Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/FUZBk4RoMMAKOt4FuxEe4m54_Y0.roa
File: FUZBk4RoMMAKOt4FuxEe4m54_Y0.roa (raw, json)
Hash identifier: 4AO2Rr40bs3bWeKfynW3DiZx1+Y9YCS4Bf+omFYvnyU=
Subject key identifier: 15:46:41:93:84:68:30:C0:0A:3A:DE:05:BB:11:1E:E2:6E:78:FD:8D
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 01A0FD4BFCE7E7A1BB987D2F9F822C8E7B1E
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/FUZBk4RoMMAKOt4FuxEe4m54_Y0.roa
Signing time: Fri 02 Oct 2026 15:46:50 +0000
ROA not before: Fri 02 Oct 2026 15:46:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25145
IP address blocks: 31.40.240.0/24 maxlen: 24
77.92.96.0/24 maxlen: 24
77.92.97.0/24 maxlen: 24
77.92.98.0/24 maxlen: 24
77.92.99.0/24 maxlen: 24
77.92.100.0/24 maxlen: 24
77.92.101.0/24 maxlen: 24
77.92.102.0/24 maxlen: 24
77.92.103.0/24 maxlen: 24
77.92.104.0/24 maxlen: 24
77.92.105.0/24 maxlen: 24
77.92.106.0/24 maxlen: 24
77.92.107.0/24 maxlen: 24
77.92.108.0/24 maxlen: 24
77.92.109.0/24 maxlen: 24
77.92.110.0/24 maxlen: 24
77.92.111.0/24 maxlen: 24
77.92.112.0/24 maxlen: 24
77.92.113.0/24 maxlen: 24
77.92.114.0/24 maxlen: 24
77.92.115.0/24 maxlen: 24
77.92.116.0/24 maxlen: 24
77.92.117.0/24 maxlen: 24
77.92.118.0/24 maxlen: 24
77.92.119.0/24 maxlen: 24
77.92.120.0/24 maxlen: 24
77.92.121.0/24 maxlen: 24
77.92.122.0/24 maxlen: 24
77.92.123.0/24 maxlen: 24
77.92.124.0/24 maxlen: 24
77.92.125.0/24 maxlen: 24
77.92.126.0/24 maxlen: 24
77.92.127.0/24 maxlen: 24
185.115.208.0/24 maxlen: 24
185.115.210.0/24 maxlen: 24
185.115.211.0/24 maxlen: 24
213.144.96.0/24 maxlen: 24
213.144.97.0/24 maxlen: 24
213.144.98.0/24 maxlen: 24
213.144.99.0/24 maxlen: 24
213.144.100.0/24 maxlen: 24
213.144.101.0/24 maxlen: 24
213.144.103.0/24 maxlen: 24
213.144.104.0/24 maxlen: 24
213.144.105.0/24 maxlen: 24
213.144.106.0/24 maxlen: 24
213.144.107.0/24 maxlen: 24
213.144.108.0/24 maxlen: 24
213.144.109.0/24 maxlen: 24
213.144.110.0/24 maxlen: 24
213.144.111.0/24 maxlen: 24
213.144.112.0/24 maxlen: 24
213.144.113.0/24 maxlen: 24
213.144.114.0/24 maxlen: 24
213.144.115.0/24 maxlen: 24
213.144.116.0/24 maxlen: 24
213.144.117.0/24 maxlen: 24
213.144.118.0/24 maxlen: 24
213.144.119.0/24 maxlen: 24
213.144.120.0/24 maxlen: 24
213.144.121.0/24 maxlen: 24
213.144.122.0/24 maxlen: 24
213.144.123.0/24 maxlen: 24
