C86296B9CD8D267F14E3E8B884
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/FuCsxGCGobQGcxKGgX1_sItFuMQ.roa
Signing time: Fri 23 Oct 2026 03:22:15 +0000
ROA not before: Fri 23 Oct 2026 03:22:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33991
IP address blocks: 82.146.16.0/22 maxlen: 22
185.50.4.0/23 maxlen: 23
185.50.6.0/24 maxlen: 24
185.81.180.0/22 maxlen: 22
195.191.231.0/24 maxlen: 24
195.211.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:c7:d8:c8:62:96:b9:cd:8d:26:7f:14:e3:e8:b8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Oct 23 03:22:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16e0acc46086a1b406731286817d7fb08b45b8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:77:e7:6e:2c:13:f3:2d:0b:b6:44:d7:8b:
db:8e:57:4d:f5:d0:82:94:a6:37:64:b9:97:3b:7f:
86:5d:68:b4:70:06:15:95:d9:62:c6:8f:8a:18:34:
99:a3:bb:56:28:b9:6f:70:79:a6:6f:a6:04:67:8f:
45:40:b8:a7:32:70:0e:d8:d0:ef:99:b8:2d:6e:0e:
d9:8e:00:1b:81:c4:04:42:8c:43:e2:d4:35:80:24:
50:a6:97:2f:8f:26:6a:6f:4b:1f:09:6f:01:4e:cd:
fb:16:76:3c:2a:a8:9f:c7:c0:83:8e:60:76:69:57:
f8:ba:1e:78:86:44:36:00:2a:ec:2f:9a:65:5b:a2:
c9:f4:62:64:c4:2a:7b:2a:f4:ea:02:41:5c:e5:04:
d9:1e:93:17:70:94:25:fc:6f:57:24:32:a6:fe:3d:
bb:01:24:af:75:1b:e6:26:a0:ae:36:9c:d1:13:5f:
99:f1:bb:b8:d0:63:76:2c:2e:4b:9e:5c:7f:c9:42:
a8:72:fb:6f:9d:49:3c:53:a2:61:a8:a1:72:bb:fc:
91:37:19:22:e1:72:97:cd:4e:68:f0:30:93:27:ea:
ff:60:f8:a2:24:3d:38:0a:da:40:2a:6a:d5:8c:04:
8e:ca:25:d8:f5:ff:00:9c:57:46:67:ca:33:6e:be:
f8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E0:AC:C4:60:86:A1:B4:06:73:12:86:81:7D:7F:B0:8B:45:B8:C4
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/FuCsxGCGobQGcxKGgX1_sItFuMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.16.0/22
185.50.4.0-185.50.6.255
185.81.180.0/22
195.191.231.0/24
195.211.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:76:40:b5:87:fa:a2:2a:11:89:c9:4d:a3:19:8c:2e:7e:1e:
9b:c2:72:e1:bf:fa:c0:27:89:dc:d4:1d:f4:23:f2:64:71:eb:
26:90:69:59:e8:ba:49:62:5f:da:20:7e:fc:b5:6b:42:c4:54:
df:38:8a:b6:d0:ac:d7:69:d1:f6:f8:87:7d:a9:45:32:93:b1:
3f:ed:02:29:90:df:90:a6:2a:e4:18:35:97:4f:04:bb:2a:d4:
1f:e7:82:ef:c1:80:ee:be:7e:02:6b:e7:9a:1e:e0:71:59:d0:
ac:6e:d1:11:44:4f:7e:24:40:66:88:0e:29:5c:5f:2a:5d:c2:
af:69:41:23:58:2e:33:45:db:6d:40:ac:34:e6:7b:0d:73:26:
44:4d:85:f8:5b:fe:2a:ed:f5:2a:83:07:7e:6e:80:3d:69:2d:
81:26:ed:ce:52:2b:63:0a:f1:68:65:9d:31:dd:b7:ba:a7:d5:
a8:57:79:bc:a0:99:35:69:f6:25:bf:b1:48:48:6c:71:ad:22:
fb:2c:7d:9b:5e:81:5e:dd:0a:2d:70:bd:f6:80:d2:c8:0a:1c:
19:f0:0b:2d:89:9f:a3:e5:85:18:64:a2:09:a3:ea:d4:b0:43:
6d:0c:79:3c:34:85:0f:65:70:ff:67:e0:c2:34:f5:48:e1:dc:
10:e2:9d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 15:48:37 2026 by rpki-client