Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/FbsD3IaJEYz-fngs_BkxMzDcei8.roa
File: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (raw, json)
Hash identifier: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=
Subject key identifier: 15:BB:03:DC:86:89:11:8C:FE:7E:78:2C:FC:19:31:33:30:DC:7A:2F
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0A3759620D7E036F9A1B45B913179963C
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/FbsD3IaJEYz-fngs_BkxMzDcei8.roa
Signing time: Tue 15 Sep 2026 05:06:27 +0000
ROA not before: Tue 15 Sep 2026 05:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204785
IP address blocks: 213.109.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:75:96:20:d7:e0:36:f9:a1:b4:5b:91:31:79:96:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 15 05:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15bb03dc8689118cfe7e782cfc19313330dc7a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:24:09:d4:e6:b0:f7:47:62:c1:bd:8e:c0:fd:
b9:e4:3f:1c:7a:fc:98:92:a5:f9:b2:c3:67:f3:f5:
8b:84:00:67:50:df:19:b0:58:fa:f5:59:6f:ce:92:
d2:e5:23:30:f4:f9:3e:2d:bf:18:aa:5d:25:74:cc:
ed:39:59:57:01:34:d9:3e:49:2f:3c:d7:a8:1c:36:
d7:20:41:84:39:de:6a:0d:8f:22:ce:67:d1:e2:e7:
ae:b5:9e:e2:6c:2c:3e:14:3f:75:dc:dd:c5:a3:b0:
a8:9b:ea:39:91:02:f3:ac:8c:d0:74:96:f7:dd:db:
43:c6:3a:c1:66:3b:77:79:7f:df:99:95:33:13:9c:
a5:2a:8d:54:af:f7:e3:61:0a:ad:68:a7:b2:e3:03:
1a:8d:11:d9:d0:d2:b3:22:33:b6:aa:be:d9:14:a7:
08:20:4d:97:67:c0:9b:28:6c:1f:a0:eb:fb:d9:fa:
b0:13:fe:66:b7:96:90:f7:9e:20:d6:0a:f2:d2:26:
a0:ee:7d:a9:94:b0:8f:8c:27:06:fb:af:14:7c:bb:
47:dd:75:01:a0:69:cc:67:3a:93:35:38:87:fb:36:
d5:1d:b0:2e:f8:d2:a0:90:5e:fe:07:7c:85:4b:04:
d7:a0:13:b0:cb:a2:13:7a:02:3f:c1:b9:58:b4:fe:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BB:03:DC:86:89:11:8C:FE:7E:78:2C:FC:19:31:33:30:DC:7A:2F
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/FbsD3IaJEYz-fngs_BkxMzDcei8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.180.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:cd:e3:b5:d6:d3:09:69:b2:e5:05:21:a0:c2:eb:be:73:0a:
7d:75:98:53:a2:a8:b2:5e:2d:72:29:49:d7:3e:d5:47:32:38:
1a:73:7d:c4:4b:69:dc:5c:8c:6a:0a:08:3a:8a:b2:af:8a:88:
be:da:0e:15:5b:18:cb:13:e2:48:99:ab:53:80:e9:e1:a3:54:
f0:16:1d:06:c0:5d:4a:a2:63:96:0a:d2:7b:5b:aa:a4:2c:65:
53:88:f6:44:27:da:ba:67:74:e3:41:b1:37:bc:7a:1c:65:2e:
27:08:ea:66:37:c0:09:9d:fd:44:df:8b:e2:10:04:9f:b2:af:
21:bd:3f:84:0a:16:cb:be:bf:72:c3:25:98:ec:0a:23:b2:23:
5a:ae:e6:a0:da:e6:a3:65:6f:bd:d6:3c:9c:7d:72:81:75:9e:
0d:8b:97:fb:49:a4:1d:84:8a:d1:8d:6e:81:37:05:9d:f1:89:
06:ab:ba:d9:6f:2d:1b:ad:50:cf:9c:37:3e:04:4b:c7:01:10:
04:76:88:7f:89:f0:39:99:07:f3:05:e5:e0:a5:74:14:96:24:
78:32:53:f3:25:65:22:4c:69:36:e1:b5:d7:99:f4:a6:3b:ac:
35:c5:27:f0:d0:08:29:33:c4:6b:2a:a9:0b:9b:cb:3b:17:12:
bc:ec:de:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCjdZYg1+A2+aG0W5ExeZY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYwOTE1MDUwNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWJiMDNkYzg2ODkxMThjZmU3ZTc4MmNmYzE5MzEzMzMwZGM3YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiQJ1Oaw90diwb2OwP255D8cevyY
kqX5ssNn8/WLhABnUN8ZsFj69VlvzpLS5SMw9Pk+Lb8Yql0ldMztOVlXATTZPkkv
PNeoHDbXIEGEOd5qDY8izmfR4ueutZ7ibCw+FD913N3Fo7Com+o5kQLzrIzQdJb3
3dtDxjrBZjt3eX/fmZUzE5ylKo1Ur/fjYQqtaKey4wMajRHZ0NKzIjO2qr7ZFKcI
IE2XZ8CbKGwfoOv72fqwE/5mt5aQ954g1gry0iag7n2plLCPjCcG+68UfLtH3XUB
oGnMZzqTNTiH+zbVHbAu+NKgkF7+B3yFSwTXoBOwy6ITegI/wblYtP4xQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBW7A9yGiRGM/n54LPwZMTMw3HovMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvRmJzRDNJYUpFWXotZm5nc19Ca3hNekRjZWk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W20MA0G
CSqGSIb3DQEBCwUAA4IBAQAbzeO11tMJabLlBSGgwuu+cwp9dZhToqiyXi1yKUnX
PtVHMjgac33ES2ncXIxqCgg6irKvioi+2g4VWxjLE+JImatTgOnho1TwFh0GwF1K
omOWCtJ7W6qkLGVTiPZEJ9q6Z3TjQbE3vHocZS4nCOpmN8AJnf1E34viEASfsq8h
vT+EChbLvr9ywyWY7AojsiNaruag2uajZW+91jycfXKBdZ4Ni5f7SaQdhIrRjW6B
NwWd8YkGq7rZby0brVDPnDc+BEvHARAEdoh/ifA5mQfzBeXgpXQUliR4MlPzJWUi
TGk24bXXmfSmO6w1xSfw0AgpM8RrKqkLm8s7FxK87N71
-----END CERTIFICATE-----
Generated at Wed Sep 16 05:27:11 2026 by rpki-client