Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/FWpOH4N6BX553FneJcU6BE5bAF8.roa
File: FWpOH4N6BX553FneJcU6BE5bAF8.roa (raw, json)
Hash identifier: ye+1JcxX5r+qQirQAz9HO4h5aJ6vN0VuXH6bacrRE9E=
Subject key identifier: 15:6A:4E:1F:83:7A:05:7E:79:DC:59:DE:25:C5:3A:04:4E:5B:00:5F
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 01A0F433F1143970DE7B812E0BAB705D6580
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/FWpOH4N6BX553FneJcU6BE5bAF8.roa
Signing time: Wed 30 Sep 2026 21:23:59 +0000
ROA not before: Wed 30 Sep 2026 21:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207008
IP address blocks: 193.42.217.0/25 maxlen: 25
193.42.217.128/26 maxlen: 26
193.42.217.192/26 maxlen: 26
194.50.82.0/25 maxlen: 25
194.50.82.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:33:f1:14:39:70:de:7b:81:2e:0b:ab:70:5d:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Sep 30 21:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=156a4e1f837a057e79dc59de25c53a044e5b005f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fc:04:be:20:fd:88:8b:c9:4c:01:e0:5a:f9:
48:34:35:82:96:51:30:b8:a3:c9:9a:af:ec:b5:c4:
49:f6:1f:1a:98:ad:47:f9:2a:b2:49:21:48:9b:46:
77:df:1d:69:de:39:94:52:fd:94:0e:24:bf:cc:17:
e2:01:8b:07:c2:e6:b7:09:f5:3d:37:03:f5:49:b3:
b6:4e:77:41:53:bf:1f:78:3d:cc:71:b4:b2:7f:88:
05:2b:55:62:13:66:3f:8e:26:bf:9e:1a:5e:39:7e:
1c:a7:ab:bf:36:de:5c:71:cc:50:71:13:5b:25:13:
56:42:ec:61:77:eb:f5:57:91:63:8e:fe:17:c3:09:
43:3f:dd:a8:4b:bf:cc:13:63:cf:d9:6c:5c:37:a9:
11:24:86:d4:06:d2:bc:81:9e:1f:a4:66:d3:c9:0a:
95:19:e5:87:c8:b8:aa:cf:6a:94:46:be:14:67:46:
a4:d7:53:d3:53:a4:4a:fa:50:1e:25:1f:5f:9c:01:
38:b1:2f:24:c7:58:9f:f5:b3:01:5a:8d:d7:38:c6:
c9:1a:04:f6:d9:cf:b1:bf:a1:97:4e:4a:e6:ba:94:
47:3f:cd:6d:79:d1:9e:4e:a4:80:8e:6b:8a:0a:93:
6c:c9:34:8d:2e:d3:59:74:63:c5:bb:07:7a:40:1b:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6A:4E:1F:83:7A:05:7E:79:DC:59:DE:25:C5:3A:04:4E:5B:00:5F
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/FWpOH4N6BX553FneJcU6BE5bAF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.217.0/24
194.50.82.0/24
Signature Algorithm: sha256WithRSAEncryption
08:fa:32:e0:87:ae:0a:87:b9:8a:b4:49:10:34:84:a7:12:2c:
37:2b:14:c2:90:1d:0e:91:be:86:1e:0c:60:05:49:54:f5:b9:
28:69:a2:d4:49:40:3e:b5:68:56:05:36:93:0f:f5:36:c3:be:
eb:83:86:80:7e:f5:61:f4:d7:a2:dd:c7:4c:ac:ef:89:bf:ef:
80:81:07:cc:13:11:c2:01:0c:49:02:f7:bf:5b:c7:7e:7a:58:
ab:f2:87:b6:98:d1:94:bf:41:93:94:be:fc:65:89:42:07:b2:
4b:ea:09:b4:37:c0:d1:3b:77:c7:f6:17:d0:12:16:43:e2:7c:
fb:41:fd:c7:2f:77:cc:97:8d:e8:d1:19:a5:23:c8:1c:4d:74:
54:ae:e1:60:b8:d9:9c:83:ae:76:7c:da:92:3f:92:1f:32:67:
12:9c:bf:12:24:39:6b:2b:30:bc:19:62:89:5a:79:41:7c:4f:
7e:d5:43:39:8a:e5:a1:47:fb:be:3e:69:67:b3:15:45:4a:0e:
53:b8:55:fd:97:88:f8:dd:8a:b1:9c:fa:09:cf:98:b7:19:2a:
f4:45:b9:89:76:d0:61:94:f9:0c:f1:a9:14:37:b5:ea:10:25:
c8:f8:ad:e6:3a:96:4a:dc:ec:d6:3a:45:cb:9a:3b:63:c7:23:
da:0c:42:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:39:59 2026 by rpki-client