Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/FbeOe8y40igE6yHs5ZpBOEJpYHs.roa
File: FbeOe8y40igE6yHs5ZpBOEJpYHs.roa (raw, json)
Hash identifier: rOTURWQFdRZR99D8f6iu/wrgrcROGJZKmSGhgZIhz28=
Subject key identifier: 15:B7:8E:7B:CC:B8:D2:28:04:EB:21:EC:E5:9A:41:38:42:69:60:7B
Certificate issuer: /CN=2beabda4544171a293c2cd2af1d48a98be2baf2a
Certificate serial: 019F2368C56EFE535237C3D1187EFC2E977D
Authority key identifier: 2B:EA:BD:A4:54:41:71:A2:93:C2:CD:2A:F1:D4:8A:98:BE:2B:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-q9pFRBcaKTws0q8dSKmL4rryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/FbeOe8y40igE6yHs5ZpBOEJpYHs.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58261
IP address blocks: 178.210.164.0/24 maxlen: 24
185.218.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/K-q9pFRBcaKTws0q8dSKmL4rryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/K-q9pFRBcaKTws0q8dSKmL4rryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-q9pFRBcaKTws0q8dSKmL4rryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c5:6e:fe:53:52:37:c3:d1:18:7e:fc:2e:97:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2beabda4544171a293c2cd2af1d48a98be2baf2a
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15b78e7bccb8d22804eb21ece59a41384269607b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:8d:5d:d1:a6:23:fc:74:89:65:04:1d:24:
3b:42:4f:db:1b:3c:ed:6c:a2:03:58:a7:bd:2b:01:
dc:fd:f0:bd:59:94:5d:d1:9d:c5:98:a5:19:03:2d:
8e:01:a9:4b:82:6d:1e:29:35:aa:c9:ac:44:e4:3d:
d9:d0:20:4c:af:9c:3f:cb:4e:05:7a:ca:6c:72:47:
3e:6c:0a:7d:b4:2f:ac:9e:e9:1a:cc:bc:7e:94:af:
99:a6:9b:b9:fb:47:12:d0:16:88:1b:bf:2b:27:6c:
a0:08:9b:ac:38:0e:b3:eb:ce:d6:cc:87:e8:ae:b3:
c7:24:89:3e:73:ff:c2:c1:52:32:85:fd:48:1d:6e:
1a:8c:be:04:8b:94:a9:77:82:38:a2:d5:7b:e9:65:
7f:11:f2:b7:1e:1c:29:f4:70:c7:ca:85:fd:74:81:
01:8d:f9:e4:4e:89:cf:02:4a:77:4f:7d:26:44:c9:
c4:ab:f2:66:54:05:33:7e:59:38:4c:64:30:d5:cf:
d6:2c:9e:69:23:58:e6:33:c3:bd:4c:10:f5:95:55:
e5:93:4c:d0:cb:82:52:c9:17:04:ae:a8:69:d8:83:
44:77:45:e7:17:9b:3a:bf:b6:e1:85:cd:48:f1:e6:
bb:56:62:19:08:19:ea:1f:ff:95:c7:ed:c5:3d:81:
75:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B7:8E:7B:CC:B8:D2:28:04:EB:21:EC:E5:9A:41:38:42:69:60:7B
X509v3 Authority Key Identifier:
keyid:2B:EA:BD:A4:54:41:71:A2:93:C2:CD:2A:F1:D4:8A:98:BE:2B:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-q9pFRBcaKTws0q8dSKmL4rryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/FbeOe8y40igE6yHs5ZpBOEJpYHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/K-q9pFRBcaKTws0q8dSKmL4rryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.164.0/24
