Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/FBZejzYZFR1PVgaLEKt13DxznCM.roa
File: FBZejzYZFR1PVgaLEKt13DxznCM.roa (raw, json)
Hash identifier: Qhv64sjMH4vJdplzt1e3yY22cI/kNgFsPwjRLCZJujw=
Subject key identifier: 14:16:5E:8F:36:19:15:1D:4F:56:06:8B:10:AB:75:DC:3C:73:9C:23
Certificate issuer: /CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Certificate serial: 019F276E3CBDE6EE632CD01BC5D503A2FF8B
Authority key identifier: B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/FBZejzYZFR1PVgaLEKt13DxznCM.roa
Signing time: Fri 03 Jul 2026 10:02:43 +0000
ROA not before: Fri 03 Jul 2026 10:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42128
IP address blocks: 94.46.205.0/24 maxlen: 24
193.33.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:6e:3c:bd:e6:ee:63:2c:d0:1b:c5:d5:03:a2:ff:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Validity
Not Before: Jul 3 10:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14165e8f3619151d4f56068b10ab75dc3c739c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:81:0a:0c:b5:a4:ac:73:0b:f5:5e:d4:71:28:
c1:66:7c:d8:3a:d2:88:41:1e:34:b4:7e:8f:5b:c3:
57:e0:12:87:b5:16:ca:37:ff:bd:f2:10:3f:fa:4e:
a7:a0:8a:8d:51:cf:91:7f:77:61:fd:77:2d:03:b4:
9a:9e:b2:33:c1:f8:28:d6:3e:aa:29:ed:0a:bc:70:
8c:d6:c4:e9:61:09:c8:ec:f6:8d:28:a2:40:88:3e:
6a:a4:0e:0a:26:a6:7b:1a:78:51:60:f9:86:60:2f:
d2:60:a5:df:81:b4:0a:34:98:64:7a:ab:de:2d:ee:
56:82:3e:81:8f:df:3b:c5:dc:86:c0:bc:cc:38:27:
69:e8:ef:aa:2a:7a:fa:2c:30:90:8a:5b:92:5c:1e:
66:7a:e2:a9:80:e9:12:07:85:55:04:53:e6:2d:07:
2b:76:78:50:f1:07:d3:ab:4b:4e:e6:b1:e8:77:b6:
4a:6c:a0:62:88:0a:9a:43:b7:35:54:59:59:b0:44:
15:1a:14:51:4c:85:16:59:4f:c2:55:68:46:c3:f6:
90:d9:87:28:e5:f4:98:ef:c6:ff:f8:38:55:4d:43:
dc:69:a6:1b:b8:a4:cd:4a:af:d2:58:42:e0:ff:83:
fa:4d:a8:28:e0:a6:ac:e2:96:ed:cc:02:79:17:a7:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:16:5E:8F:36:19:15:1D:4F:56:06:8B:10:AB:75:DC:3C:73:9C:23
X509v3 Authority Key Identifier:
keyid:B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/FBZejzYZFR1PVgaLEKt13DxznCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.46.205.0/24
193.33.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:2c:ac:50:8a:ec:31:cb:d1:7d:d0:b8:5c:3a:36:97:0b:e4:
f8:2a:70:c0:dc:e2:77:97:9a:4d:15:07:a2:e7:5f:d9:8b:af:
22:cb:6b:21:be:79:1c:38:4b:a2:ee:b1:f0:3b:0c:a9:87:8a:
56:c7:63:86:db:97:99:07:6b:c8:8b:8b:03:aa:80:54:f6:28:
8e:94:48:b0:a0:79:c4:15:fc:03:35:d3:6e:8d:0b:5a:19:6c:
3a:61:d4:17:ba:17:67:50:64:59:bc:f5:35:0b:c0:c4:3b:e4:
6d:a4:6d:c2:5d:67:04:65:6c:71:aa:2b:de:3f:59:aa:5d:b3:
96:fc:0d:71:97:93:10:84:f8:49:9e:48:9e:a6:77:92:88:8d:
35:d6:60:79:44:c0:15:95:3d:9c:21:b7:dd:77:7d:86:55:a6:
83:25:ab:f7:37:d4:01:a6:47:cd:07:d7:60:b6:0c:5f:f1:6f:
2d:af:ce:e8:bd:e9:2d:27:24:06:95:22:f3:c1:72:da:92:e5:
64:dc:55:8a:59:19:0f:8a:f8:15:3e:33:42:5d:16:aa:58:bc:
40:b6:50:73:2a:9b:60:59:2b:e0:eb:ac:00:4b:f3:0b:0f:53:
5a:5b:86:45:74:c6:01:e8:0e:cf:e9:e5:f7:d8:7d:0c:91:44:
81:9f:21:a7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8nbjy95u5jLNAbxdUDov+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2M2FjMmU0ZTRkZGIzZTU0MDc1NmYxN2FhOTcwZDRhOGEz
MGE4NWMwHhcNMjYwNzAzMTAwMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDE2NWU4ZjM2MTkxNTFkNGY1NjA2OGIxMGFiNzVkYzNjNzM5YzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YEKDLWkrHML9V7UcSjBZnzYOtKI
QR40tH6PW8NX4BKHtRbKN/+98hA/+k6noIqNUc+Rf3dh/XctA7SanrIzwfgo1j6q
Ke0KvHCM1sTpYQnI7PaNKKJAiD5qpA4KJqZ7GnhRYPmGYC/SYKXfgbQKNJhkeqve
Le5Wgj6Bj987xdyGwLzMOCdp6O+qKnr6LDCQiluSXB5meuKpgOkSB4VVBFPmLQcr
dnhQ8QfTq0tO5rHod7ZKbKBiiAqaQ7c1VFlZsEQVGhRRTIUWWU/CVWhGw/aQ2Yco
5fSY78b/+DhVTUPcaaYbuKTNSq/SWELg/4P6Tago4Kas4pbtzAJ5F6ehGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBQWXo82GRUdT1YGixCrddw8c5wjMB8GA1UdIwQY
MBaAFLY6wuTk3bPlQHVvF6qXDUqKMKhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpyQzVPVGRzLVZBZFc4WHFwY05Tb293cUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82Yzc5NzAtOGNmOC00ZDNhLWEyMzAt
ZDYyZTU4NWM4MTYxLzEvRkJaZWp6WVpGUjFQVmdhTEVLdDEzRHh6bkNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82Yzc5NzAtOGNmOC00ZDNhLWEyMzAtZDYyZTU4NWM4MTYx
LzEvdGpyQzVPVGRzLVZBZFc4WHFwY05Tb293cUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXi7NAwQA
wSFoMA0GCSqGSIb3DQEBCwUAA4IBAQAKLKxQiuwxy9F90LhcOjaXC+T4KnDA3OJ3
l5pNFQei51/Zi68iy2shvnkcOEui7rHwOwyph4pWx2OG25eZB2vIi4sDqoBU9iiO
lEiwoHnEFfwDNdNujQtaGWw6YdQXuhdnUGRZvPU1C8DEO+RtpG3CXWcEZWxxqive
P1mqXbOW/A1xl5MQhPhJnkiepneSiI011mB5RMAVlT2cIbfdd32GVaaDJav3N9QB
pkfNB9dgtgxf8W8tr87ovektJyQGlSLzwXLakuVk3FWKWRkPivgVPjNCXRaqWLxA
tlBzKptgWSvg66wAS/MLD1NaW4ZFdMYB6A7P6eX32H0MkUSBnyGn
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:11 2026 by rpki-client