Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/FiXFwvxiV6Y1ajHORGAWiqcT-Y4.roa
File: FiXFwvxiV6Y1ajHORGAWiqcT-Y4.roa (raw, json)
Hash identifier: Zs2NR7v6cxcECJIbaIPTJM9/Q7GTHlESDly+5o8OUyM=
Subject key identifier: 16:25:C5:C2:FC:62:57:A6:35:6A:31:CE:44:60:16:8A:A7:13:F9:8E
Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial: 019C6D197D097A757A8005DDA7BFE1D1C75C
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/FiXFwvxiV6Y1ajHORGAWiqcT-Y4.roa
Signing time: Tue 17 Feb 2026 19:35:12 +0000
ROA not before: Tue 17 Feb 2026 19:35:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200474
IP address blocks: 185.133.240.0/24 maxlen: 24
2a05:fbe0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6d:19:7d:09:7a:75:7a:80:05:dd:a7:bf:e1:d1:c7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Validity
Not Before: Feb 17 19:35:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1625c5c2fc6257a6356a31ce4460168aa713f98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:18:da:c7:c7:b3:ba:a1:2b:00:74:cb:6d:
66:4a:0b:21:3d:21:34:b6:c7:18:3a:b3:b3:57:4b:
23:27:07:80:fe:d8:0e:ac:62:1f:c1:72:2a:a1:c8:
4b:58:b9:21:b6:f1:9c:ee:8e:43:be:a2:b7:ab:62:
e5:b9:cc:56:a1:ac:61:fa:97:2d:eb:20:c5:24:3a:
d2:31:41:f0:82:5c:8c:7c:75:b1:74:20:02:84:c8:
c4:24:cb:96:9e:16:cf:30:e8:5c:78:0b:d7:de:15:
0f:ad:21:b6:37:a3:1f:ea:12:1a:dd:c0:f0:db:68:
f0:5b:2b:79:3e:db:96:da:c7:d3:d6:94:82:cd:88:
ae:79:4f:87:7f:45:6f:72:76:e4:0d:c7:96:98:05:
13:f9:e4:04:82:32:9c:5f:21:fc:c6:24:7f:73:87:
2e:ec:7f:5b:93:bf:6b:26:ba:d9:9b:75:49:96:65:
83:70:61:a7:75:d1:7b:fc:65:17:d3:7d:15:b0:f5:
66:9a:01:dc:97:07:d2:57:9e:db:a0:2e:90:1a:3c:
ad:d1:88:05:f9:b1:69:0d:54:c7:9a:29:a7:cf:1a:
9c:25:3c:ac:c8:cb:80:0c:df:85:f6:b9:b6:ed:d2:
b3:e0:f4:e6:e8:33:85:a6:40:df:bb:f1:fb:14:a9:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:25:C5:C2:FC:62:57:A6:35:6A:31:CE:44:60:16:8A:A7:13:F9:8E
X509v3 Authority Key Identifier:
keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/FiXFwvxiV6Y1ajHORGAWiqcT-Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.240.0/24
IPv6:
2a05:fbe0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:c6:32:7b:c6:f8:95:77:7b:35:b9:9c:38:94:c6:b8:92:4e:
54:d5:23:c2:d8:e4:5e:67:bc:ac:d0:ec:fb:bd:1a:31:bc:94:
b2:f7:b5:79:a5:3a:8b:06:62:23:32:70:ed:03:6d:62:1b:e5:
8b:48:e7:7b:97:2d:59:a2:df:cc:ec:c2:b4:6d:6f:fe:f6:74:
40:43:59:d8:fc:bf:08:5f:d9:54:48:18:cd:9c:5b:89:ad:61:
c8:1c:dc:48:96:6a:ee:5e:18:ff:52:90:5a:e8:f8:c6:44:49:
9a:a9:dc:67:a9:a3:2d:fd:77:68:86:e9:dd:af:5c:59:f0:38:
d6:6e:4f:5a:9f:b9:bc:ea:4d:78:b2:25:2b:b5:9f:81:8c:be:
ff:a6:31:df:14:0a:be:25:7a:b9:04:d0:bc:31:69:7a:ec:a1:
3a:07:c0:3c:78:46:c0:d7:ad:05:e9:36:f5:92:13:e9:ec:42:
66:68:3d:7e:fc:8e:7b:dd:14:f7:f0:23:7b:b3:a9:53:a3:a4:
8c:65:e1:d8:8b:c5:81:0b:0c:7c:0e:ae:c7:7c:43:14:1c:b8:
af:3d:39:7e:c0:48:39:7e:0a:70:9f:35:66:ff:59:9f:2b:99:
4c:c9:f8:c6:78:d0:d5:8b:fc:9d:2f:88:c6:ae:1e:35:4b:43:
2d:f9:56:57
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZxtGX0JenV6gAXdp7/h0cdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjM5MGI2MmQwOTk1MGQ1MDBjZDZiYmJkNzhkMDM5MDU2
MGVjNDIwHhcNMjYwMjE3MTkzNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjI1YzVjMmZjNjI1N2E2MzU2YTMxY2U0NDYwMTY4YWE3MTNmOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZcY2sfHs7qhKwB0y21mSgshPSE0
tscYOrOzV0sjJweA/tgOrGIfwXIqochLWLkhtvGc7o5DvqK3q2LlucxWoaxh+pct
6yDFJDrSMUHwglyMfHWxdCAChMjEJMuWnhbPMOhceAvX3hUPrSG2N6Mf6hIa3cDw
22jwWyt5PtuW2sfT1pSCzYiueU+Hf0VvcnbkDceWmAUT+eQEgjKcXyH8xiR/c4cu
7H9bk79rJrrZm3VJlmWDcGGnddF7/GUX030VsPVmmgHclwfSV57boC6QGjyt0YgF
+bFpDVTHmimnzxqcJTysyMuADN+F9rm27dKz4PTm6DOFpkDfu/H7FKl6AwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBYlxcL8YlemNWoxzkRgFoqnE/mOMB8GA1UdIwQY
MBaAFBmzkLYtCZUNUAzWu7140DkFYOxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2Mt
MTQ0ZDc0NzNlYTU5LzEvRmlYRnd2eGlWNlkxYWpIT1JHQVdpcWNULVk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2MtMTQ0ZDc0NzNlYTU5
LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYXwMA0E
AgACMAcDBQAqBfvgMA0GCSqGSIb3DQEBCwUAA4IBAQA9xjJ7xviVd3s1uZw4lMa4
kk5U1SPC2OReZ7ys0Oz7vRoxvJSy97V5pTqLBmIjMnDtA21iG+WLSOd7ly1Zot/M
7MK0bW/+9nRAQ1nY/L8IX9lUSBjNnFuJrWHIHNxIlmruXhj/UpBa6PjGREmaqdxn
qaMt/Xdohundr1xZ8DjWbk9an7m86k14siUrtZ+BjL7/pjHfFAq+JXq5BNC8MWl6
7KE6B8A8eEbA160F6Tb1khPp7EJmaD1+/I573RT38CN7s6lTo6SMZeHYi8WBCwx8
Dq7HfEMUHLivPTl+wEg5fgpwnzVm/1mfK5lMyfjGeNDVi/ydL4jGrh41S0Mt+VZX
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:05:03 2026 by rpki-client