Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/6fa982-d4bd-428c-a944-b69e62cf126b/1/FNxc5qnaQQmpVjX17RyvN58NRsk.roa
File: FNxc5qnaQQmpVjX17RyvN58NRsk.roa (raw, json)
Hash identifier: jKvPtZpoVmYZUEPvo4EmtBVm45t8QzFXQSZLe47cM5I=
Subject key identifier: 14:DC:5C:E6:A9:DA:41:09:A9:56:35:F5:ED:1C:AF:37:9F:0D:46:C9
Certificate issuer: /CN=f49e49cfb9f90a09e7196c481ee0a3008cab6813
Certificate serial: 01A11C565897469C7A1497339E92EA1D1E46
Authority key identifier: F4:9E:49:CF:B9:F9:0A:09:E7:19:6C:48:1E:E0:A3:00:8C:AB:68:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9J5Jz7n5CgnnGWxIHuCjAIyraBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/6fa982-d4bd-428c-a944-b69e62cf126b/1/FNxc5qnaQQmpVjX17RyvN58NRsk.roa
Signing time: Thu 08 Oct 2026 16:26:23 +0000
ROA not before: Thu 08 Oct 2026 16:26:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213285
IP address blocks: 85.8.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/6fa982-d4bd-428c-a944-b69e62cf126b/1/9J5Jz7n5CgnnGWxIHuCjAIyraBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/6fa982-d4bd-428c-a944-b69e62cf126b/1/9J5Jz7n5CgnnGWxIHuCjAIyraBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9J5Jz7n5CgnnGWxIHuCjAIyraBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:56:58:97:46:9c:7a:14:97:33:9e:92:ea:1d:1e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49e49cfb9f90a09e7196c481ee0a3008cab6813
Validity
Not Before: Oct 8 16:26:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14dc5ce6a9da4109a95635f5ed1caf379f0d46c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:54:5b:5b:9d:1d:42:6c:dd:4e:ac:94:c8:92:
23:72:93:4b:a5:85:9a:f1:46:aa:8d:ca:24:22:b6:
9f:25:33:38:8b:ec:42:f5:c4:e5:6e:6b:42:3b:da:
8c:b4:55:6f:c9:97:67:65:b5:85:87:3d:72:eb:3c:
3d:ec:7a:25:85:67:f9:31:cc:1e:fe:36:5c:86:40:
e3:34:eb:e3:78:7d:2f:47:cf:ea:3a:6f:f5:b2:9b:
d1:50:48:65:d0:06:60:ed:84:f8:e8:de:30:07:69:
4b:bf:13:7f:4f:c2:8d:8f:9d:68:75:e3:92:70:8f:
9e:5c:43:6c:5f:29:c5:1b:68:c2:48:a6:d6:e2:93:
57:28:2c:df:09:06:11:0d:66:b4:b6:f0:93:67:33:
c0:b3:df:ab:80:14:f4:27:7d:a6:7e:41:7f:13:a4:
e8:a9:0d:2e:45:23:c1:f9:05:e9:a7:ed:a2:95:cc:
c6:68:c8:87:32:7b:ba:5e:6c:19:a0:77:a9:b6:82:
9c:53:c8:30:9c:99:68:08:35:4c:6e:70:20:f2:15:
ac:73:61:26:d8:53:26:2d:be:46:1c:ef:5f:b3:5c:
cd:e4:93:13:82:33:0b:37:a8:07:8d:a3:e0:86:e9:
ff:6a:4b:b4:26:07:a5:1e:9d:59:e9:62:af:da:ff:
2b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DC:5C:E6:A9:DA:41:09:A9:56:35:F5:ED:1C:AF:37:9F:0D:46:C9
X509v3 Authority Key Identifier:
