Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/FznKlNjPtV7CgIvm3j4yrj4Hfic.roa
File: FznKlNjPtV7CgIvm3j4yrj4Hfic.roa (raw, json)
Hash identifier: FZIfFOE2MnfZCsnXNURSud4raCCnVXaurgVHkGDoOTc=
Subject key identifier: 17:39:CA:94:D8:CF:B5:5E:C2:80:8B:E6:DE:3E:32:AE:3E:07:7E:27
Certificate issuer: /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial: 019E47B1D3A07292552BE8E04080B67A5685
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/FznKlNjPtV7CgIvm3j4yrj4Hfic.roa
Signing time: Wed 20 May 2026 23:21:36 +0000
ROA not before: Wed 20 May 2026 23:21:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21009
IP address blocks: 91.220.158.0/24 maxlen: 24
193.8.216.0/22 maxlen: 22
193.8.218.0/24 maxlen: 24
193.8.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:47:b1:d3:a0:72:92:55:2b:e8:e0:40:80:b6:7a:56:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Validity
Not Before: May 20 23:21:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1739ca94d8cfb55ec2808be6de3e32ae3e077e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:05:02:07:28:e2:52:35:fe:60:f6:1a:d7:
32:a4:74:48:4b:d8:86:7e:f2:bb:0b:73:12:a5:86:
3d:b4:16:92:cc:2c:18:63:d6:08:1a:08:78:9a:af:
08:21:69:d4:3a:de:be:67:a4:6b:c2:f2:d4:56:4b:
8a:44:20:1e:49:04:2c:43:f0:7e:54:96:01:e4:88:
01:61:fb:8e:a4:79:4f:56:f1:7b:97:09:64:12:d1:
a2:a9:f4:b6:bb:f9:f7:11:b3:83:81:ad:a9:22:dc:
6f:4a:9d:44:77:85:3c:17:16:38:61:50:5c:a9:61:
55:51:48:4e:fa:99:7b:97:84:fa:86:d7:9a:c0:15:
04:c1:5f:d7:7a:9c:e8:15:90:4d:64:ed:2e:18:fc:
7f:95:6f:4e:f0:7a:fc:a6:c9:9c:3e:c9:65:7a:24:
8c:a7:25:27:78:cf:16:d7:eb:43:50:38:17:2c:c1:
b3:18:37:56:2c:b5:2d:9e:d0:34:5a:0c:43:05:02:
4c:99:eb:c3:16:69:e3:96:36:ea:fe:c0:d8:51:22:
17:f8:b7:ef:d6:d0:69:86:dd:1f:16:13:3d:4f:be:
5f:df:28:c8:bd:d6:56:62:5f:03:4e:9e:b5:5c:fe:
b3:e3:a6:33:d1:01:41:cf:71:f7:07:68:43:f2:87:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:39:CA:94:D8:CF:B5:5E:C2:80:8B:E6:DE:3E:32:AE:3E:07:7E:27
X509v3 Authority Key Identifier:
keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/FznKlNjPtV7CgIvm3j4yrj4Hfic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.158.0/24
193.8.216.0/22
Signature Algorithm: sha256WithRSAEncryption
65:db:9c:49:84:8d:76:6a:b3:32:f7:6b:13:12:71:ed:77:33:
68:66:69:68:f1:0f:1c:e6:0c:d3:69:56:46:77:41:95:85:d0:
37:4a:a4:2a:2b:b1:3c:2f:25:49:39:8f:7d:3f:9c:e7:46:e5:
81:0f:d2:3f:23:d6:1d:d3:5e:c7:99:40:6d:90:e8:0d:06:4e:
08:db:88:0c:0e:4e:71:f3:37:f9:1b:ff:a5:be:ef:c9:c0:3b:
a4:e3:ab:d8:70:53:b9:36:1b:fd:00:e3:cc:43:39:eb:e6:2b:
52:32:0b:90:02:c6:ec:3f:1e:eb:03:5b:47:b5:37:31:82:dc:
0d:d0:c6:9b:aa:ed:64:bc:d2:2d:3e:9d:5b:74:32:54:30:3c:
45:5c:9e:79:e0:90:8e:73:dd:da:c1:3b:46:61:eb:ca:c7:9b:
10:1e:b3:38:83:40:9d:04:93:2b:3f:34:20:15:cd:7b:0c:ea:
55:68:e6:b0:5c:9b:ac:68:36:42:05:66:65:9a:d2:50:06:53:
6e:95:f2:1a:cf:7a:30:38:07:8b:7d:91:50:ed:03:a4:cd:f6:
f3:47:b5:2b:d0:54:29:8c:5b:5e:33:55:91:d9:9e:79:44:da:
e7:ea:f6:55:e2:ad:89:b8:f7:9b:d9:b2:e3:6f:45:26:1d:23:
71:df:ed:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:30 2026 by rpki-client