Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/FPO4JFoWqBRwfe8mlzC0uPjCbg8.roa
File: FPO4JFoWqBRwfe8mlzC0uPjCbg8.roa (raw, json)
Hash identifier: ujn0LvVoidJ56WNlu+r8tID6g+lSFpguA7vOBwIEiew=
Subject key identifier: 14:F3:B8:24:5A:16:A8:14:70:7D:EF:26:97:30:B4:B8:F8:C2:6E:0F
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019FF1898CF838325FD14D2C020F04888508
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/FPO4JFoWqBRwfe8mlzC0uPjCbg8.roa
Signing time: Tue 11 Aug 2026 15:55:51 +0000
ROA not before: Tue 11 Aug 2026 15:55:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219454
IP address blocks: 89.126.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:89:8c:f8:38:32:5f:d1:4d:2c:02:0f:04:88:85:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 11 15:55:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14f3b8245a16a814707def269730b4b8f8c26e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:29:6f:f2:d3:16:4c:a2:15:ed:e5:c9:74:
af:fc:11:32:22:ca:09:aa:12:21:e8:e5:fa:5a:5e:
94:31:5b:06:6b:cf:43:7a:3c:ca:7f:a7:5e:f8:aa:
59:43:e8:7e:c9:82:b0:73:74:a0:b2:fd:bc:45:f0:
63:59:30:90:c7:11:5f:ee:76:10:94:35:fb:58:18:
98:7b:47:18:92:4a:75:b7:80:5e:72:10:19:ae:f8:
45:3b:ef:3d:f4:fe:63:81:56:c7:72:23:b0:22:b9:
33:0f:d1:ec:7b:39:6b:1c:ee:9e:20:c5:e8:48:99:
81:81:e2:37:2c:3c:51:d0:6c:98:be:92:37:52:b8:
ba:d2:04:da:33:6d:d3:67:d9:7d:db:cc:37:15:fd:
99:1c:15:c1:e9:96:90:42:b3:66:a6:a1:da:ff:02:
a9:37:aa:02:8c:85:58:dc:64:e7:9f:b3:59:ca:91:
6b:c3:be:1b:91:a8:33:65:32:b1:86:3c:5b:d6:ad:
96:e9:b8:e1:c5:40:99:90:f6:89:cf:e9:f8:a3:13:
05:7e:61:3c:d0:fd:c1:cf:96:76:b3:ed:f1:e8:ab:
0d:17:a8:46:cd:1f:a3:69:64:52:38:4f:a1:73:0d:
33:2e:b3:46:03:a5:c6:2b:07:fc:ca:16:87:21:34:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F3:B8:24:5A:16:A8:14:70:7D:EF:26:97:30:B4:B8:F8:C2:6E:0F
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/FPO4JFoWqBRwfe8mlzC0uPjCbg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.225.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fd:4d:35:c6:99:00:00:7a:d9:10:71:3d:37:7d:a4:eb:a0:
e5:15:e2:64:34:11:03:52:4c:b1:37:72:0c:0a:ea:db:d0:1a:
cb:f9:ec:66:15:67:41:d2:b3:b9:bb:98:41:68:07:46:23:52:
46:a8:d8:ff:d3:27:ea:e7:2f:86:e5:d6:7c:42:f0:9f:17:15:
31:94:18:0a:03:ea:f4:a7:4a:24:6c:64:12:2d:bf:0d:8b:fc:
f5:3a:15:a2:e8:13:79:0c:76:66:4d:85:dd:ac:4c:08:7d:15:
21:ba:bf:98:5a:87:c8:9f:79:49:b6:af:89:0f:71:32:5d:36:
10:50:7d:73:32:29:a0:6d:89:b7:ec:18:a7:70:37:e0:e5:5e:
a4:e1:31:06:37:a7:48:ab:5f:a2:fd:58:07:8f:32:5f:2c:46:
36:d2:ff:49:ca:7f:5f:4e:f1:2d:52:ed:02:51:e5:4e:d9:47:
7a:a0:6e:2c:ab:75:01:ab:c8:e7:c7:fe:d1:b8:1d:a2:37:5b:
f1:b8:9b:6e:d3:69:52:e6:87:fe:1e:5a:ca:cb:dd:ab:29:57:
ae:9b:01:1b:54:5a:5b:da:4d:7b:16:31:4d:e3:33:84:e6:88:
25:1a:75:45:71:65:2c:a1:f4:97:d4:59:e7:c4:ee:75:19:05:
13:4d:9a:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/xiYz4ODJf0U0sAg8EiIUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl
MjlkMjUwHhcNMjYwODExMTU1NTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGYzYjgyNDVhMTZhODE0NzA3ZGVmMjY5NzMwYjRiOGY4YzI2ZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoQpb/LTFkyiFe3lyXSv/BEyIsoJ
qhIh6OX6Wl6UMVsGa89DejzKf6de+KpZQ+h+yYKwc3Sgsv28RfBjWTCQxxFf7nYQ
lDX7WBiYe0cYkkp1t4BechAZrvhFO+899P5jgVbHciOwIrkzD9HsezlrHO6eIMXo
SJmBgeI3LDxR0GyYvpI3Uri60gTaM23TZ9l928w3Ff2ZHBXB6ZaQQrNmpqHa/wKp
N6oCjIVY3GTnn7NZypFrw74bkagzZTKxhjxb1q2W6bjhxUCZkPaJz+n4oxMFfmE8
0P3Bz5Z2s+3x6KsNF6hGzR+jaWRSOE+hcw0zLrNGA6XGKwf8yhaHITSVLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBTzuCRaFqgUcH3vJpcwtLj4wm4PMB8GA1UdIwQY
MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct
NWNmNTZlZTQzNWIzLzEvRlBPNEpGb1dxQlJ3ZmU4bWx6QzB1UGpDYmc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz
LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX7hMA0G
CSqGSIb3DQEBCwUAA4IBAQB2/U01xpkAAHrZEHE9N32k66DlFeJkNBEDUkyxN3IM
Curb0BrL+exmFWdB0rO5u5hBaAdGI1JGqNj/0yfq5y+G5dZ8QvCfFxUxlBgKA+r0
p0okbGQSLb8Ni/z1OhWi6BN5DHZmTYXdrEwIfRUhur+YWofIn3lJtq+JD3EyXTYQ
UH1zMimgbYm37BincDfg5V6k4TEGN6dIq1+i/VgHjzJfLEY20v9Jyn9fTvEtUu0C
UeVO2Ud6oG4sq3UBq8jnx/7RuB2iN1vxuJtu02lS5of+HlrKy92rKVeumwEbVFpb
2k17FjFN4zOE5oglGnVFcWUsofSX1FnnxO51GQUTTZod
-----END CERTIFICATE-----
Generated at Wed Aug 12 21:12:08 2026 by rpki-client