Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/FXGJPB5cV8SV55l2B2YVTcFdnlo.roa
File: FXGJPB5cV8SV55l2B2YVTcFdnlo.roa (raw, json)
Hash identifier: tVUcwXpqVpVN7Cet85WPpi0wi/fMBdIGr9P4IXIyce0=
Subject key identifier: 15:71:89:3C:1E:5C:57:C4:95:E7:99:76:07:66:15:4D:C1:5D:9E:5A
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01A1352665E8FC44AE4476A8A7D114D0EB61
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/FXGJPB5cV8SV55l2B2YVTcFdnlo.roa
Signing time: Tue 13 Oct 2026 12:04:31 +0000
ROA not before: Tue 13 Oct 2026 12:04:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15533
IP address blocks: 5.32.152.0/21 maxlen: 21
37.244.64.0/18 maxlen: 18
62.73.128.0/19 maxlen: 19
91.185.160.0/20 maxlen: 20
176.62.128.0/21 maxlen: 21
213.212.64.0/18 maxlen: 18
2001:4138::/32 maxlen: 32
2001:4139::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:26:65:e8:fc:44:ae:44:76:a8:a7:d1:14:d0:eb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Oct 13 12:04:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1571893c1e5c57c495e799760766154dc15d9e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6a:16:70:64:f7:2e:bb:8d:3a:a4:ac:f6:bb:
97:48:0e:2b:a7:bb:05:9b:57:be:bd:bb:b5:f4:7f:
4c:2f:fe:99:56:42:61:c6:fa:10:96:c4:f0:ff:fc:
1c:36:be:25:ae:09:f3:79:f7:5b:2a:c1:e9:70:3a:
ed:33:82:70:a7:2c:12:d3:12:1a:c5:6f:2b:22:29:
f7:aa:92:40:a1:b3:2f:a4:61:4b:b5:0b:62:ae:55:
92:be:44:4e:3a:64:be:df:d1:89:e0:9d:0e:91:9b:
f8:19:4f:ae:05:3d:22:6b:7e:71:04:41:03:2f:2c:
43:e5:36:a6:88:aa:2f:3a:ce:48:5e:b8:47:78:79:
25:9d:50:65:33:b7:eb:88:e3:d0:2b:dc:16:5f:0d:
3e:c5:a6:f4:7e:6b:b7:f3:cd:2e:bd:47:4b:5f:66:
12:ee:17:75:21:b1:b4:82:9d:6c:7c:24:c6:96:96:
2a:98:cc:93:93:c7:dc:85:57:70:20:6b:ab:ed:b1:
14:f1:b0:d8:5d:88:85:c3:1c:e7:96:49:55:63:6f:
63:7a:0e:60:b1:1c:19:bd:b3:66:74:ec:12:ae:95:
db:e3:2c:77:72:de:0f:89:dd:02:cb:38:7e:c5:68:
e2:40:0c:cc:94:0d:21:69:13:75:81:19:50:93:44:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:71:89:3C:1E:5C:57:C4:95:E7:99:76:07:66:15:4D:C1:5D:9E:5A
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/FXGJPB5cV8SV55l2B2YVTcFdnlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.152.0/21
37.244.64.0/18
62.73.128.0/19
91.185.160.0/20
176.62.128.0/21
213.212.64.0/18
IPv6:
2001:4138::/31
Signature Algorithm: sha256WithRSAEncryption
19:41:eb:47:40:67:08:90:ec:0d:82:64:4e:38:ba:e1:fe:82:
35:a9:7c:28:19:7f:e6:3e:32:24:5e:f6:b3:a8:42:21:70:8d:
c9:29:bd:55:7a:96:4e:a7:98:c0:22:73:ef:07:17:87:9f:8b:
20:b0:de:39:4e:a7:9a:ad:16:f6:1f:f5:ea:d0:aa:8f:27:76:
3f:d1:8e:b9:68:e4:09:78:5c:32:9a:bb:61:7c:26:b1:2c:83:
88:6f:ae:f8:1b:aa:a0:79:85:35:92:ad:9b:99:fe:28:68:60:
90:15:db:d7:24:76:24:09:2d:4e:c9:f5:ce:74:64:e4:81:6d:
4c:04:bd:ae:1b:b5:88:d6:83:80:81:cf:7e:26:5c:1c:5c:a0:
bd:25:2e:01:be:8c:6e:45:e4:02:d9:a5:d9:ab:08:75:de:65:
2b:4c:71:b0:9b:66:ee:85:e2:43:0c:f2:f4:47:8b:8c:d4:28:
b3:1d:94:f0:03:56:92:f1:a9:9a:3f:77:ba:2c:4a:85:60:11:
e7:a8:ed:63:d6:2d:1f:37:c8:42:da:5e:fe:43:de:9f:4b:48:
50:f3:af:1b:94:5c:4f:e7:b6:02:9f:f2:e0:d3:b6:75:3c:5d:
5f:17:80:e0:1b:9b:78:44:1f:12:07:12:29:0a:3a:9a:30:b9:
5e:08:64:00
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAaE1JmXo/ESuRHaop9EU0OthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ODdhNjg4YTg5YTk4OTk0OTQxNmE4MTljYzRhODBkZWE0
NTRjOWQwHhcNMjYxMDEzMTIwNDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTcxODkzYzFlNWM1N2M0OTVlNzk5NzYwNzY2MTU0ZGMxNWQ5ZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42oWcGT3LruNOqSs9ruXSA4rp7sF
m1e+vbu19H9ML/6ZVkJhxvoQlsTw//wcNr4lrgnzefdbKsHpcDrtM4JwpywS0xIa
xW8rIin3qpJAobMvpGFLtQtirlWSvkROOmS+39GJ4J0OkZv4GU+uBT0ia35xBEED
LyxD5TamiKovOs5IXrhHeHklnVBlM7friOPQK9wWXw0+xab0fmu3880uvUdLX2YS
7hd1IbG0gp1sfCTGlpYqmMyTk8fchVdwIGur7bEU8bDYXYiFwxznlklVY29jeg5g
sRwZvbNmdOwSrpXb4yx3ct4Pid0Cyzh+xWjiQAzMlA0haRN1gRlQk0QYbwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFBVxiTweXFfEleeZdgdmFU3BXZ5aMB8GA1UdIwQY
MBaAFEWHpoiompiZSUFqgZzEqA3qRUydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlllbWlLaWFtSmxKUVdxQm5NU29EZXBGVEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82MWQyYjMtNzlkYi00ODk5LThiODAt
MmY3MjU5NTYxNDhmLzEvRlhHSlBCNWNWOFNWNTVsMkIyWVZUY0ZkbmxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82MWQyYjMtNzlkYi00ODk5LThiODAtMmY3MjU5NTYxNDhm
LzEvUlllbWlLaWFtSmxKUVdxQm5NU29EZXBGVEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDBSCYAwQG
JfRAAwQFPkmAAwQEW7mgAwQDsD6AAwQG1dRAMA0EAgACMAcDBQEgAUE4MA0GCSqG
SIb3DQEBCwUAA4IBAQAZQetHQGcIkOwNgmROOLrh/oI1qXwoGX/mPjIkXvazqEIh
cI3JKb1VepZOp5jAInPvBxeHn4sgsN45TqearRb2H/Xq0KqPJ3Y/0Y65aOQJeFwy
mrthfCaxLIOIb674G6qgeYU1kq2bmf4oaGCQFdvXJHYkCS1OyfXOdGTkgW1MBL2u
G7WI1oOAgc9+JlwcXKC9JS4BvoxuReQC2aXZqwh13mUrTHGwm2buheJDDPL0R4uM
1CizHZTwA1aS8amaP3e6LEqFYBHnqO1j1i0fN8hC2l7+Q96fS0hQ868blFxP57YC
n/Lg07Z1PF1fF4DgG5t4RB8SBxIpCjqaMLleCGQA
-----END CERTIFICATE-----
Generated at Mon Nov 2 11:44:39 2026 by rpki-client