213.144.124.0/24 maxlen: 24
213.144.125.0/24 maxlen: 24
213.144.126.0/24 maxlen: 24
213.144.127.0/24 maxlen: 24
2a02:ac80::/29 maxlen: 29
2a02:ac80::/32 maxlen: 32
2a02:ac80::/48 maxlen: 48
2a02:ac80:10::/48 maxlen: 48
2a02:ac80:20::/48 maxlen: 48
2a02:ac80:30::/48 maxlen: 48
2a02:ac80:40::/48 maxlen: 48
2a02:ac80:50::/48 maxlen: 48
2a02:ac80:60::/48 maxlen: 48
2a02:ac80:6a::/48 maxlen: 48
2a02:ac80:70::/48 maxlen: 48
2a02:ac80:90::/48 maxlen: 48
2a02:ac80:91::/48 maxlen: 48
2a02:ac80:92::/48 maxlen: 48
2a02:ac80:93::/48 maxlen: 48
2a02:ac80:96::/48 maxlen: 48
2a02:ac80:97::/48 maxlen: 48
2a02:ac80:99::/48 maxlen: 48
2a02:ac80:a0::/48 maxlen: 48
2a02:ac80:b0::/48 maxlen: 48
2a02:ac80:c0::/48 maxlen: 48
2a02:ac80:d0::/48 maxlen: 48
2a02:ac80:e0::/48 maxlen: 48
2a02:ac80:f0::/48 maxlen: 48
2a02:ac80:100::/48 maxlen: 48
2a02:ac80:101::/48 maxlen: 48
2a02:ac80:102::/48 maxlen: 48
2a02:ac80:103::/48 maxlen: 48
2a02:ac80:104::/48 maxlen: 48
2a02:ac80:105::/48 maxlen: 48
2a02:ac80:117::/48 maxlen: 48
2a02:ac80:127::/48 maxlen: 48
2a02:ac80:200::/48 maxlen: 48
2a02:ac80:300::/48 maxlen: 48
2a02:ac80:400::/48 maxlen: 48
2a02:ac80:500::/48 maxlen: 48
2a02:ac80:600::/48 maxlen: 48
2a02:ac80:700::/48 maxlen: 48
2a02:ac80:a00::/48 maxlen: 48
2a02:ac80:b00::/48 maxlen: 48
2a02:ac80:c00::/48 maxlen: 48
2a02:ac80:d00::/48 maxlen: 48
2a02:ac80:e00::/48 maxlen: 48
2a02:ac80:f00::/48 maxlen: 48
2a02:ac80:1000::/48 maxlen: 48
2a02:ac80:2000::/48 maxlen: 48
2a02:ac80:3000::/48 maxlen: 48
2a02:ac80:4000::/48 maxlen: 48
2a02:ac80:5000::/48 maxlen: 48
2a02:ac80:6000::/48 maxlen: 48
2a02:ac80:6100::/48 maxlen: 48
2a02:ac80:6300::/48 maxlen: 48
2a02:ac80:7000::/48 maxlen: 48
2a02:ac80:7370::/48 maxlen: 48
2a02:ac80:9100::/48 maxlen: 48
2a02:ac80:9300::/48 maxlen: 48
2a02:ac80:a000::/48 maxlen: 48
2a02:ac80:b000::/48 maxlen: 48
2a02:ac80:c000::/48 maxlen: 48
2a02:ac80:d000::/48 maxlen: 48
2a02:ac80:e000::/48 maxlen: 48
2a02:ac80:f000::/48 maxlen: 48
2a02:ac81::/32 maxlen: 32
2a02:ac81:101::/48 maxlen: 48
2a02:ac81:102::/48 maxlen: 48
2a02:ac82::/32 maxlen: 32
2a02:ac83::/32 maxlen: 32
2a02:ac84::/32 maxlen: 32
2a02:ac85::/32 maxlen: 32
2a02:ac86::/32 maxlen: 32
2a02:ac87::/32 maxlen: 32
2a02:ac87:5900::/48 maxlen: 48
2a02:ac87:59cb::/48 maxlen: 48
