Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/FFH-x-RNNM693EOrIqRfKBSm8JI.roa
File: FFH-x-RNNM693EOrIqRfKBSm8JI.roa (raw, json)
Hash identifier: eluGKvVIgr0ftrXv5C4wTs3Lgf2P1Ct93KhT7bsL0Do=
Subject key identifier: 14:51:FE:C7:E4:4D:34:CE:BD:DC:43:AB:22:A4:5F:28:14:A6:F0:92
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019E535E1BEA2C3BEC2705F37B3BA9A1B23D
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/FFH-x-RNNM693EOrIqRfKBSm8JI.roa
Signing time: Sat 23 May 2026 05:45:36 +0000
ROA not before: Sat 23 May 2026 05:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214361
IP address blocks: 178.239.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:53:5e:1b:ea:2c:3b:ec:27:05:f3:7b:3b:a9:a1:b2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 23 05:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1451fec7e44d34cebddc43ab22a45f2814a6f092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:1d:f7:a2:09:7d:73:a4:a3:b7:39:be:3c:
8f:3e:6f:f4:bc:60:c5:e0:95:67:fa:21:5b:6d:96:
1d:1a:6a:09:b1:b3:28:9b:85:d2:d4:59:92:fb:42:
21:c3:92:55:7f:4a:59:3d:a8:6a:80:c0:db:80:b1:
11:2a:23:57:d8:ea:2b:d1:f9:e5:be:ba:c4:2a:5c:
2b:39:75:bf:8a:58:63:45:1a:21:76:73:75:4e:c9:
08:08:7b:24:2f:c1:43:77:68:ed:a1:e7:ca:de:54:
fc:f3:c3:1a:12:45:48:5c:d7:d6:7d:0e:97:2f:05:
95:2d:b0:4c:73:80:80:5f:73:dd:d6:f2:f6:e2:62:
4e:f9:08:83:4d:d6:50:2e:64:27:0e:cb:6c:38:f1:
44:a7:69:bd:11:34:98:26:7b:7c:f4:56:59:e8:92:
1d:6a:4e:e3:cf:97:42:64:a2:f9:7a:1c:07:a4:fe:
cd:7b:eb:80:d1:82:ed:df:d3:2b:8e:35:13:b8:79:
79:75:73:5f:41:a5:c4:7c:ae:43:2e:85:9d:e7:38:
23:92:81:b2:6a:d6:3d:23:7b:be:da:fa:ce:ce:12:
b4:b2:1e:36:34:29:04:37:20:25:6e:02:1a:84:a2:
65:8f:3a:d4:e1:5b:e4:eb:81:a9:35:ba:57:09:03:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:51:FE:C7:E4:4D:34:CE:BD:DC:43:AB:22:A4:5F:28:14:A6:F0:92
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/FFH-x-RNNM693EOrIqRfKBSm8JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.146.0/24
Signature Algorithm: sha256WithRSAEncryption
44:79:30:37:be:60:3f:6d:08:08:4b:3c:87:a4:8f:52:f0:2b:
b7:cf:33:bb:95:11:63:58:76:00:9c:4c:c2:ed:a3:eb:b0:48:
20:c0:8e:27:a4:c4:f5:ed:3a:50:b2:0d:c1:11:8d:76:c7:10:
79:cc:47:c1:86:9c:40:2b:a4:3a:bd:c5:c5:13:24:3e:76:01:
89:6e:21:80:44:eb:cd:8a:f3:33:6b:47:72:60:6d:ae:f5:12:
a1:8a:aa:5e:bf:9d:c2:6b:b9:4a:26:a9:9e:50:1e:db:af:18:
37:06:0d:ac:d3:93:71:b8:57:2d:65:31:b6:02:11:0c:d9:6c:
28:76:97:1b:c1:f3:90:fd:fe:56:93:75:66:4f:e4:6f:1c:86:
47:6c:0f:5b:2f:d7:ad:0a:32:9f:16:00:ca:ff:99:0d:26:1a:
c3:3e:cd:62:6e:44:0e:f3:0d:55:be:fd:cf:4d:36:75:3a:d1:
ef:91:31:65:e7:83:a0:b0:b0:6f:dc:5e:5a:8e:78:44:dc:7e:
87:18:ff:53:67:3b:b5:9f:d0:05:a8:9d:37:62:21:55:57:4d:
7a:40:4b:21:3c:96:f3:05:c9:f8:db:9e:e2:88:c9:47:70:8c:
3f:b5:bc:99:32:13:4f:0d:7e:53:50:f6:63:2f:f4:c8:16:d4:
af:de:29:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5TXhvqLDvsJwXzezupobI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjYwNTIzMDU0NTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDUxZmVjN2U0NGQzNGNlYmRkYzQzYWIyMmE0NWYyODE0YTZmMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykMd96IJfXOko7c5vjyPPm/0vGDF
4JVn+iFbbZYdGmoJsbMom4XS1FmS+0Ihw5JVf0pZPahqgMDbgLERKiNX2Oor0fnl
vrrEKlwrOXW/ilhjRRohdnN1TskICHskL8FDd2jtoefK3lT888MaEkVIXNfWfQ6X
LwWVLbBMc4CAX3Pd1vL24mJO+QiDTdZQLmQnDstsOPFEp2m9ETSYJnt89FZZ6JId
ak7jz5dCZKL5ehwHpP7Ne+uA0YLt39MrjjUTuHl5dXNfQaXEfK5DLoWd5zgjkoGy
atY9I3u+2vrOzhK0sh42NCkENyAlbgIahKJljzrU4Vvk64GpNbpXCQPQBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBRR/sfkTTTOvdxDqyKkXygUpvCSMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvRkZILXgtUk5OTTY5M0VPcklxUmZLQlNtOEpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu+SMA0G
CSqGSIb3DQEBCwUAA4IBAQBEeTA3vmA/bQgISzyHpI9S8Cu3zzO7lRFjWHYAnEzC
7aPrsEggwI4npMT17TpQsg3BEY12xxB5zEfBhpxAK6Q6vcXFEyQ+dgGJbiGAROvN
ivMza0dyYG2u9RKhiqpev53Ca7lKJqmeUB7brxg3Bg2s05NxuFctZTG2AhEM2Wwo
dpcbwfOQ/f5Wk3VmT+RvHIZHbA9bL9etCjKfFgDK/5kNJhrDPs1ibkQO8w1Vvv3P
TTZ1OtHvkTFl54OgsLBv3F5ajnhE3H6HGP9TZzu1n9AFqJ03YiFVV016QEshPJbz
Bcn4257iiMlHcIw/tbyZMhNPDX5TUPZjL/TIFtSv3inL
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:06:16 2026 by rpki-client