Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/sysq58LMYKdBhx-ibBYNHAxQl8g.roa
File: sysq58LMYKdBhx-ibBYNHAxQl8g.roa (raw, json)
Hash identifier: HwICsnv3lm+NXgLT5+1pkn50yR1pj2hwdaS9hW8jkA4=
Subject key identifier: B3:2B:2A:E7:C2:CC:60:A7:41:87:1F:A2:6C:16:0D:1C:0C:50:97:C8
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 019E45785E61E0EB8B288E336739E87BBB48
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/sysq58LMYKdBhx-ibBYNHAxQl8g.roa
Signing time: Wed 20 May 2026 12:59:36 +0000
ROA not before: Wed 20 May 2026 12:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210906
IP address blocks: 86.104.227.0/24 maxlen: 24
162.218.157.0/24 maxlen: 24
194.29.70.0/24 maxlen: 24
194.29.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:78:5e:61:e0:eb:8b:28:8e:33:67:39:e8:7b:bb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: May 20 12:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b32b2ae7c2cc60a741871fa26c160d1c0c5097c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:c9:2c:fc:17:32:64:7c:fd:71:4f:99:ba:
54:29:e1:b2:15:ed:84:e2:d1:10:7e:67:30:0e:1c:
86:f8:dc:95:67:90:a9:12:ed:fe:c2:46:ae:56:f2:
f7:5f:5b:c2:a2:c8:9f:c5:32:b4:3d:ca:24:f9:10:
9b:ad:7f:56:1a:97:06:58:53:49:f0:82:ae:98:0c:
46:31:79:66:19:e4:64:13:67:9e:28:58:63:52:59:
27:7e:1d:fa:70:64:24:66:ba:a7:22:9e:a9:3c:a8:
00:4d:d6:a2:50:c0:9e:5d:46:3a:4a:9e:25:44:11:
29:c4:54:51:30:89:c6:14:26:ec:3f:f1:d7:83:1d:
a4:95:de:ba:34:0f:2a:fc:92:4e:1f:ec:39:a9:30:
70:59:44:d9:66:62:43:4e:90:a1:05:91:b6:53:7a:
a1:6a:ab:ad:85:55:10:e3:27:b8:3c:53:0e:f7:6f:
d8:1b:30:12:ec:12:f0:e9:d1:9f:0e:ac:bc:63:7c:
36:8a:4a:7d:fd:f4:ad:43:1f:3b:98:d9:64:be:73:
6f:87:6c:03:96:d3:66:0a:b1:73:70:1e:00:91:46:
85:01:f5:62:e3:e8:b9:d6:19:29:28:1b:f4:33:d3:
eb:27:5a:32:d2:97:8d:1a:94:0a:5e:01:03:c2:b2:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2B:2A:E7:C2:CC:60:A7:41:87:1F:A2:6C:16:0D:1C:0C:50:97:C8
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/sysq58LMYKdBhx-ibBYNHAxQl8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.227.0/24
162.218.157.0/24
194.29.70.0/24
194.29.80.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2d:a2:a1:20:93:81:1c:09:fb:5b:98:fc:5e:ec:5c:81:e5:
83:5b:3c:d7:79:a1:79:8e:2f:d5:b7:b4:c7:72:47:7f:af:68:
e3:99:b5:68:4d:0b:90:15:10:af:b6:de:b0:bf:e5:59:ab:f4:
b0:f0:f3:8f:64:e0:f0:94:13:63:15:5c:9d:49:eb:6d:6f:3f:
d0:55:84:2c:20:d4:a4:eb:22:6d:31:5a:4a:cb:84:11:14:f7:
22:cd:3b:09:6e:36:d3:56:ba:13:3a:73:ce:51:96:84:ac:15:
4f:25:c6:f1:a4:03:16:18:24:00:e4:77:7a:4f:2a:ab:7b:7f:
93:50:32:2b:17:c4:87:07:fe:b3:10:87:97:70:46:0c:a0:c3:
75:94:8f:2f:fe:42:2a:cd:4e:1d:c2:99:86:f3:56:f6:2d:e7:
3c:5f:91:42:f8:19:7f:e5:f5:5f:32:be:fb:7a:13:74:43:06:
f5:ad:75:81:4a:8c:69:8d:5c:5f:b6:a8:a0:2e:b4:35:7e:95:
aa:25:d8:be:a6:39:36:d4:88:35:3c:ef:54:e8:9f:e7:c2:b5:
a7:76:66:85:19:e1:ee:07:1b:9e:51:b2:64:c8:e3:c6:21:e8:
74:ee:f9:69:89:37:e7:78:55:2e:87:89:24:3c:2e:18:a1:bc:
23:d5:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:35 2026 by rpki-client