Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FWYCMdFtCItDv0LX-Sl7AsqoCck.roa
File: FWYCMdFtCItDv0LX-Sl7AsqoCck.roa (raw, json)
Hash identifier: ECivnsH9ConF0hLEvf+e2h6eHDLWHEuK3piByrzbEKo=
Subject key identifier: 15:66:02:31:D1:6D:08:8B:43:BF:42:D7:F9:29:7B:02:CA:A8:09:C9
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A04816902388CD373B0B5DE22B4E7AE62D
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FWYCMdFtCItDv0LX-Sl7AsqoCck.roa
Signing time: Fri 28 Aug 2026 11:17:13 +0000
ROA not before: Fri 28 Aug 2026 11:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 80.240.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:16:90:23:88:cd:37:3b:0b:5d:e2:2b:4e:7a:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 28 11:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15660231d16d088b43bf42d7f9297b02caa809c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:40:ec:1b:30:75:af:9e:ea:c7:42:64:91:
ba:54:e7:89:2e:dd:f1:0c:d8:3b:6f:2f:49:e0:cd:
45:5d:1b:b8:f4:38:b3:ce:14:1f:4d:a3:5c:a7:20:
6f:13:25:a0:6d:fe:4c:29:08:bf:b9:3f:4f:50:89:
b1:0d:93:d9:29:39:82:5a:04:7d:86:48:aa:a3:a0:
ae:54:97:a5:08:51:f5:ae:ea:f1:6f:81:3f:db:94:
35:b2:40:5f:72:6e:4e:36:75:a8:27:5f:40:ed:5d:
b5:a6:fa:18:f3:9b:03:2f:06:92:ae:9b:dd:a0:29:
fd:f4:2e:1e:d5:e0:b1:87:64:90:e5:dc:55:77:34:
bc:ed:5e:4c:b3:38:6a:b7:e1:5b:19:67:9e:15:b5:
23:23:16:5e:15:dc:95:19:6e:ec:fa:f2:f6:0e:b5:
24:b0:fc:68:0a:be:9a:77:fd:0c:fd:d6:27:18:98:
4d:46:1f:3e:57:20:74:56:ae:41:db:15:11:b1:a0:
39:9e:c0:71:a6:e2:07:74:fb:b4:ae:45:b4:3c:af:
5a:c2:4c:ee:e4:60:b1:55:19:69:e9:33:da:82:93:
99:c9:db:f8:f1:ff:a7:fb:fa:1d:ea:45:7b:6a:f6:
06:3c:99:3d:3f:64:6a:a8:0e:8f:45:d9:b8:9f:1c:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:66:02:31:D1:6D:08:8B:43:BF:42:D7:F9:29:7B:02:CA:A8:09:C9
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FWYCMdFtCItDv0LX-Sl7AsqoCck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b1:44:b2:31:16:f2:04:af:dd:e1:3a:0b:74:f3:5a:dd:de:
cc:90:ec:a4:4f:ed:94:da:8b:f3:0e:de:50:e3:9e:21:6b:11:
9d:b3:24:8d:29:e5:5a:bb:06:c0:82:06:70:e1:ea:67:4e:c7:
f4:50:b2:10:ff:07:4b:92:95:c2:e6:b1:90:12:a1:59:57:08:
e9:9a:69:33:4d:e3:b6:1a:13:66:6a:fc:f6:b0:80:94:1c:9b:
ef:0a:69:a9:9f:82:cb:c4:c3:77:ed:23:2d:5b:49:1a:72:45:
17:bd:51:ec:0e:f1:bf:de:ed:a2:17:2f:65:ea:64:98:d5:93:
6a:3b:c5:fe:44:2e:9d:cb:fe:e7:38:63:47:a2:35:3f:92:30:
1a:87:c5:18:2d:0c:f6:0f:14:2f:b3:eb:5b:7c:5f:ce:69:72:
08:69:89:13:a4:ee:c0:01:90:12:e9:c2:8e:f2:8e:30:eb:15:
14:43:99:b1:07:fb:45:91:bc:0d:4a:76:62:9c:0e:7c:9b:39:
15:95:86:ed:1f:8c:4d:fd:4e:75:d1:29:41:8d:14:0a:5d:64:
bb:05:4d:7d:9e:21:46:61:36:e8:07:f5:92:5c:a6:bf:6d:ac:
11:89:6f:62:15:3d:e3:51:3d:73:9e:0e:99:46:50:2d:ef:6e:
a0:6e:78:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBIFpAjiM03Owtd4itOeuYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODI4MTExNzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTY2MDIzMWQxNmQwODhiNDNiZjQyZDdmOTI5N2IwMmNhYTgwOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaFA7Bswda+e6sdCZJG6VOeJLt3x
DNg7by9J4M1FXRu49DizzhQfTaNcpyBvEyWgbf5MKQi/uT9PUImxDZPZKTmCWgR9
hkiqo6CuVJelCFH1rurxb4E/25Q1skBfcm5ONnWoJ19A7V21pvoY85sDLwaSrpvd
oCn99C4e1eCxh2SQ5dxVdzS87V5Mszhqt+FbGWeeFbUjIxZeFdyVGW7s+vL2DrUk
sPxoCr6ad/0M/dYnGJhNRh8+VyB0Vq5B2xURsaA5nsBxpuIHdPu0rkW0PK9awkzu
5GCxVRlp6TPagpOZydv48f+n+/od6kV7avYGPJk9P2RqqA6PRdm4nxzjbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBVmAjHRbQiLQ79C1/kpewLKqAnJMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRldZQ01kRnRDSXREdjBMWC1TbDdBc3FvQ2NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPBYMA0G
CSqGSIb3DQEBCwUAA4IBAQBUsUSyMRbyBK/d4ToLdPNa3d7MkOykT+2U2ovzDt5Q
454haxGdsySNKeVauwbAggZw4epnTsf0ULIQ/wdLkpXC5rGQEqFZVwjpmmkzTeO2
GhNmavz2sICUHJvvCmmpn4LLxMN37SMtW0kackUXvVHsDvG/3u2iFy9l6mSY1ZNq
O8X+RC6dy/7nOGNHojU/kjAah8UYLQz2DxQvs+tbfF/OaXIIaYkTpO7AAZAS6cKO
8o4w6xUUQ5mxB/tFkbwNSnZinA58mzkVlYbtH4xN/U510SlBjRQKXWS7BU19niFG
YTboB/WSXKa/bawRiW9iFT3jUT1zng6ZRlAt726gbnhW
-----END CERTIFICATE-----
Generated at Wed Sep 9 21:26:30 2026 by rpki-client