Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/FzTjuLk_7nA9UDQXeDEoPzRq1Pk.roa
File: FzTjuLk_7nA9UDQXeDEoPzRq1Pk.roa (raw, json)
Hash identifier: HHvcn0OMUDNhaE4ndCUSU7YL9isEufzC3TEBmLz+PNk=
Subject key identifier: 17:34:E3:B8:B9:3F:EE:70:3D:50:34:17:78:31:28:3F:34:6A:D4:F9
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 01A1645AAF8EBF275321F31380AFB9C4034C
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/FzTjuLk_7nA9UDQXeDEoPzRq1Pk.roa
Signing time: Thu 22 Oct 2026 16:03:47 +0000
ROA not before: Thu 22 Oct 2026 16:03:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204800
IP address blocks: 65.98.12.0/24 maxlen: 24
65.98.32.0/24 maxlen: 24
85.187.128.0/21 maxlen: 24
85.187.128.0/22 maxlen: 24
103.138.189.0/24 maxlen: 24
185.149.112.0/22 maxlen: 24
185.151.48.0/22 maxlen: 24
185.160.65.0/24 maxlen: 24
192.250.228.0/24 maxlen: 24
192.250.235.0/24 maxlen: 24
198.38.91.0/24 maxlen: 24
209.42.27.0/24 maxlen: 24
216.67.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:5a:af:8e:bf:27:53:21:f3:13:80:af:b9:c4:03:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Oct 22 16:03:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1734e3b8b93fee703d5034177831283f346ad4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:7e:ca:cc:fd:96:c2:b5:c4:1f:ee:a7:f5:
aa:02:70:58:ae:c2:56:aa:51:03:f3:ce:ef:e9:60:
d4:8f:ca:ca:8e:ec:5d:09:15:33:d2:3b:d3:17:73:
d4:1f:6d:0d:94:24:6f:21:5b:e3:aa:a3:c5:0f:d4:
6e:d1:e2:1f:61:a9:8b:23:78:aa:f4:0a:9a:f2:3a:
4a:b8:f0:ff:c7:ec:a4:39:ca:50:49:7e:b1:4a:37:
0d:01:2a:ff:b6:a9:6c:82:ff:7c:f6:05:92:3f:c9:
34:e9:d5:3c:4e:ef:0e:5f:da:f7:88:82:59:be:8a:
39:8f:b6:ac:c2:92:e8:43:2b:b7:28:f8:bd:53:e3:
a7:c1:b3:8d:f4:b0:65:c5:45:3c:b5:15:8f:66:40:
d1:8d:88:c4:0b:46:87:89:0e:38:32:31:b3:d0:6e:
4a:f8:56:ba:e2:cf:da:10:39:46:0b:53:8e:5f:67:
99:c6:d8:47:ca:69:d6:20:ed:a7:02:ad:63:d8:5c:
af:02:9a:42:67:6b:ac:64:21:32:35:6f:05:01:d1:
6e:0c:33:6c:f7:d1:37:43:2b:65:bf:89:37:c7:82:
86:9d:8c:7a:2d:39:0a:2c:62:a1:95:86:10:66:41:
f9:9b:09:2d:0c:90:34:68:6a:48:52:5a:31:cf:7e:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:34:E3:B8:B9:3F:EE:70:3D:50:34:17:78:31:28:3F:34:6A:D4:F9
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/FzTjuLk_7nA9UDQXeDEoPzRq1Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.98.12.0/24
65.98.32.0/24
85.187.128.0/21
103.138.189.0/24
185.149.112.0/22
185.151.48.0/22
185.160.65.0/24
192.250.228.0/24
192.250.235.0/24
198.38.91.0/24
209.42.27.0/24
216.67.230.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a8:d4:86:64:4d:20:72:e4:5d:f1:68:d7:aa:12:d5:05:be:
81:75:59:b4:5d:a8:e7:27:53:0e:b7:0e:7e:1a:87:1c:de:e8:
cb:b8:5f:f4:a2:2d:5d:12:a7:fd:fe:b1:76:dd:75:3d:02:86:
18:8d:79:b1:8f:de:a8:58:aa:db:6b:23:93:d6:21:21:d7:89:
4a:01:9e:ca:ca:79:ed:9c:05:22:90:84:2c:43:89:c1:4c:34:
f9:20:15:18:9c:f0:b7:9f:1a:f4:56:f1:ab:36:15:82:2a:3c:
5c:d5:82:77:a2:bf:e8:92:1e:d7:00:91:91:53:ec:6f:d5:04:
d3:29:80:1e:78:04:88:60:95:b0:71:10:e3:81:f8:91:26:5a:
bd:a2:75:fd:12:c0:6b:97:c5:82:2a:f7:81:97:0a:25:9e:1b:
1b:33:cd:a8:72:73:a7:d2:ee:1b:2a:64:c5:6f:50:a0:b1:dd:
ab:c4:5c:c4:58:e7:3a:32:0b:74:cc:d1:8c:03:bc:06:28:cc:
b3:2d:7b:2c:12:66:81:70:f7:ab:2c:a8:06:37:a3:48:79:63:
ef:2e:b0:bf:4b:f9:b4:bf:79:15:80:89:d0:8b:1e:99:f7:f3:
77:8b:33:ee:82:53:a3:10:64:91:7d:e8:86:c4:ca:b1:92:ae:
3f:3e:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:29:16 2026 by rpki-client