Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FVAWQE_F_B-QNPrBuHzFB9H1fWU.roa
File: FVAWQE_F_B-QNPrBuHzFB9H1fWU.roa (raw, json)
Hash identifier: 1zBFSj86vONrDq52HyVKGULt6XNHNb4ba+imTkedkX8=
Subject key identifier: 15:50:16:40:4F:C5:FC:1F:90:34:FA:C1:B8:7C:C5:07:D1:F5:7D:65
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A09F292120D655AC7A06BAB07C0280B633
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FVAWQE_F_B-QNPrBuHzFB9H1fWU.roa
Signing time: Mon 14 Sep 2026 09:04:27 +0000
ROA not before: Mon 14 Sep 2026 09:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.90.19.0/24 maxlen: 24
185.36.204.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.218.22.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:29:21:20:d6:55:ac:7a:06:ba:b0:7c:02:80:b6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 14 09:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=155016404fc5fc1f9034fac1b87cc507d1f57d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:50:df:66:5b:7f:a5:1c:3c:ef:86:fa:05:
f0:3b:ec:df:7b:80:55:bc:05:28:5e:10:a5:0e:cc:
af:3f:a9:9d:ac:9d:07:61:51:e0:d9:44:b7:15:ee:
0d:71:8d:8c:da:79:ce:f1:74:ec:82:00:41:21:cb:
ae:59:aa:c9:9e:53:49:24:ea:a6:84:6e:77:ee:d6:
17:35:17:de:dd:72:b3:a6:81:b0:51:b7:c8:40:bd:
00:94:27:e7:5a:a3:50:d8:e1:cd:a8:a4:2c:0a:b6:
1d:96:97:ec:e7:de:f2:cd:e9:96:af:34:47:03:72:
ee:fa:0d:7a:fb:8b:58:b5:19:19:cd:41:76:c0:03:
1f:42:c0:2e:94:ca:fa:c4:c9:70:61:9f:06:a5:46:
f4:4e:8a:e8:5c:45:2a:72:b4:85:1c:6b:a3:0a:50:
78:68:b3:4f:5e:e7:f1:0a:75:d8:3f:f6:d7:4f:cc:
da:20:1a:d7:78:14:cb:78:75:ae:c4:9d:10:bf:a3:
80:f6:ea:64:d7:c3:72:a0:85:04:77:25:73:5c:b0:
85:60:1e:50:78:f5:0c:18:93:e1:6f:06:bd:a6:84:
11:20:9c:3e:31:50:5e:e3:b7:c0:26:82:9d:c0:4b:
24:a3:b4:1f:c8:cf:81:ca:9a:6b:74:88:b5:14:bd:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:50:16:40:4F:C5:FC:1F:90:34:FA:C1:B8:7C:C5:07:D1:F5:7D:65
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FVAWQE_F_B-QNPrBuHzFB9H1fWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.19.0/24
185.36.204.0/24
185.206.248.0/24
185.218.22.0/24
185.246.115.0/24
193.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a1:71:75:50:ac:ef:b6:bc:de:18:2c:d1:9c:c9:cd:7e:f1:
a5:5b:44:5e:a7:05:88:f2:ec:78:77:8a:01:c1:04:39:cf:31:
6f:81:77:ec:50:bc:cc:72:b8:79:54:d8:cf:65:32:45:65:8f:
02:76:c2:23:e5:fb:2f:76:6a:5c:12:05:8b:1a:d7:fa:b5:d7:
36:97:e3:9b:fd:1c:d6:df:bd:e3:4f:0c:fa:17:8a:8e:8a:ed:
25:79:39:61:ee:7b:a8:e8:d3:1f:a7:da:59:43:cf:db:d1:bd:
f7:80:32:ba:d6:7a:9e:2b:0f:0d:2e:4f:6b:4b:4d:f2:b0:4a:
6f:5e:41:c0:8f:d7:44:bc:1a:37:2b:24:61:ff:01:66:75:a0:
da:5f:9e:75:5a:17:b5:f9:57:05:f8:79:70:a7:47:85:75:df:
2a:42:37:75:85:59:42:f9:5b:af:c8:53:06:ef:15:7e:fc:33:
06:56:e7:65:fc:5b:e4:cf:32:49:8b:ac:da:7a:7c:87:ab:de:
75:08:b6:92:01:0a:39:d8:97:e3:ee:4e:31:81:9c:9a:6d:51:
e7:d5:15:d2:57:d6:b7:1c:63:98:fb:c0:bf:da:93:2d:a5:64:
75:ba:a5:60:94:81:7e:81:f7:17:e0:3b:40:b7:9b:b9:59:8e:
bf:8c:94:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 20:40:40 2026 by rpki-client