Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FDRP9HUc0vH5Ix3UYBdhKJs9A0A.roa
File: FDRP9HUc0vH5Ix3UYBdhKJs9A0A.roa (raw, json)
Hash identifier: nNnNUzGbKpT+K4kvA+VLwXsjqTUHucaILJ1cs6pXByw=
Subject key identifier: 14:34:4F:F4:75:1C:D2:F1:F9:23:1D:D4:60:17:61:28:9B:3D:03:40
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0E248281AA8FA0D66F082DB78203E8734
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FDRP9HUc0vH5Ix3UYBdhKJs9A0A.roa
Signing time: Sun 27 Sep 2026 09:52:54 +0000
ROA not before: Sun 27 Sep 2026 09:52:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 62.76.235.0/24 maxlen: 24
153.76.176.0/24 maxlen: 24
153.76.180.0/24 maxlen: 24
153.76.182.0/24 maxlen: 24
153.76.184.0/24 maxlen: 24
153.76.187.0/24 maxlen: 24
153.76.189.0/24 maxlen: 24
153.76.191.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:48:28:1a:a8:fa:0d:66:f0:82:db:78:20:3e:87:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 27 09:52:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14344ff4751cd2f1f9231dd4601761289b3d0340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:25:6a:aa:9d:26:ca:97:36:68:69:f2:f1:
64:90:4f:26:f3:84:32:60:71:5c:0e:29:bc:a4:f9:
55:6e:b4:a0:b9:7c:03:8b:e1:9a:a4:7b:3b:a7:4c:
7a:a7:f7:e9:90:bd:47:54:c3:84:d8:70:62:65:f8:
32:78:cd:7b:90:9c:6c:1e:bc:04:5c:e2:a7:5b:07:
b7:67:d7:c2:c1:ef:2e:3e:57:58:18:23:c4:8e:c9:
40:25:14:51:6f:60:d8:1c:14:b4:cb:f1:56:89:04:
9b:8c:a0:e4:2c:d2:b3:f4:f6:6b:ae:8d:51:26:6d:
69:c5:b9:d8:c6:d0:94:49:d4:c2:9d:cd:18:fc:ac:
9f:22:b3:d6:0a:97:4a:92:46:47:aa:56:8f:de:30:
e7:40:cd:c3:f5:e6:ab:53:e8:90:2c:76:62:8c:a2:
96:5a:88:40:2f:de:73:2e:c0:61:58:21:23:18:25:
8a:80:7a:27:6b:30:0f:e8:3a:f5:f4:01:db:c1:3a:
8c:97:70:b5:7d:27:d6:70:f9:83:85:95:e6:0f:03:
6d:51:e9:c9:7b:41:bb:1d:5c:31:c2:a5:c3:fd:65:
d3:de:31:01:c9:14:e8:1a:a1:ec:4f:24:e9:e0:46:
e6:08:29:fe:ba:ec:34:d8:ac:6d:3c:2c:ca:ed:31:
a9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:34:4F:F4:75:1C:D2:F1:F9:23:1D:D4:60:17:61:28:9B:3D:03:40
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FDRP9HUc0vH5Ix3UYBdhKJs9A0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.235.0/24
153.76.176.0/24
153.76.180.0/24
153.76.182.0/24
153.76.184.0/24
153.76.187.0/24
153.76.189.0/24
153.76.191.0/24
193.124.8.0/24
194.87.34.0/24
194.87.63.0/24
194.87.165.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:59:3a:6b:b9:89:c8:3f:c9:40:3c:9e:88:4a:2b:1f:6f:f0:
a5:f0:5f:da:cc:e2:a6:a4:26:0d:ab:36:d8:bd:44:b0:f4:44:
ee:51:5f:4a:cc:41:c7:86:ad:2d:21:ff:4e:71:79:bf:d8:ec:
bf:ff:ff:22:b6:e6:8b:c5:32:b0:1d:59:b9:50:5a:cc:d9:56:
f6:2b:f3:45:66:54:76:68:30:50:d6:0c:72:68:3a:df:c2:ee:
47:e6:63:de:e1:cd:c7:12:d7:af:ed:5b:01:a8:02:31:88:b8:
60:bf:a5:57:47:83:9d:27:b3:78:9b:06:9c:6a:a1:55:5f:bf:
3f:09:fa:07:b2:c6:5a:8a:a2:c2:ad:8d:d3:1e:38:2c:f4:47:
9f:cb:28:ef:63:b8:80:83:52:3e:0a:80:28:91:c0:86:7a:9b:
ef:9d:e1:8d:47:a7:d1:0f:84:a5:30:a7:6d:03:93:3f:02:79:
41:c5:c8:c2:f3:c7:8c:cc:30:fc:59:7b:0f:ea:d2:28:b1:aa:
1d:69:6d:b7:6e:e5:15:7a:c3:aa:3a:da:b5:cf:93:00:1a:01:
1a:d5:1e:99:fc:d0:6c:0e:70:77:b9:e6:52:34:e3:50:14:6e:
5e:ae:9e:86:b0:38:ec:a4:4a:07:ee:31:f7:25:26:8e:bb:45:
4f:1c:ad:6b
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAaDiSCgaqPoNZvCC23ggPoc0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwOTI3MDk1MjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDM0NGZmNDc1MWNkMmYxZjkyMzFkZDQ2MDE3NjEyODliM2QwMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ4laqqdJsqXNmhp8vFkkE8m84Qy
YHFcDim8pPlVbrSguXwDi+GapHs7p0x6p/fpkL1HVMOE2HBiZfgyeM17kJxsHrwE
XOKnWwe3Z9fCwe8uPldYGCPEjslAJRRRb2DYHBS0y/FWiQSbjKDkLNKz9PZrro1R
Jm1pxbnYxtCUSdTCnc0Y/KyfIrPWCpdKkkZHqlaP3jDnQM3D9earU+iQLHZijKKW
WohAL95zLsBhWCEjGCWKgHonazAP6Dr19AHbwTqMl3C1fSfWcPmDhZXmDwNtUenJ
e0G7HVwxwqXD/WXT3jEByRToGqHsTyTp4EbmCCn+uuw02KxtPCzK7TGpGQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFBQ0T/R1HNLx+SMd1GAXYSibPQNAMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvRkRSUDlIVWMwdkg1SXgzVVlCZGhLSnM5QTBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAPkzrAwQA
mUywAwQAmUy0AwQAmUy2AwQAmUy4AwQAmUy7AwQAmUy9AwQAmUy/AwQAwXwIAwQA
wlciAwQAwlc/AwQAwlelMA0GCSqGSIb3DQEBCwUAA4IBAQAfWTpruYnIP8lAPJ6I
Sisfb/Cl8F/azOKmpCYNqzbYvUSw9ETuUV9KzEHHhq0tIf9OcXm/2Oy///8ituaL
xTKwHVm5UFrM2Vb2K/NFZlR2aDBQ1gxyaDrfwu5H5mPe4c3HEtev7VsBqAIxiLhg
v6VXR4OdJ7N4mwacaqFVX78/CfoHssZaiqLCrY3THjgs9EefyyjvY7iAg1I+CoAo
kcCGepvvneGNR6fRD4SlMKdtA5M/AnlBxcjC88eMzDD8WXsP6tIosaodaW23buUV
esOqOtq1z5MAGgEa1R6Z/NBsDnB3ueZSNONQFG5erp6GsDjspEoH7jH3JSaOu0VP
HK1r
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:07:53 2026 by rpki-client