185.218.141.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cb:27:b8:d9:3e:2e:82:58:63:05:52:b2:ed:eb:51:4a:c1:
66:3c:30:7c:f5:b7:1f:00:54:d8:93:1d:4f:2c:7c:88:85:db:
0d:d8:9e:12:da:59:ba:af:3a:e7:e4:f2:48:37:af:74:f2:41:
1e:46:a8:bb:da:06:93:f1:0d:4a:12:e8:73:4b:b3:0f:4a:85:
75:79:38:e9:8d:22:29:7f:fa:fd:7a:a1:99:e8:90:ed:07:4c:
ce:da:be:2f:ad:34:51:11:0d:cb:77:1b:84:fe:fc:34:f3:7d:
7b:23:e3:52:a7:f3:1a:ef:d4:3c:ee:de:19:82:da:56:54:07:
3c:41:37:2a:e3:79:81:25:64:cc:7d:a2:31:78:a0:21:8d:93:
75:0e:ae:7b:03:2f:cd:0d:56:1d:56:99:0c:d8:c0:e9:65:0e:
23:01:b8:cd:77:da:d6:fb:dd:5a:8b:71:21:9b:65:da:c3:f5:
6e:ad:b5:33:d4:68:20:d6:0c:f1:60:fd:cc:0e:fe:27:e1:c7:
06:8f:cb:91:79:0e:60:7f:c5:89:9b:8b:98:62:92:47:2a:48:
bc:1b:51:93:ac:fa:fb:bc:db:24:43:b1:4e:a8:96:78:f3:bc:
4c:2e:96:d1:c4:24:1c:a5:b8:ba:3e:eb:45:4f:68:bf:7f:01:
ce:fb:1a:4d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaMVu/lNSN8PRGH78Lpd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZWFiZGE0NTQ0MTcxYTI5M2MyY2QyYWYxZDQ4YTk4YmUy
YmFmMmEwHhcNMjYwNzAyMTUxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWI3OGU3YmNjYjhkMjI4MDRlYjIxZWNlNTlhNDEzODQyNjk2MDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhSNXdGmI/x0iWUEHSQ7Qk/bGzzt
bKIDWKe9KwHc/fC9WZRd0Z3FmKUZAy2OAalLgm0eKTWqyaxE5D3Z0CBMr5w/y04F
espsckc+bAp9tC+snukazLx+lK+Zppu5+0cS0BaIG78rJ2ygCJusOA6z687WzIfo
rrPHJIk+c//CwVIyhf1IHW4ajL4Ei5Spd4I4otV76WV/EfK3Hhwp9HDHyoX9dIEB
jfnkTonPAkp3T30mRMnEq/JmVAUzflk4TGQw1c/WLJ5pI1jmM8O9TBD1lVXlk0zQ
y4JSyRcErqhp2INEd0XnF5s6v7bhhc1I8ea7VmIZCBnqH/+Vx+3FPYF19QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBW3jnvMuNIoBOsh7OWaQThCaWB7MB8GA1UdIwQY
MBaAFCvqvaRUQXGik8LNKvHUipi+K68qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy1xOXBGUkJjYUtUd3MwcThkU0ttTDRycnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yZjY2NTItNzQ2Ni00YTE2LTgzZGEt
YzFmMWEwZTQ5N2NjLzEvRmJlT2U4eTQwaWdFNnlIczVacEJPRUpwWUhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8yZjY2NTItNzQ2Ni00YTE2LTgzZGEtYzFmMWEwZTQ5N2Nj
LzEvSy1xOXBGUkJjYUtUd3MwcThkU0ttTDRycnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAstKkAwQA
udqNMA0GCSqGSIb3DQEBCwUAA4IBAQBOyye42T4uglhjBVKy7etRSsFmPDB89bcf
AFTYkx1PLHyIhdsN2J4S2lm6rzrn5PJIN6908kEeRqi72gaT8Q1KEuhzS7MPSoV1
eTjpjSIpf/r9eqGZ6JDtB0zO2r4vrTRREQ3LdxuE/vw08317I+NSp/Ma79Q87t4Z
gtpWVAc8QTcq43mBJWTMfaIxeKAhjZN1Dq57Ay/NDVYdVpkM2MDpZQ4jAbjNd9rW
+91ai3Ehm2Xaw/VurbUz1Ggg1gzxYP3MDv4n4ccGj8uReQ5gf8WJm4uYYpJHKki8
G1GTrPr7vNskQ7FOqJZ487xMLpbRxCQcpbi6PutFT2i/fwHO+xpN
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:50:55 2026 by rpki-client