2a02:ac87:ac87::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:4b:fc:e7:e7:a1:bb:98:7d:2f:9f:82:2c:8e:7b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Oct 2 15:46:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15464193846830c00a3ade05bb111ee26e78fd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:bd:73:9d:87:c8:d1:a7:0e:1a:1a:7f:d5:
62:9c:e0:ff:3d:30:b8:13:c9:32:78:59:cb:48:1a:
3a:5f:ec:0c:ad:0f:71:b3:aa:9f:76:b5:fa:4b:ba:
07:c1:93:13:e0:a5:ab:7c:45:f6:2a:16:2b:b2:f1:
d0:ef:6a:d5:b5:23:7e:e0:be:51:36:85:0a:63:0a:
df:bf:e9:16:0b:5f:52:5b:a2:45:22:33:f0:13:e8:
3b:03:1d:c0:21:68:9d:19:65:73:44:69:c8:ad:d6:
b0:1d:6e:6a:12:98:57:20:dd:2e:e4:c4:61:63:39:
d1:c0:0e:59:30:ae:82:63:44:b5:4b:6c:e7:28:28:
df:d8:27:14:16:1d:aa:e9:22:39:13:0b:98:5a:2e:
57:96:a8:8e:b0:89:1d:dd:b8:21:3c:cd:a2:38:c0:
f7:39:a7:0d:fc:ef:68:2e:ec:8c:26:03:a2:47:54:
e9:3a:81:4f:7d:56:fc:c1:a3:52:43:b0:fa:3c:33:
c0:fd:c3:e5:c0:c4:e2:63:24:f2:03:b7:ce:2e:77:
10:09:04:0d:7e:17:7a:7a:ff:ed:fb:9f:eb:0e:9d:
f1:d6:1a:ec:0b:05:a3:6d:1b:b3:75:0e:22:0c:20:
43:7b:ae:13:11:2c:91:73:6a:93:0a:c5:91:c4:bf:
5b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:46:41:93:84:68:30:C0:0A:3A:DE:05:BB:11:1E:E2:6E:78:FD:8D
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/FUZBk4RoMMAKOt4FuxEe4m54_Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.240.0/24
77.92.96.0/19
185.115.208.0/24
185.115.210.0/23
213.144.96.0-213.144.101.255
213.144.103.0-213.144.127.255
IPv6:
2a02:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
8e:e6:71:81:35:f9:4d:83:6c:f2:62:eb:6d:ec:ac:a1:8c:d4:
8c:40:b4:9d:4f:95:95:02:69:30:0d:f5:95:a2:b0:52:d9:f7:
3a:68:84:c6:05:72:be:12:ca:e7:69:f3:6d:67:47:df:95:60:
58:07:10:0b:71:a9:61:ee:99:66:b7:bb:6b:88:8c:c8:89:68:
21:72:ed:91:a3:13:4a:bf:4d:e6:a9:c9:4e:d6:33:8f:59:59:
8d:2a:01:3d:bc:fc:f2:0b:4e:6e:4d:ba:41:56:b6:b3:58:bc:
6b:85:83:a5:0a:0c:1a:a3:97:d9:e1:2f:53:4b:b7:3a:3c:97:
8b:c6:ba:7e:b0:2d:5f:ad:89:a7:95:ee:d5:91:b8:34:e0:16:
aa:4f:7e:82:b0:9f:3e:67:d5:0a:45:23:38:43:43:01:3c:4f:
f3:8c:c0:94:84:e2:a7:a0:5d:78:52:bf:d9:90:4e:53:0f:6f:
58:52:2d:67:04:21:51:d7:40:73:45:73:c6:67:e2:dc:68:21:
48:f7:2a:46:f1:a2:7a:77:ee:d8:6e:12:ea:01:b6:cf:c9:e8:
c8:d0:5f:68:b0:81:ac:89:c3:77:7f:9a:6a:b5:39:01:ec:23:
c0:76:0b:7d:06:43:99:b0:f3:4e:07:de:e8:22:4c:3b:2f:87:
c0:72:b2:a5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:35:59 2026 by rpki-client