Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/Fp68Xq4vIdwR-J06X-I3ZiAplP8.roa
File: Fp68Xq4vIdwR-J06X-I3ZiAplP8.roa (raw, json)
Hash identifier: IkUak/l7irQTtQzSl+cswzfKA0Ip6sHCoOUQtPDIPPk=
Subject key identifier: 16:9E:BC:5E:AE:2F:21:DC:11:F8:9D:3A:5F:E2:37:66:20:29:94:FF
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019D76D62627C11C02B3A79DEF442995DA5E
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/Fp68Xq4vIdwR-J06X-I3ZiAplP8.roa
Signing time: Fri 10 Apr 2026 10:00:39 +0000
ROA not before: Fri 10 Apr 2026 10:00:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 94.154.43.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:d6:26:27:c1:1c:02:b3:a7:9d:ef:44:29:95:da:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Apr 10 10:00:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=169ebc5eae2f21dc11f89d3a5fe23766202994ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:23:2b:29:56:b0:d7:6d:8c:c1:a2:b9:99:
c7:18:86:73:c7:e8:3e:32:d3:86:1f:c4:db:ef:1b:
4d:fa:ef:3b:54:08:fc:73:9a:a1:ba:0d:40:f7:54:
c6:4d:03:02:d9:1c:52:ac:6f:dc:5b:98:26:40:fb:
de:ed:11:01:1f:1a:22:8c:e1:bd:fe:0d:ad:03:c4:
af:33:07:9f:4a:55:2d:71:d8:3a:a0:91:be:6c:5b:
4b:de:74:e4:0d:42:20:6d:3f:6f:57:f6:03:ec:f0:
4f:c2:72:e5:e1:31:61:58:53:48:36:04:fb:4c:18:
e7:cf:6f:b8:b8:6a:57:cf:67:84:d9:43:16:8e:3c:
bc:2f:2a:da:97:66:35:2b:d4:5a:ec:e2:9f:50:4b:
b9:75:c5:7a:8c:56:5c:d0:b6:27:83:2d:a9:f1:04:
96:24:be:6a:1b:85:a0:a1:ce:da:6b:33:da:d2:52:
dc:46:45:0e:97:99:6b:01:b7:44:6b:fa:2e:9f:5b:
1b:28:7c:d3:bd:d9:e5:63:0f:9a:20:54:11:f5:d0:
d4:bf:e8:ec:57:87:9c:0d:f4:ea:12:c9:95:ef:88:
c2:c7:8a:38:6f:d8:e6:7b:fc:9e:7a:bb:f5:40:eb:
a9:7d:27:df:f9:44:27:d8:c4:f5:a4:7a:a2:28:b1:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9E:BC:5E:AE:2F:21:DC:11:F8:9D:3A:5F:E2:37:66:20:29:94:FF
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/Fp68Xq4vIdwR-J06X-I3ZiAplP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.43.0/24
94.154.45.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
03:3e:fc:70:8d:d0:1e:28:0a:fa:89:79:10:40:f3:dc:90:12:
a4:07:1d:ca:25:28:d6:a5:6e:cb:61:dd:bd:e4:c5:c5:c6:06:
b9:78:fe:ad:e3:f2:24:20:24:5e:a4:8a:85:17:04:6f:2b:e6:
7b:14:4a:96:fc:3e:f2:a7:e9:52:22:8b:fe:d4:2e:57:a1:0c:
d6:ac:d1:9a:31:e0:53:66:cb:5c:c0:8a:66:bd:3c:ec:bc:72:
f1:16:7c:1e:e3:ea:b1:be:e8:5f:a3:d6:f1:68:3c:99:54:6a:
29:f4:e4:c4:89:a0:2e:e2:f0:70:b8:ed:57:ba:bf:91:51:2d:
02:a2:87:31:e6:54:fe:05:21:a1:36:39:8c:8c:7a:98:53:ac:
07:5b:38:b7:e4:18:51:29:1c:32:b9:85:e0:b0:ca:f9:c7:93:
92:1d:c3:52:12:69:45:5f:a8:c9:45:d1:b8:18:78:00:3e:77:
02:06:0f:0a:00:c5:14:44:63:77:c3:b9:b5:94:21:1a:e1:a6:
27:6c:55:5c:63:c5:6c:fc:72:42:90:9a:75:56:04:f9:fc:cf:
de:7d:66:ee:c0:7f:f7:14:f7:55:df:5a:3e:88:a1:df:b8:4b:
55:cb:02:97:ff:dd:dd:5c:ae:6f:75:92:07:1e:75:5b:98:34:
df:c0:92:e3
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ121iYnwRwCs6ed70QpldpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjYwNDEwMTAwMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjllYmM1ZWFlMmYyMWRjMTFmODlkM2E1ZmUyMzc2NjIwMjk5NGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzIjKylWsNdtjMGiuZnHGIZzx+g+
MtOGH8Tb7xtN+u87VAj8c5qhug1A91TGTQMC2RxSrG/cW5gmQPve7REBHxoijOG9
/g2tA8SvMwefSlUtcdg6oJG+bFtL3nTkDUIgbT9vV/YD7PBPwnLl4TFhWFNINgT7
TBjnz2+4uGpXz2eE2UMWjjy8Lyral2Y1K9Ra7OKfUEu5dcV6jFZc0LYngy2p8QSW
JL5qG4Wgoc7aazPa0lLcRkUOl5lrAbdEa/oun1sbKHzTvdnlYw+aIFQR9dDUv+js
V4ecDfTqEsmV74jCx4o4b9jme/yeerv1QOupfSff+UQn2MT1pHqiKLFidQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBaevF6uLyHcEfidOl/iN2YgKZT/MB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvRnA2OFhxNHZJZHdSLUowNlgtSTNaaUFwbFA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAXporMAwD
BABemi0DBABemi4wDQYJKoZIhvcNAQELBQADggEBAAM+/HCN0B4oCvqJeRBA89yQ
EqQHHcolKNalbsth3b3kxcXGBrl4/q3j8iQgJF6kioUXBG8r5nsUSpb8PvKn6VIi
i/7ULlehDNas0Zox4FNmy1zAima9POy8cvEWfB7j6rG+6F+j1vFoPJlUain05MSJ
oC7i8HC47Ve6v5FRLQKihzHmVP4FIaE2OYyMephTrAdbOLfkGFEpHDK5heCwyvnH
k5Idw1ISaUVfqMlF0bgYeAA+dwIGDwoAxRREY3fDubWUIRrhpidsVVxjxWz8ckKQ
mnVWBPn8z959Zu7Af/cU91XfWj6Iod+4S1XLApf/3d1crm91kgcedVuYNN/AkuM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:25 2026 by rpki-client