Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FKMhIbJyfrCA1MDk8VljLAk25dk.roa
File: FKMhIbJyfrCA1MDk8VljLAk25dk.roa (raw, json)
Hash identifier: 4fhjgjiAiWqUhlytBDTMIyitcnjp2eJi/QGKLKcTTZI=
Subject key identifier: 14:A3:21:21:B2:72:7E:B0:80:D4:C0:E4:F1:59:63:2C:09:36:E5:D9
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F7E84B93AD73DE2D30989AC5924231FB1
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FKMhIbJyfrCA1MDk8VljLAk25dk.roa
Signing time: Mon 20 Jul 2026 07:54:15 +0000
ROA not before: Mon 20 Jul 2026 07:54:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60068
IP address blocks: 82.153.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:84:b9:3a:d7:3d:e2:d3:09:89:ac:59:24:23:1f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 20 07:54:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14a32121b2727eb080d4c0e4f159632c0936e5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:8e:d0:03:13:d3:87:3e:d8:e2:dc:23:31:
69:c8:81:80:5a:78:af:df:ca:7e:78:9c:33:60:a8:
05:2f:a2:6f:a2:77:bf:92:32:0a:51:c2:c7:6a:28:
47:af:48:30:47:37:06:f0:73:b4:4b:17:99:59:0c:
06:42:ab:2e:45:40:c3:62:68:da:bd:3a:00:c2:8d:
bb:26:b6:90:60:14:56:77:0d:7d:f9:06:89:fe:d9:
a7:79:b9:2f:43:f5:1b:09:1d:fc:c9:94:f7:fa:42:
fb:9c:3c:4b:2f:6b:a6:71:8b:b5:56:57:74:6b:63:
a6:51:15:6d:3e:ae:a2:86:c2:6d:06:02:9a:74:4a:
04:8a:aa:50:d2:d8:b5:d8:f5:17:0a:3d:12:99:10:
6d:be:22:5f:cf:72:74:c6:af:c3:12:6b:b1:58:1b:
c5:9a:42:1f:68:5b:cc:20:f1:b6:20:0d:6e:75:32:
ec:c9:a4:bc:17:c1:9f:dd:c5:3a:4d:c3:7c:ad:59:
d7:70:7f:d0:cb:22:32:c6:31:f8:24:f8:74:42:f6:
35:7e:8d:bf:80:7e:30:ad:03:e4:9a:f5:e9:ea:e0:
d1:58:d1:10:c2:6b:f9:cc:23:d8:e7:11:ac:e6:48:
d6:fa:f8:7c:55:3a:67:9c:4f:b9:56:fb:b4:6b:81:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A3:21:21:B2:72:7E:B0:80:D4:C0:E4:F1:59:63:2C:09:36:E5:D9
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FKMhIbJyfrCA1MDk8VljLAk25dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.121.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a2:05:08:ec:95:31:cf:68:e2:71:d6:e5:3d:be:75:13:9c:
f7:4e:52:69:e0:78:40:9c:25:a9:2a:cc:f9:94:47:47:16:b8:
8f:d1:7a:c6:aa:ae:28:0e:96:62:01:f8:6d:b8:b0:8c:61:90:
1a:15:77:df:f0:ef:c0:34:9d:ad:bf:d3:49:83:86:e3:0e:e5:
85:3f:ef:1a:8b:f0:d2:b3:ea:95:7b:72:40:8e:74:48:3e:01:
94:56:4c:0f:66:7c:0e:6b:45:da:c7:09:7a:d9:a8:90:e0:bb:
4a:4b:3b:2b:9a:cb:77:02:83:d1:12:64:8a:4f:3a:29:58:8e:
ac:22:4b:91:b4:ab:a7:6b:3f:0d:4c:3f:f3:54:80:b7:07:89:
58:24:d4:5e:a5:ba:60:f6:fb:2d:02:93:40:51:df:9a:c0:b3:
a5:f5:62:dd:c2:14:e6:05:4b:e8:6d:b5:01:af:e3:e9:dd:f8:
ac:69:5c:a1:cb:39:27:3e:04:35:6d:5d:b2:c5:24:52:0c:63:
e7:54:71:8c:d1:80:4e:6f:34:8e:e6:77:ee:5b:d7:ed:d8:e3:
68:3e:95:f0:1a:71:17:f5:46:2b:4c:ef:25:03:29:61:a6:d9:
d0:30:69:98:8b:9e:83:1f:b3:8f:e4:0c:12:2c:19:db:d6:fc:
a1:03:d8:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9+hLk61z3i0wmJrFkkIx+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzIwMDc1NDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGEzMjEyMWIyNzI3ZWIwODBkNGMwZTRmMTU5NjMyYzA5MzZlNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRWO0AMT04c+2OLcIzFpyIGAWniv
38p+eJwzYKgFL6Jvone/kjIKUcLHaihHr0gwRzcG8HO0SxeZWQwGQqsuRUDDYmja
vToAwo27JraQYBRWdw19+QaJ/tmnebkvQ/UbCR38yZT3+kL7nDxLL2umcYu1Vld0
a2OmURVtPq6ihsJtBgKadEoEiqpQ0ti12PUXCj0SmRBtviJfz3J0xq/DEmuxWBvF
mkIfaFvMIPG2IA1udTLsyaS8F8Gf3cU6TcN8rVnXcH/QyyIyxjH4JPh0QvY1fo2/
gH4wrQPkmvXp6uDRWNEQwmv5zCPY5xGs5kjW+vh8VTpnnE+5Vvu0a4FGSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBSjISGycn6wgNTA5PFZYywJNuXZMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRktNaEliSnlmckNBMU1EazhWbGpMQWsyNWRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpl5MA0G
CSqGSIb3DQEBCwUAA4IBAQBDogUI7JUxz2jicdblPb51E5z3TlJp4HhAnCWpKsz5
lEdHFriP0XrGqq4oDpZiAfhtuLCMYZAaFXff8O/ANJ2tv9NJg4bjDuWFP+8ai/DS
s+qVe3JAjnRIPgGUVkwPZnwOa0Xaxwl62aiQ4LtKSzsrmst3AoPREmSKTzopWI6s
IkuRtKunaz8NTD/zVIC3B4lYJNRepbpg9vstApNAUd+awLOl9WLdwhTmBUvobbUB
r+Pp3fisaVyhyzknPgQ1bV2yxSRSDGPnVHGM0YBObzSO5nfuW9ft2ONoPpXwGnEX
9UYrTO8lAylhptnQMGmYi56DH7OP5AwSLBnb1vyhA9g7
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:40 2026 by rpki-client