Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/ftnsGygGlijbgR6jxBk4ZgwLkeM.roa
File: ftnsGygGlijbgR6jxBk4ZgwLkeM.roa (raw, json)
Hash identifier: +VxOWjBJ1VhIXPt/tik0w6Yjp57WRgkY4c+JOWNc11E=
Subject key identifier: 7E:D9:EC:1B:28:06:96:28:DB:81:1E:A3:C4:19:38:66:0C:0B:91:E3
Certificate issuer: /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
Certificate serial: 019EDEB50F7A5757AF8B16CB5F42A737C2C2
Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/ftnsGygGlijbgR6jxBk4ZgwLkeM.roa
Signing time: Fri 19 Jun 2026 07:07:48 +0000
ROA not before: Fri 19 Jun 2026 07:07:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8437
IP address blocks: 91.220.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:de:b5:0f:7a:57:57:af:8b:16:cb:5f:42:a7:37:c2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
Validity
Not Before: Jun 19 07:07:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ed9ec1b28069628db811ea3c41938660c0b91e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:43:91:a7:f5:99:59:b1:11:79:b5:05:15:
4d:73:e7:18:5b:1e:30:2f:8d:74:83:7d:be:15:90:
1f:49:73:84:f2:2d:8e:28:84:65:a2:ea:a2:76:24:
ff:71:d1:f2:35:5a:8d:7e:72:ca:4b:2c:d5:db:f3:
11:5d:36:60:ae:8b:f6:3b:1b:73:e9:7b:43:53:11:
5b:c9:30:a7:68:e9:5d:b1:eb:33:70:d2:ad:18:c5:
17:ba:a6:9a:b2:ab:fb:b6:12:90:00:d8:57:dc:67:
b6:3f:55:42:7c:08:a9:cc:ea:13:b9:5e:3d:a7:4e:
74:b5:ef:4e:b0:b8:08:bf:77:08:c3:ec:9b:b8:b6:
56:43:ca:11:ba:aa:f6:1f:63:41:a5:f0:78:6f:12:
30:3c:4c:fb:1c:ab:2a:86:e9:12:e8:b1:55:2e:f0:
0b:63:0e:aa:31:bf:7a:df:d4:29:ec:9a:ec:62:8f:
b0:d0:bc:a2:ec:6e:b6:52:93:b4:71:eb:ce:6d:3c:
3d:f7:37:02:5c:ed:0f:f2:ea:8f:0c:cd:cc:6a:53:
76:84:58:fd:90:bd:90:13:f3:8c:61:6b:6c:d4:cb:
ed:a1:f4:24:9c:5b:9d:bc:11:fc:ef:bb:a7:a8:68:
88:a0:48:69:cd:dd:4d:83:e2:df:22:b0:71:d4:c8:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D9:EC:1B:28:06:96:28:DB:81:1E:A3:C4:19:38:66:0C:0B:91:E3
X509v3 Authority Key Identifier:
keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/ftnsGygGlijbgR6jxBk4ZgwLkeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.2.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c8:0f:44:2c:70:57:4f:61:89:ff:1c:e2:03:8f:8a:81:13:
21:df:7b:27:cd:5e:3e:13:40:2c:c6:41:89:dd:92:2b:6a:4d:
07:de:e1:8f:d3:a2:bc:a2:b1:d9:bd:e8:54:30:dc:5f:5b:e5:
d7:6c:f7:fd:e3:7c:86:2a:b8:cb:6e:b6:e0:70:d3:3b:60:e0:
0a:f6:eb:95:2a:12:c9:12:58:5d:10:a0:1e:5e:b0:e1:d9:dc:
e1:9c:51:36:e1:f0:15:34:19:80:4c:2f:fc:1e:fb:5b:bc:6b:
7f:1e:e1:99:c8:f4:67:b5:9d:be:f6:c7:f6:79:f4:22:7f:5d:
12:40:07:fc:eb:99:1c:f5:95:fe:9b:13:d4:ec:be:94:a4:f9:
f4:1b:b0:f2:b0:0d:f0:68:ad:36:2f:e6:01:ee:b0:3f:80:56:
33:fb:03:3d:27:a6:35:e4:dd:b6:db:d8:17:3a:8b:c9:5c:67:
23:f3:8d:c5:e7:83:02:de:50:35:e7:2a:ae:03:5c:f1:92:60:
12:39:78:50:72:61:a8:d8:d1:99:e8:2e:64:a5:90:78:b2:0f:
73:df:66:0f:de:07:12:0b:00:98:15:d9:46:9a:26:41:4c:04:
e4:81:d8:40:1c:e4:58:5f:dd:28:f5:67:43:3d:92:dc:df:7c:
3f:1a:ea:b0
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZ7etQ96V1evixbLX0KnN8LCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTAxNDY0YTY5NWIwZjZmNTJmNTExYmNjMTI0MGZhMjg0
ZDNkY2YwHhcNMjYwNjE5MDcwNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWQ5ZWMxYjI4MDY5NjI4ZGI4MTFlYTNjNDE5Mzg2NjBjMGI5MWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAVDkaf1mVmxEXm1BRVNc+cYWx4w
L410g32+FZAfSXOE8i2OKIRlouqidiT/cdHyNVqNfnLKSyzV2/MRXTZgrov2Oxtz
6XtDUxFbyTCnaOldseszcNKtGMUXuqaasqv7thKQANhX3Ge2P1VCfAipzOoTuV49
p050te9OsLgIv3cIw+ybuLZWQ8oRuqr2H2NBpfB4bxIwPEz7HKsqhukS6LFVLvAL
Yw6qMb9639Qp7JrsYo+w0Lyi7G62UpO0cevObTw99zcCXO0P8uqPDM3MalN2hFj9
kL2QE/OMYWts1MvtofQknFudvBH877unqGiIoEhpzd1Ng+LfIrBx1MjN/QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFH7Z7BsoBpYo24Eeo8QZOGYMC5HjMB8GA1UdIwQY
MBaAFPrgFGSmlbD29S9RG8wSQPooTT3PMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11QVVaS2FWc1BiMUwxRWJ6QkpBLWloTlBjOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMWM2NzA0LTUxMGEtNDgwMC1hODkw
LTMyMzUyZjk2YTYyMS8xL2Z0bnNHeWdHbGlqYmdSNmp4Qms0Wmd3TGtlTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYmMvMWM2NzA0LTUxMGEtNDgwMC1hODkwLTMyMzUyZjk2YTYy
MS8xLzEtdUFVWkthVnNQYjFMMUViekJKQS1paE5QYzguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb3AIw
DQYJKoZIhvcNAQELBQADggEBAJ3ID0QscFdPYYn/HOIDj4qBEyHfeyfNXj4TQCzG
QYndkitqTQfe4Y/Toryisdm96FQw3F9b5dds9/3jfIYquMtutuBw0ztg4Ar265Uq
EskSWF0QoB5esOHZ3OGcUTbh8BU0GYBML/we+1u8a38e4ZnI9Ge1nb72x/Z59CJ/
XRJAB/zrmRz1lf6bE9TsvpSk+fQbsPKwDfBorTYv5gHusD+AVjP7Az0npjXk3bbb
2Bc6i8lcZyPzjcXngwLeUDXnKq4DXPGSYBI5eFByYajY0ZnoLmSlkHiyD3PfZg/e
BxILAJgV2UaaJkFMBOSB2EAc5Fhf3Sj1Z0M9ktzffD8a6rA=
-----END CERTIFICATE-----
Generated at Mon Jun 29 18:23:06 2026 by rpki-client