Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/F4xpW0ReLmTcAzC6THiqmRkvhAM.roa
File: F4xpW0ReLmTcAzC6THiqmRkvhAM.roa (raw, json)
Hash identifier: 5sDtrSMdSGpJ596XgWC4DayfFduI/GTyMSEpSSE7Vbo=
Subject key identifier: 17:8C:69:5B:44:5E:2E:64:DC:03:30:BA:4C:78:AA:99:19:2F:84:03
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 019FDAE1B9F7D86E0AE2CAF5DD810045DD54
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/F4xpW0ReLmTcAzC6THiqmRkvhAM.roa
Signing time: Fri 07 Aug 2026 06:20:54 +0000
ROA not before: Fri 07 Aug 2026 06:20:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43937
IP address blocks: 87.251.0.0/20 maxlen: 24
93.89.16.0/20 maxlen: 24
201.7.32.0/19 maxlen: 24
2a02:7980::/32 maxlen: 32
2a02:7980:105::/48 maxlen: 48
2a02:7980:200::/48 maxlen: 48
2a02:7980:201::/48 maxlen: 48
2a02:7980:202::/48 maxlen: 48
2a02:7980:203::/48 maxlen: 48
2a02:7980:204::/48 maxlen: 48
2a02:7980:205::/48 maxlen: 48
2a02:7980:206::/48 maxlen: 48
2a02:7980:207::/48 maxlen: 48
2a02:7980:208::/48 maxlen: 48
2a02:7980:209::/48 maxlen: 48
2a02:7980:210::/48 maxlen: 48
2a02:7980:300::/48 maxlen: 48
2a02:7980:301::/48 maxlen: 48
2a02:7980:302::/48 maxlen: 48
2a02:7980:303::/48 maxlen: 48
2a02:7980:306::/48 maxlen: 48
2a02:7980:308::/48 maxlen: 48
2a02:7980:309::/48 maxlen: 48
2a02:7980:310::/48 maxlen: 48
2a02:7980:311::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:da:e1:b9:f7:d8:6e:0a:e2:ca:f5:dd:81:00:45:dd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Aug 7 06:20:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=178c695b445e2e64dc0330ba4c78aa99192f8403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:e3:15:1d:10:e1:35:26:df:30:5a:e3:ad:
86:99:c8:0e:1f:ef:8a:da:30:3f:f5:72:d6:87:93:
a6:ec:cc:7d:db:5d:8f:7e:98:2c:b9:04:4c:c2:a3:
76:63:f2:ad:8d:46:f4:fc:02:cd:ed:d5:b0:62:fa:
50:31:db:ba:a6:c2:02:ff:f9:4b:9f:56:64:f1:3f:
dc:5e:0d:8e:b1:4a:74:e0:e3:79:d6:49:5d:0d:8d:
2f:3a:f9:fd:c3:e2:77:8e:a2:76:c1:39:65:35:b1:
f0:bf:6b:a5:45:aa:af:e0:25:d6:0d:06:d5:56:9e:
6f:51:1e:d1:45:94:68:9a:c0:eb:bf:79:25:c4:c9:
cf:a3:e2:b8:57:c3:28:3b:41:f9:25:aa:21:29:40:
3d:c8:8c:0c:58:cb:91:6d:12:fb:2b:29:1f:7d:ac:
85:20:4d:a1:99:29:ff:8c:55:06:a1:a2:67:5a:4d:
42:cd:73:9b:f9:1c:ed:d9:4d:29:98:36:82:67:26:
b6:ab:50:fd:e7:30:c4:90:b1:08:80:82:65:d6:ff:
72:aa:6c:0b:00:8e:ce:bf:52:01:21:86:9e:5b:bf:
6a:4f:35:1c:65:b6:10:dc:d8:f9:e7:af:43:a4:68:
a7:8c:38:7a:ff:f4:1e:fd:14:06:f3:d2:72:f2:64:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8C:69:5B:44:5E:2E:64:DC:03:30:BA:4C:78:AA:99:19:2F:84:03
