Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FuGozL1M7P0OCReJAmS1H8EgZ6Q.roa
File: FuGozL1M7P0OCReJAmS1H8EgZ6Q.roa (raw, json)
Hash identifier: 91PL68KgkJDld4RwtyXO6Ty9w0LeIdOq0MNHhw9KVws=
Subject key identifier: 16:E1:A8:CC:BD:4C:EC:FD:0E:09:17:89:02:64:B5:1F:C1:20:67:A4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E2ACB75E6B42AA6E876C02308A668D53B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FuGozL1M7P0OCReJAmS1H8EgZ6Q.roa
Signing time: Fri 15 May 2026 08:40:37 +0000
ROA not before: Fri 15 May 2026 08:40:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22427
IP address blocks: 89.213.192.0/24 maxlen: 24
213.130.154.0/24 maxlen: 24
213.218.225.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:cb:75:e6:b4:2a:a6:e8:76:c0:23:08:a6:68:d5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 15 08:40:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16e1a8ccbd4cecfd0e0917890264b51fc12067a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:83:7d:e6:6d:21:3a:24:c7:52:46:1e:fe:
bb:a0:b7:d6:3d:b5:57:ae:7a:b8:07:0d:19:dc:9d:
de:14:50:ac:b2:d4:b9:70:6b:2f:a6:e8:cd:8e:34:
1c:55:3e:1e:a5:8c:b3:06:c9:f2:64:79:88:1c:4b:
bc:41:71:10:3f:c9:8a:ec:aa:e1:59:66:7c:18:c0:
bd:48:cc:01:2e:b8:15:13:7e:18:c4:a6:a6:0f:3d:
01:34:c6:15:4b:53:1a:e2:8a:f8:4b:67:6b:94:90:
7d:e9:73:88:76:5b:de:8f:c8:9a:41:5f:ea:09:24:
3e:f7:5d:c3:92:77:72:e8:44:ae:d9:28:ab:25:8b:
dd:8f:9d:fd:e3:55:6c:82:0b:0e:19:11:a3:0a:a3:
18:4f:98:d5:a2:1e:a6:08:87:f9:3a:ce:eb:d5:dc:
2c:6a:6d:af:01:34:a7:0b:8c:5c:21:b2:fe:e5:e1:
c2:28:f9:7f:a6:bc:cb:d4:7a:78:1c:87:c3:23:68:
b2:64:b5:b2:07:e2:0f:7f:fa:fb:e1:cc:2b:9a:bd:
b8:4d:46:69:15:15:20:49:ca:54:95:18:ad:73:f1:
6a:73:c8:23:c9:be:1f:01:d8:14:dd:90:2b:7e:57:
c4:dc:4d:d7:f4:39:39:42:71:69:e1:5d:c2:34:0b:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E1:A8:CC:BD:4C:EC:FD:0E:09:17:89:02:64:B5:1F:C1:20:67:A4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FuGozL1M7P0OCReJAmS1H8EgZ6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.192.0/24
213.130.154.0/24
213.218.225.0-213.218.226.255
Signature Algorithm: sha256WithRSAEncryption
00:05:2e:c5:52:f9:18:90:4c:2d:c5:1d:5c:27:de:8a:90:51:
67:b4:0a:12:1c:92:2e:b2:5c:53:b1:38:37:01:d1:91:57:32:
f4:8d:00:68:f2:81:7f:b8:1e:22:91:ec:60:06:c5:97:3d:c5:
ce:1f:1e:b9:cc:fd:08:2b:2e:4b:a0:29:5c:47:5f:40:fc:6e:
6b:6b:27:66:46:10:bc:fb:8f:c5:dc:15:d9:c2:fc:5b:7d:ea:
89:42:e8:f9:4f:0c:37:d1:89:29:c1:d3:16:b9:f4:ee:d9:f5:
26:d8:7d:8f:6b:f8:3a:aa:10:75:be:12:3b:d9:a1:95:45:be:
d9:1b:21:21:80:21:51:97:66:c4:74:66:1f:81:a5:b3:e4:0a:
8b:c5:6f:ba:d7:12:68:ed:04:4c:f2:cb:dc:2e:78:82:d8:55:
1a:f5:2a:0c:84:08:8c:be:cd:14:ee:14:df:f6:5a:49:b2:16:
c9:d0:f9:c0:40:7b:bf:04:d8:79:e9:7f:25:63:67:e5:9a:3e:
ff:5f:c2:c0:3b:f1:20:1d:ce:7e:a8:7c:74:16:27:fe:d5:82:
70:2f:3e:26:d8:d0:3c:8f:56:11:7f:7b:36:76:1e:00:cb:5e:
89:79:ce:8c:66:de:56:fa:82:d0:7a:e3:d6:83:71:bc:f2:48:
8f:cf:7f:89
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ4qy3XmtCqm6HbAIwimaNU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNTE1MDg0MDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmUxYThjY2JkNGNlY2ZkMGUwOTE3ODkwMjY0YjUxZmMxMjA2N2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6ODfeZtITokx1JGHv67oLfWPbVX
rnq4Bw0Z3J3eFFCsstS5cGsvpujNjjQcVT4epYyzBsnyZHmIHEu8QXEQP8mK7Krh
WWZ8GMC9SMwBLrgVE34YxKamDz0BNMYVS1Ma4or4S2drlJB96XOIdlvej8iaQV/q
CSQ+913Dkndy6ESu2SirJYvdj53941VsggsOGRGjCqMYT5jVoh6mCIf5Os7r1dws
am2vATSnC4xcIbL+5eHCKPl/przL1Hp4HIfDI2iyZLWyB+IPf/r74cwrmr24TUZp
FRUgScpUlRitc/Fqc8gjyb4fAdgU3ZArflfE3E3X9Dk5QnFp4V3CNAvToQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFBbhqMy9TOz9DgkXiQJktR/BIGekMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRnVHb3pMMU03UDBPQ1JlSkFtUzFIOEVnWjZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAWdXAAwQA
1YKaMAwDBADV2uEDBADV2uIwDQYJKoZIhvcNAQELBQADggEBAAAFLsVS+RiQTC3F
HVwn3oqQUWe0ChIcki6yXFOxODcB0ZFXMvSNAGjygX+4HiKR7GAGxZc9xc4fHrnM
/QgrLkugKVxHX0D8bmtrJ2ZGELz7j8XcFdnC/Ft96olC6PlPDDfRiSnB0xa59O7Z
9SbYfY9r+DqqEHW+EjvZoZVFvtkbISGAIVGXZsR0Zh+BpbPkCovFb7rXEmjtBEzy
y9wueILYVRr1KgyECIy+zRTuFN/2WkmyFsnQ+cBAe78E2HnpfyVjZ+WaPv9fwsA7
8SAdzn6ofHQWJ/7VgnAvPibY0DyPVhF/ezZ2HgDLXol5zoxm3lb6gtB649aDcbzy
SI/Pf4k=
-----END CERTIFICATE-----
Generated at Sun May 24 11:36:52 2026 by rpki-client