Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/FGLnKBzVI-597TwFzftKEh7eFtw.roa
File: FGLnKBzVI-597TwFzftKEh7eFtw.roa (raw, json)
Hash identifier: gvkPDH7rR/0SyEyQmCV6OKwz58riOem+Rs/N5gQmmaE=
Subject key identifier: 14:62:E7:28:1C:D5:23:EE:7D:ED:3C:05:CD:FB:4A:12:1E:DE:16:DC
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01A07AFBD878018C36BDA8C2B57C4B6D2A93
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/FGLnKBzVI-597TwFzftKEh7eFtw.roa
Signing time: Mon 07 Sep 2026 08:28:40 +0000
ROA not before: Mon 07 Sep 2026 08:28:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 86.104.215.0/24 maxlen: 24
89.32.200.0/24 maxlen: 24
89.32.204.0/24 maxlen: 24
89.33.83.0/24 maxlen: 24
89.47.34.0/24 maxlen: 24
103.47.52.0/22 maxlen: 22
162.218.158.0/24 maxlen: 24
188.215.5.0/24 maxlen: 24
194.26.149.0/24 maxlen: 24
212.102.116.0/24 maxlen: 24
2a07:4a80::/32 maxlen: 32
2a07:4a81::/32 maxlen: 32
2a07:4a82::/32 maxlen: 32
2a07:4a83::/32 maxlen: 32
2a07:4a84::/32 maxlen: 32
2a07:4a85::/32 maxlen: 32
2a07:4a86::/32 maxlen: 32
2a07:4a87::/32 maxlen: 32
2a0a:eb00::/32 maxlen: 32
2a0a:eb01::/32 maxlen: 32
2a0a:eb02::/32 maxlen: 32
2a0a:eb03::/32 maxlen: 32
2a0a:eb04::/32 maxlen: 32
2a0a:eb05::/32 maxlen: 32
2a0a:eb06::/32 maxlen: 32
2a0a:eb07::/32 maxlen: 32
2a0f:c840::/32 maxlen: 32
2a0f:c841::/32 maxlen: 32
2a0f:c842::/32 maxlen: 32
2a0f:c843::/32 maxlen: 32
2a0f:c844::/32 maxlen: 32
2a0f:c845::/32 maxlen: 32
2a0f:c846::/32 maxlen: 32
2a0f:c847::/32 maxlen: 32
2a11:3bc0::/29 maxlen: 29
2a11:3bc0::/32 maxlen: 32
2a11:3bc1::/32 maxlen: 32
2a11:3bc2::/32 maxlen: 32
2a11:3bc3::/32 maxlen: 32
2a11:3bc4::/32 maxlen: 32
2a11:3bc5::/32 maxlen: 32
2a11:3bc6::/32 maxlen: 32
2a11:3bc7::/32 maxlen: 32
2a12:7700::/32 maxlen: 32
2a12:7701::/32 maxlen: 32
2a12:7702::/32 maxlen: 32
2a12:7703::/32 maxlen: 32
2a12:7704::/32 maxlen: 32
2a12:7705::/32 maxlen: 32
2a12:7706::/32 maxlen: 32
2a12:7707::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:fb:d8:78:01:8c:36:bd:a8:c2:b5:7c:4b:6d:2a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Sep 7 08:28:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1462e7281cd523ee7ded3c05cdfb4a121ede16dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:60:24:18:e7:b0:5b:1b:80:0f:7d:48:6d:
9f:9d:8d:2d:a2:7a:f6:38:84:fc:40:d3:d2:64:cd:
88:73:fb:b6:31:df:ed:ef:c9:f0:1c:a0:7f:97:ae:
f1:89:9b:bd:f3:38:bd:4b:22:2d:41:6c:eb:20:d7:
ee:4b:a8:ae:17:41:57:0a:8c:89:26:7c:83:dc:5d:
a4:d1:93:10:9a:c6:66:7e:cf:38:ee:1b:28:26:70:
19:89:05:b2:10:bf:94:fc:5c:8a:76:c4:4d:66:4a:
e1:fd:7b:5b:32:d9:e1:f7:0f:c9:2f:61:2e:a9:0c:
a5:16:cf:a8:a3:ff:c7:66:09:b2:e1:f4:1a:0d:9b:
18:1c:b4:c1:fa:3e:95:6d:b0:fc:16:41:62:c0:19:
03:8d:9d:dd:0e:fc:d2:b1:fb:3d:60:eb:87:5f:5c:
35:b2:17:80:a2:64:b9:a2:47:27:d8:7b:64:0e:3c:
99:75:91:95:82:a6:35:a1:aa:d1:8d:d8:8a:58:f2:
e0:a5:50:90:1c:60:29:91:e4:70:1d:b2:ce:b4:e1:
89:f3:a6:8e:c4:a3:a1:aa:36:bd:5d:f1:6c:0c:1c:
30:62:b3:48:70:07:bb:d4:ff:45:be:ef:a8:0d:e0:
ec:5e:79:b8:75:f5:bc:3d:80:58:74:5f:23:0e:4c:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:62:E7:28:1C:D5:23:EE:7D:ED:3C:05:CD:FB:4A:12:1E:DE:16:DC
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/FGLnKBzVI-597TwFzftKEh7eFtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.215.0/24
89.32.200.0/24
89.32.204.0/24
89.33.83.0/24
89.47.34.0/24
103.47.52.0/22
162.218.158.0/24
188.215.5.0/24
194.26.149.0/24
212.102.116.0/24
IPv6:
2a07:4a80::/29
2a0a:eb00::/29
2a0f:c840::/29
2a11:3bc0::/29
2a12:7700::/29
Signature Algorithm: sha256WithRSAEncryption
97:21:f2:8c:25:6f:de:af:1a:fb:c7:11:ad:52:7f:ac:46:29:
e4:ff:2c:a7:ac:6f:7f:48:71:8c:ff:fe:dd:ac:b2:f8:89:b6:
9c:4e:07:0a:a0:16:62:80:3b:c0:32:e9:d3:08:f7:f4:34:c0:
54:51:a8:4c:af:9c:d5:c6:62:dc:f1:ae:59:85:df:cb:b2:83:
c2:b9:dc:4c:d1:3c:47:06:d2:28:77:a1:16:c9:ac:5e:2e:87:
ec:89:5f:3f:f0:b2:8f:2a:13:bb:c9:53:1f:60:a0:9f:b1:7f:
9c:a4:a2:44:c3:1e:d9:8f:c4:09:8d:d3:6e:17:ae:61:bd:cc:
58:c9:d5:56:08:d3:8d:0a:fd:b2:e4:c4:68:63:f0:04:c1:79:
47:99:09:82:fe:fa:c2:89:44:a2:f6:56:e8:e3:73:98:9d:bb:
cd:8f:39:0a:a0:a1:02:0a:6c:11:ab:12:25:59:e5:c2:f7:93:
ba:28:06:6f:d5:5f:81:68:d5:00:1f:04:7b:78:18:bf:42:c8:
f5:94:12:94:8e:9f:4e:e6:1c:88:10:d0:ba:19:89:76:e0:86:
63:8c:cc:23:8d:6c:14:27:4b:25:58:db:ca:22:65:2a:45:ab:
55:c0:fc:0c:13:55:a3:f0:1f:61:04:20:60:f4:43:38:da:c2:
f2:4b:c9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:07:46 2026 by rpki-client