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/F4xpW0ReLmTcAzC6THiqmRkvhAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.0.0/20
93.89.16.0/20
201.7.32.0/19
IPv6:
2a02:7980::/32
Signature Algorithm: sha256WithRSAEncryption
08:b6:79:63:5c:20:6c:7b:25:6f:b3:93:30:23:36:88:0f:ac:
18:ad:b9:fb:87:85:ab:02:52:6e:ff:3d:13:26:e1:71:a8:aa:
74:9d:bc:2a:ea:74:4e:19:6e:ca:09:8a:75:41:61:ef:12:0a:
7f:03:07:44:79:51:8c:78:27:27:3e:dc:36:c0:07:ab:7f:ae:
42:c7:bd:58:f7:6f:e8:f5:d5:51:5d:bc:a3:3b:15:f5:8d:7c:
a0:64:81:1e:a8:01:04:5f:bc:e3:ba:cf:75:8e:27:e8:17:77:
06:73:b1:04:76:08:91:52:a9:33:97:2e:4f:fa:b0:c3:d4:e5:
ab:cc:ff:bf:22:98:a5:58:5f:10:ad:3d:02:1d:13:09:dd:c8:
e0:65:c0:b0:d3:05:a8:4f:fb:af:87:a4:3f:38:ff:98:72:f7:
9c:1d:ad:c5:07:82:b7:0a:60:e3:91:38:74:24:da:45:a4:c9:
70:f7:7e:58:d2:3e:d3:21:ce:0f:95:69:dc:a8:ef:2e:e8:b6:
7c:e5:e6:9e:4f:a4:af:72:1b:cb:74:59:76:53:b0:86:2a:5b:
cd:e7:ba:ce:35:3f:f6:9e:5a:03:f7:0f:83:6a:99:e2:97:eb:
0a:c2:c6:a0:26:a9:6a:4e:20:be:eb:a7:c1:4e:50:73:ae:6f:
f7:f7:36:91
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ/a4bn32G4K4sr13YEARd1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NjYyZjk4MDIwZGE0ZTM3ZDUwZWQzYmIzMDIwMjc3NGYy
OTJkN2EwHhcNMjYwODA3MDYyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzhjNjk1YjQ0NWUyZTY0ZGMwMzMwYmE0Yzc4YWE5OTE5MmY4NDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzajjFR0Q4TUm3zBa462GmcgOH++K
2jA/9XLWh5Om7Mx9212PfpgsuQRMwqN2Y/KtjUb0/ALN7dWwYvpQMdu6psIC//lL
n1Zk8T/cXg2OsUp04ON51kldDY0vOvn9w+J3jqJ2wTllNbHwv2ulRaqv4CXWDQbV
Vp5vUR7RRZRomsDrv3klxMnPo+K4V8MoO0H5JaohKUA9yIwMWMuRbRL7KykffayF
IE2hmSn/jFUGoaJnWk1CzXOb+Rzt2U0pmDaCZya2q1D95zDEkLEIgIJl1v9yqmwL
AI7Ov1IBIYaeW79qTzUcZbYQ3Nj5569DpGinjDh6//Qe/RQG89Jy8mQZLQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFBeMaVtEXi5k3AMwukx4qpkZL4QDMB8GA1UdIwQY
MBaAFMVmL5gCDaTjfVDtO7MCAndPKS16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTIt
Zjg5OTc3YTQ1YjYwLzEvRjR4cFcwUmVMbVRjQXpDNlRIaXFtUmt2aEFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTItZjg5OTc3YTQ1YjYw
LzEveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEV/sAAwQE
XVkQAwQFyQcgMA0EAgACMAcDBQAqAnmAMA0GCSqGSIb3DQEBCwUAA4IBAQAItnlj
XCBseyVvs5MwIzaID6wYrbn7h4WrAlJu/z0TJuFxqKp0nbwq6nROGW7KCYp1QWHv
Egp/AwdEeVGMeCcnPtw2wAerf65Cx71Y92/o9dVRXbyjOxX1jXygZIEeqAEEX7zj
us91jifoF3cGc7EEdgiRUqkzly5P+rDD1OWrzP+/IpilWF8QrT0CHRMJ3cjgZcCw
0wWoT/uvh6Q/OP+YcvecHa3FB4K3CmDjkTh0JNpFpMlw935Y0j7TIc4PlWncqO8u
6LZ85eaeT6SvchvLdFl2U7CGKlvN57rONT/2nloD9w+Dapnil+sKwsagJqlqTiC+
66fBTlBzrm/39zaR
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:19:37 2026 by rpki-client