Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/FNWCwmldO9nGVTL2GKGII1VxYyo.roa
File: FNWCwmldO9nGVTL2GKGII1VxYyo.roa (raw, json)
Hash identifier: 7sNjenvQ/bXBtYyzAgzVYTNkcMa9kRgvAP6sU8D9KvE=
Subject key identifier: 14:D5:82:C2:69:5D:3B:D9:C6:55:32:F6:18:A1:88:23:55:71:63:2A
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 019DBEE6CED1F9D42F37363301F382C51EE9
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/FNWCwmldO9nGVTL2GKGII1VxYyo.roa
Signing time: Fri 24 Apr 2026 09:51:30 +0000
ROA not before: Fri 24 Apr 2026 09:51:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 62.197.45.0/24 maxlen: 24
82.117.242.0/23 maxlen: 23
85.90.208.0/24 maxlen: 24
85.90.209.0/24 maxlen: 24
89.187.73.0/24 maxlen: 24
89.187.77.0/24 maxlen: 24
92.42.1.0/24 maxlen: 24
92.63.224.0/24 maxlen: 24
148.222.185.0/24 maxlen: 24
148.222.186.0/24 maxlen: 24
176.98.40.0/24 maxlen: 24
185.93.104.0/24 maxlen: 24
185.93.105.0/24 maxlen: 24
185.93.106.0/24 maxlen: 24
185.109.48.0/24 maxlen: 24
185.192.23.0/24 maxlen: 24
185.200.197.0/24 maxlen: 24
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c1:3::/48 maxlen: 48
2a02:c6c1:e::/48 maxlen: 48
2a02:c6c1:10::/48 maxlen: 48
2a02:c6c1:141::/48 maxlen: 48
2a02:c6c1:142::/48 maxlen: 48
2a02:c6c1:151::/48 maxlen: 48
2a02:c6c1:152::/48 maxlen: 48
2a02:c6c1:153::/48 maxlen: 48
2a02:c6c1:154::/48 maxlen: 48
2a02:c6c1:155::/48 maxlen: 48
2a02:c6c1:156::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
2a02:c6c3::/32 maxlen: 32
2a02:c6c7::/32 maxlen: 32
2a0c:6740::/29 maxlen: 29
2a0c:6741::/32 maxlen: 32
2a0e:92c0::/29 maxlen: 29
2a0e:9a40::/29 maxlen: 29
2a0e:a7c0::/29 maxlen: 29
2a0e:a7c0::/32 maxlen: 32
2a0e:a7c1:1::/48 maxlen: 48
2a0e:a7c2::/32 maxlen: 32
2a0f:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Apr 2026 01:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:e6:ce:d1:f9:d4:2f:37:36:33:01:f3:82:c5:1e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Apr 24 09:51:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14d582c2695d3bd9c65532f618a188235571632a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:4e:85:6d:59:be:ba:6b:0e:d5:b8:76:ae:
43:27:ab:1e:a7:00:11:2e:70:51:6f:41:ab:85:39:
f3:e0:d9:d7:4a:c9:62:d0:32:d8:9a:d6:c7:b4:30:
49:75:08:37:77:99:66:6a:7b:18:9a:7b:29:e3:b3:
26:09:b7:11:bc:00:1e:65:24:6e:56:7f:b6:2a:3b:
a7:54:6c:e0:1e:e5:72:6f:90:9b:a0:3e:e7:f3:c1:
9e:a4:56:95:ac:b7:28:9b:27:92:ac:84:af:aa:27:
02:59:be:0b:01:5e:e0:28:82:cf:90:ec:d8:4d:df:
30:f6:ed:83:73:60:2f:f9:c0:25:ab:7d:91:dc:97:
d9:2f:28:26:98:2c:f6:91:c5:b6:31:7f:f6:9e:2b:
d1:f2:a8:cf:a2:e6:47:c3:e5:a4:b7:03:28:a6:94:
dd:4e:21:34:4b:fd:11:81:24:d4:4e:69:69:b5:1c:
91:01:a2:88:95:17:5a:cb:a3:1f:f0:37:95:33:37:
29:f8:dc:f0:84:1b:61:e0:31:e1:41:69:b3:0d:96:
8f:a1:cd:70:dc:70:14:d8:fa:0f:39:65:f2:b0:4f:
5f:4e:e8:90:1d:6d:5b:ae:ad:8c:0b:ee:1d:5c:c5:
b7:be:f8:2f:ce:04:e9:6e:77:52:2b:8e:c5:2a:e6:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D5:82:C2:69:5D:3B:D9:C6:55:32:F6:18:A1:88:23:55:71:63:2A
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/FNWCwmldO9nGVTL2GKGII1VxYyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.45.0/24
82.117.242.0/23
85.90.208.0/23
89.187.73.0/24
89.187.77.0/24
92.42.1.0/24
92.63.224.0/24
148.222.185.0-148.222.186.255
176.98.40.0/24
185.93.104.0-185.93.106.255
185.109.48.0/24
185.192.23.0/24
185.200.197.0/24
IPv6:
2a02:c6c1:2::/47
2a02:c6c1:e::/48
2a02:c6c1:10::/48
2a02:c6c1:141::-2a02:c6c1:142:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff
2a02:c6c2::/31
2a02:c6c7::/32
2a0c:6740::/29
2a0e:92c0::/29
2a0e:9a40::/29
2a0e:a7c0::/29
2a0f:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
43:bb:8a:0c:72:e3:ee:1e:87:34:cf:3c:2d:cb:48:ee:31:29:
0d:f9:3d:e1:1c:18:1f:b6:5a:9d:f3:16:0b:d3:fc:18:eb:82:
e8:8a:1e:7a:7c:37:25:aa:c9:24:93:bd:7b:75:6d:33:48:01:
10:23:86:da:eb:76:21:5d:4c:36:f2:2d:3e:8c:3a:8b:a1:cb:
cc:3c:ee:5c:dc:7a:d0:fd:34:22:10:e1:c8:41:d9:8e:bf:06:
e0:0c:58:35:42:61:0c:de:e1:f3:df:28:27:ce:b1:c2:5f:26:
f9:c3:af:4c:b2:c5:59:0d:b9:66:d8:28:09:da:a3:fb:8c:0c:
0d:15:5a:1d:cd:1b:b4:00:c5:dd:92:a7:30:e6:07:bb:22:67:
df:37:a3:83:37:d4:03:a4:77:8b:e6:ea:5b:c3:a9:84:ed:88:
4c:cd:f6:ec:db:ce:26:77:3f:f3:56:4d:a8:9a:d1:eb:d4:57:
ad:a2:db:92:72:56:76:80:11:a5:a2:a9:98:f4:da:5b:cb:09:
8a:bd:b4:bc:01:fc:b8:ac:69:3e:6e:46:fe:46:a2:c0:c5:55:
d8:31:ee:27:4a:4a:77:89:34:ff:bd:12:60:ba:33:06:99:3a:
3b:cc:e3:a5:c4:75:64:d7:e1:7e:5d:62:2f:0b:ef:1e:57:95:
d0:76:36:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 08:04:29 2026 by rpki-client