Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FNXi-7c7upMAqP8L9tvxipVcKPs.roa
File: FNXi-7c7upMAqP8L9tvxipVcKPs.roa (raw, json)
Hash identifier: P2NOq11X+whmR0HIf1iYUEX+BcMe8nBSIeRWWnSbArs=
Subject key identifier: 14:D5:E2:FB:B7:3B:BA:93:00:A8:FF:0B:F6:DB:F1:8A:95:5C:28:FB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A045344F0A52B4092FC06E74FF87E30AC1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FNXi-7c7upMAqP8L9tvxipVcKPs.roa
Signing time: Thu 27 Aug 2026 21:50:51 +0000
ROA not before: Thu 27 Aug 2026 21:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 2.26.20.0/22 maxlen: 24
2.26.60.0/22 maxlen: 24
2.26.68.0/22 maxlen: 24
2.26.104.0/21 maxlen: 24
2.27.32.0/21 maxlen: 24
2.27.52.0/23 maxlen: 24
2.27.54.0/23 maxlen: 24
2.27.68.0/22 maxlen: 24
13.143.64.0/22 maxlen: 24
13.143.128.0/23 maxlen: 24
31.76.12.0/22 maxlen: 24
31.76.48.0/22 maxlen: 24
31.76.230.0/23 maxlen: 24
31.77.196.0/22 maxlen: 24
31.77.202.0/23 maxlen: 24
31.77.204.0/23 maxlen: 24
31.77.206.0/23 maxlen: 24
64.188.118.0/23 maxlen: 24
77.239.108.0/22 maxlen: 24
144.31.52.0/24 maxlen: 24
144.31.126.0/24 maxlen: 24
144.31.127.0/24 maxlen: 24
144.31.140.0/22 maxlen: 24
144.31.152.0/23 maxlen: 24
144.31.186.0/23 maxlen: 24
150.241.88.0/23 maxlen: 24
150.241.96.0/22 maxlen: 24
150.241.106.0/23 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:34:4f:0a:52:b4:09:2f:c0:6e:74:ff:87:e3:0a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 27 21:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14d5e2fbb73bba9300a8ff0bf6dbf18a955c28fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:d0:ce:99:e8:f4:aa:b6:be:70:0c:0d:d1:
7e:20:03:91:28:1f:5b:34:5e:40:33:97:5c:8d:e0:
9a:33:b7:35:a9:70:69:09:47:29:bb:6f:58:fb:53:
4d:85:d0:36:65:df:bd:ae:13:a7:87:33:46:48:82:
51:2c:e1:02:72:aa:c5:d6:2b:e2:98:dd:e9:9f:39:
a4:20:7e:e4:31:33:de:47:96:d1:92:ff:48:71:c3:
e1:e7:75:8d:1a:5a:4c:82:4d:53:54:45:51:8c:4f:
29:23:58:ad:b7:a6:8b:d0:0c:9c:d9:d8:29:61:8f:
d2:b4:53:7a:9d:3d:9d:92:7f:b4:4c:06:55:7a:11:
29:fb:a0:b4:bd:52:b0:2c:df:71:6d:fb:98:9f:98:
b9:c7:ad:60:b0:74:1b:c9:08:de:a8:80:34:2e:82:
b9:83:e8:17:3b:4f:29:77:f5:a2:ac:49:2e:b4:f5:
c2:96:10:a0:37:f8:d7:c1:be:99:b3:de:5b:56:5b:
47:e9:e0:58:02:5e:d9:23:1e:ed:ae:ba:05:11:31:
fe:29:4d:a4:de:d5:d3:fe:c9:5e:51:18:27:3f:82:
45:91:61:9d:2a:35:37:d4:3b:84:ea:df:e4:04:2e:
f4:23:90:cb:65:9a:f3:dd:c4:88:3e:a0:f7:4b:11:
0f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D5:E2:FB:B7:3B:BA:93:00:A8:FF:0B:F6:DB:F1:8A:95:5C:28:FB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FNXi-7c7upMAqP8L9tvxipVcKPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.20.0/22
2.26.60.0/22
2.26.68.0/22
2.26.104.0/21
2.27.32.0/21
2.27.52.0/22
2.27.68.0/22
13.143.64.0/22
13.143.128.0/23
31.76.12.0/22
31.76.48.0/22
31.76.230.0/23
31.77.196.0/22
31.77.202.0-31.77.207.255
64.188.118.0/23
77.239.108.0/22
144.31.52.0/24
144.31.126.0/23
144.31.140.0/22
144.31.152.0/23
144.31.186.0/23
150.241.88.0/23
150.241.96.0/22
150.241.106.0/23
150.241.115.0-150.241.116.255
150.241.123.0/24
Signature Algorithm: sha256WithRSAEncryption
27:c2:1f:28:6c:36:23:de:24:63:e9:94:49:fa:53:3a:ec:f6:
9d:1c:fd:b8:49:96:e4:57:2e:ee:66:78:6b:73:eb:7f:72:09:
26:b0:21:0d:a1:2a:5d:70:a8:23:a5:22:1d:70:a9:9b:d2:02:
f5:4b:59:da:6b:09:68:ef:20:22:7d:fc:5c:b9:bb:44:fa:b6:
0b:b8:8b:7f:9f:8d:ce:b9:18:80:fd:a7:60:4b:d9:59:78:ea:
34:bd:56:d8:0d:25:84:ce:87:38:a3:0f:8f:ae:13:76:d1:aa:
43:36:1a:b6:7e:0c:5c:a8:5a:ab:4f:f6:ef:7d:a2:cb:53:31:
2b:79:13:f9:b0:a9:8f:49:af:3c:fc:19:bc:86:cb:0d:df:ca:
ef:97:ae:5b:74:73:64:58:5b:28:9d:9d:6a:47:27:f2:58:c6:
32:b3:63:dc:f0:22:d9:3f:20:82:2b:44:57:74:fb:78:ed:da:
39:c8:eb:ae:ac:44:91:c1:f0:bf:c8:c6:9e:94:5c:bc:00:16:
eb:55:8b:db:f1:52:b4:cf:80:62:0c:5c:bb:17:55:50:7f:3b:
ea:88:11:71:68:b6:91:9c:18:ae:fd:48:a3:41:34:f3:bb:c0:
b6:61:4a:5f:ed:3b:96:80:ba:d5:46:aa:ef:65:55:c4:47:9d:
59:49:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:42 2026 by rpki-client