Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/FL9irwuRBJubn5KGR74zfI3TJUE.roa
File: FL9irwuRBJubn5KGR74zfI3TJUE.roa (raw, json)
Hash identifier: qE5ND9NfhB6in/Tx2KE2NyF2krJHqjISsA5VXE3SoII=
Subject key identifier: 14:BF:62:AF:0B:91:04:9B:9B:9F:92:86:47:BE:33:7C:8D:D3:25:41
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01A0EEB3DBB0DD68CBAB7674337A2FFAC74A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/FL9irwuRBJubn5KGR74zfI3TJUE.roa
Signing time: Tue 29 Sep 2026 19:45:59 +0000
ROA not before: Tue 29 Sep 2026 19:45:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 2.57.150.0/24 maxlen: 24
45.142.212.0/24 maxlen: 24
45.152.213.0/24 maxlen: 24
45.152.214.0/24 maxlen: 24
80.64.19.0/24 maxlen: 24
91.213.29.0/24 maxlen: 24
91.220.223.0/24 maxlen: 24
91.239.238.0/24 maxlen: 24
92.63.182.0/24 maxlen: 24
92.63.183.0/24 maxlen: 24
193.8.171.0/24 maxlen: 24
194.156.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:b3:db:b0:dd:68:cb:ab:76:74:33:7a:2f:fa:c7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Sep 29 19:45:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14bf62af0b91049b9b9f928647be337c8dd32541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:dc:4e:63:d2:fd:d4:2b:38:52:f4:0c:c5:
e6:61:d8:a4:e3:6a:22:e7:af:c0:e5:02:62:60:b4:
b4:41:45:3c:e1:a8:d8:3c:8a:45:35:02:1e:3d:97:
3a:36:eb:00:ee:c5:de:43:4b:cd:4b:36:7d:58:6d:
8b:2d:46:b1:aa:89:14:83:44:65:11:73:46:1d:31:
00:58:02:3c:7f:12:b5:f2:81:81:be:23:e2:46:ee:
52:da:d6:7d:ef:9a:6f:f8:b8:30:1b:45:53:03:c3:
1e:b5:5f:92:69:4a:e5:3c:73:b8:50:61:08:36:08:
ea:cf:b7:ee:0f:91:be:1d:9a:f7:b4:8c:12:d3:47:
b7:a4:8a:b5:54:76:07:09:a6:3f:e3:e9:1f:84:ff:
5c:64:62:75:11:f2:ec:96:ae:4b:67:73:d0:cf:74:
bf:e5:5d:0c:cf:16:b2:a0:89:cd:3d:ef:77:59:cb:
1e:e8:b8:a7:b6:dc:d6:03:31:4c:73:b5:3d:df:0b:
c8:ce:d1:1d:2b:ef:b7:71:ff:40:97:21:0d:58:d2:
34:a9:16:07:8e:46:05:99:22:6c:f1:d1:a8:8b:cb:
ad:52:e6:1c:8f:75:01:8c:46:ab:fa:51:df:18:24:
22:95:45:ab:67:46:54:98:9f:16:ac:57:d1:76:1f:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BF:62:AF:0B:91:04:9B:9B:9F:92:86:47:BE:33:7C:8D:D3:25:41
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/FL9irwuRBJubn5KGR74zfI3TJUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.150.0/24
45.142.212.0/24
45.152.213.0-45.152.214.255
80.64.19.0/24
91.213.29.0/24
91.220.223.0/24
91.239.238.0/24
92.63.182.0/23
193.8.171.0/24
194.156.27.0/24
Signature Algorithm: sha256WithRSAEncryption
01:00:fa:b9:14:0b:81:13:c4:0c:c8:b6:eb:4e:74:aa:7e:7e:
d6:c8:d1:9c:e3:74:f6:40:5a:ac:aa:02:92:6d:5b:5e:65:90:
41:67:f1:2e:65:9b:05:31:40:37:a3:0f:41:07:cc:9b:76:8b:
97:b6:e4:e6:11:53:a2:bc:a1:2d:2f:0f:8c:96:b6:7d:49:d4:
98:cb:59:e3:05:c8:f8:5c:e4:3a:ae:0e:07:7f:9c:28:b4:ed:
76:1c:70:ff:ab:28:09:50:3d:b2:f7:f1:c3:9d:47:49:84:43:
5f:20:2d:12:96:65:2d:56:62:68:51:e3:27:85:17:27:83:45:
4f:77:b3:20:c5:9f:73:64:a2:b3:13:b6:c4:1f:b6:d3:1f:9a:
39:cc:bc:e1:12:42:60:e4:c5:06:45:77:7c:fb:64:76:9d:48:
56:27:43:18:14:8f:55:68:e8:da:46:20:c5:84:79:74:e9:bf:
e5:db:3e:f8:28:31:49:6f:b7:25:f2:e1:08:f7:43:77:e4:e0:
53:15:77:3a:91:14:99:4e:36:b0:75:be:35:37:7e:6f:4a:a5:
71:4f:37:9c:b4:93:43:f4:84:c3:ff:ab:74:9c:f0:c1:14:27:
76:cf:c2:06:c6:2f:cf:76:63:3e:f9:4b:03:5a:f5:27:78:a1:
9d:7f:08:7a
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAaDus9uw3WjLq3Z0M3ov+sdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjYwOTI5MTk0NTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGJmNjJhZjBiOTEwNDliOWI5ZjkyODY0N2JlMzM3YzhkZDMyNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkPcTmPS/dQrOFL0DMXmYdik42oi
56/A5QJiYLS0QUU84ajYPIpFNQIePZc6NusA7sXeQ0vNSzZ9WG2LLUaxqokUg0Rl
EXNGHTEAWAI8fxK18oGBviPiRu5S2tZ975pv+LgwG0VTA8MetV+SaUrlPHO4UGEI
Ngjqz7fuD5G+HZr3tIwS00e3pIq1VHYHCaY/4+kfhP9cZGJ1EfLslq5LZ3PQz3S/
5V0MzxayoInNPe93Wcse6LinttzWAzFMc7U93wvIztEdK++3cf9AlyENWNI0qRYH
jkYFmSJs8dGoi8utUuYcj3UBjEar+lHfGCQilUWrZ0ZUmJ8WrFfRdh/giwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFBS/Yq8LkQSbm5+Shke+M3yN0yVBMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvRkw5aXJ3dVJCSnVibjVLR1I3NHpmSTNUSlVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAAjmWAwQA
LY7UMAwDBAAtmNUDBAAtmNYDBABQQBMDBABb1R0DBABb3N8DBABb7+4DBAFcP7YD
BADBCKsDBADCnBswDQYJKoZIhvcNAQELBQADggEBAAEA+rkUC4ETxAzItutOdKp+
ftbI0ZzjdPZAWqyqApJtW15lkEFn8S5lmwUxQDejD0EHzJt2i5e25OYRU6K8oS0v
D4yWtn1J1JjLWeMFyPhc5DquDgd/nCi07XYccP+rKAlQPbL38cOdR0mEQ18gLRKW
ZS1WYmhR4yeFFyeDRU93syDFn3NkorMTtsQfttMfmjnMvOESQmDkxQZFd3z7ZHad
SFYnQxgUj1Vo6NpGIMWEeXTpv+XbPvgoMUlvtyXy4Qj3Q3fk4FMVdzqRFJlONrB1
vjU3fm9KpXFPN5y0k0P0hMP/q3Sc8MEUJ3bPwgbGL892Yz75SwNa9Sd4oZ1/CHo=
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:35:49 2026 by rpki-client