keyid:F4:9E:49:CF:B9:F9:0A:09:E7:19:6C:48:1E:E0:A3:00:8C:AB:68:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9J5Jz7n5CgnnGWxIHuCjAIyraBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6fa982-d4bd-428c-a944-b69e62cf126b/1/FNxc5qnaQQmpVjX17RyvN58NRsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6fa982-d4bd-428c-a944-b69e62cf126b/1/9J5Jz7n5CgnnGWxIHuCjAIyraBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.226.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:7b:1a:27:9d:83:f0:bf:3e:83:17:d5:8c:dc:07:5b:eb:eb:
d7:c1:f8:fb:cf:03:40:31:97:b5:10:c2:fc:35:3a:4c:2d:81:
f0:7b:e1:ff:10:f9:d1:4c:3e:9a:18:c6:ee:b0:1b:72:6f:3a:
62:d1:2b:cd:3b:01:e6:99:0a:c9:61:c4:f0:6b:42:33:5a:e1:
0c:63:72:26:2a:f7:e7:dc:75:9f:dc:05:3e:9b:e2:79:28:b7:
7b:e7:37:c7:1e:c9:bf:fa:28:ff:9d:4b:e4:0b:65:3d:bd:41:
c1:18:1c:eb:3b:43:38:d5:3b:36:27:66:d1:14:1b:a4:99:78:
6f:6c:2a:6f:c4:41:0d:fa:0f:1e:71:cf:78:8d:b5:a9:7e:4d:
1e:a0:f1:46:92:63:16:b5:7c:20:cf:7f:28:8e:a8:6f:a2:bb:
c8:a0:68:0f:2f:ce:6b:2f:3d:1f:7b:7c:5b:85:85:15:b6:93:
87:b4:b8:ab:85:f4:40:7f:57:93:9f:bd:71:32:cb:6d:c3:92:
06:6c:d2:48:41:8b:d7:c7:2a:f5:29:27:97:4d:4c:a6:c8:6f:
40:e2:9a:86:eb:cb:17:07:4e:59:91:76:30:a2:75:40:5a:16:
18:fc:c7:87:25:f1:6b:12:40:56:b1:2a:8f:ed:d9:4f:05:dd:
4e:8b:fa:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEcVliXRpx6FJcznpLqHR5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OWU0OWNmYjlmOTBhMDllNzE5NmM0ODFlZTBhMzAwOGNh
YjY4MTMwHhcNMjYxMDA4MTYyNjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGRjNWNlNmE5ZGE0MTA5YTk1NjM1ZjVlZDFjYWYzNzlmMGQ0NmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61RbW50dQmzdTqyUyJIjcpNLpYWa
8UaqjcokIrafJTM4i+xC9cTlbmtCO9qMtFVvyZdnZbWFhz1y6zw97HolhWf5Mcwe
/jZchkDjNOvjeH0vR8/qOm/1spvRUEhl0AZg7YT46N4wB2lLvxN/T8KNj51odeOS
cI+eXENsXynFG2jCSKbW4pNXKCzfCQYRDWa0tvCTZzPAs9+rgBT0J32mfkF/E6To
qQ0uRSPB+QXpp+2ilczGaMiHMnu6XmwZoHeptoKcU8gwnJloCDVMbnAg8hWsc2Em
2FMmLb5GHO9fs1zN5JMTgjMLN6gHjaPghun/aku0JgelHp1Z6WKv2v8r9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBTcXOap2kEJqVY19e0crzefDUbJMB8GA1UdIwQY
MBaAFPSeSc+5+QoJ5xlsSB7gowCMq2gTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUo1Sno3bjVDZ25uR1d4SUh1Q2pBSXlyYUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi82ZmE5ODItZDRiZC00MjhjLWE5NDQt
YjY5ZTYyY2YxMjZiLzEvRk54YzVxbmFRUW1wVmpYMTdSeXZONThOUnNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi82ZmE5ODItZDRiZC00MjhjLWE5NDQtYjY5ZTYyY2YxMjZi
LzEvOUo1Sno3bjVDZ25uR1d4SUh1Q2pBSXlyYUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQjiMA0G
CSqGSIb3DQEBCwUAA4IBAQA7exonnYPwvz6DF9WM3Adb6+vXwfj7zwNAMZe1EML8
NTpMLYHwe+H/EPnRTD6aGMbusBtybzpi0SvNOwHmmQrJYcTwa0IzWuEMY3ImKvfn
3HWf3AU+m+J5KLd75zfHHsm/+ij/nUvkC2U9vUHBGBzrO0M41Ts2J2bRFBukmXhv
bCpvxEEN+g8ecc94jbWpfk0eoPFGkmMWtXwgz38ojqhvorvIoGgPL85rLz0fe3xb
hYUVtpOHtLirhfRAf1eTn71xMsttw5IGbNJIQYvXxyr1KSeXTUymyG9A4pqG68sX
B05ZkXYwonVAWhYY/MeHJfFrEkBWsSqP7dlPBd1Oi/pz
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:29:58 2026 by rpki-client