Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/fFdP2b-tC7tpPv96FwzYhF_Mepo.roa
File: fFdP2b-tC7tpPv96FwzYhF_Mepo.roa (raw, json)
Hash identifier: t9Jn5pI40sRri9eBOMZP3mLNxVOwV7SLCK8yu0PkU0U=
Subject key identifier: 7C:57:4F:D9:BF:AD:0B:BB:69:3E:FF:7A:17:0C:D8:84:5F:CC:7A:9A
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0AA37EF9A276F7A5797254A65942E11BE
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/fFdP2b-tC7tpPv96FwzYhF_Mepo.roa
Signing time: Wed 16 Sep 2026 12:36:27 +0000
ROA not before: Wed 16 Sep 2026 12:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29262
IP address blocks: 62.182.32.0/24 maxlen: 24
62.182.33.0/24 maxlen: 24
62.182.34.0/24 maxlen: 24
62.182.35.0/24 maxlen: 24
85.8.156.0/24 maxlen: 24
85.8.157.0/24 maxlen: 24
85.8.158.0/24 maxlen: 24
85.8.159.0/24 maxlen: 24
85.8.160.0/24 maxlen: 24
85.8.161.0/24 maxlen: 24
85.8.162.0/24 maxlen: 24
85.8.163.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
139.28.32.0/24 maxlen: 24
139.28.33.0/24 maxlen: 24
139.28.34.0/24 maxlen: 24
139.28.35.0/24 maxlen: 24
193.17.4.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
194.169.92.0/24 maxlen: 24
194.169.93.0/24 maxlen: 24
194.169.94.0/24 maxlen: 24
194.169.95.0/24 maxlen: 24
2a02:f240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:37:ef:9a:27:6f:7a:57:97:25:4a:65:94:2e:11:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 16 12:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c574fd9bfad0bbb693eff7a170cd8845fcc7a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:f7:df:23:30:91:9b:87:9e:30:90:a5:74:
43:7b:8f:34:4f:f8:b8:bc:64:ca:f8:8c:ae:49:b4:
0b:0c:e4:10:1c:ec:34:e2:d8:02:89:a3:9d:84:93:
3d:e8:2b:32:34:22:17:db:b0:fc:ba:f4:1f:e2:93:
e3:13:74:5a:26:ab:d6:49:51:f1:c5:ec:e6:9c:95:
5a:89:74:01:33:7a:6d:76:ef:9e:aa:1b:d1:c2:10:
73:30:9e:9c:b0:01:32:b2:98:1b:57:f7:4e:c4:66:
d2:1a:13:b3:2c:92:25:95:7b:de:81:a6:40:da:aa:
a6:73:e9:bb:20:f7:56:88:ad:2f:26:14:45:dc:48:
f4:2b:70:31:03:3f:ae:a1:db:44:8e:ac:bd:76:1e:
75:7b:f0:e7:3a:5e:70:8f:5e:84:81:66:de:b8:0c:
99:19:50:e0:72:6c:47:73:7b:b6:1c:b4:d7:95:0e:
0f:ea:16:d5:37:19:d0:81:5a:ae:07:ea:ce:84:00:
f1:f6:86:56:92:28:8a:3b:f2:f6:fc:f4:84:8e:c5:
15:94:24:23:53:c3:06:38:e8:2e:dc:ae:6a:7e:28:
76:b0:db:59:39:84:d5:74:79:77:f6:b0:81:ea:3a:
9a:4c:ee:52:dd:2f:37:4c:d1:45:39:38:0d:fe:f6:
fb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:57:4F:D9:BF:AD:0B:BB:69:3E:FF:7A:17:0C:D8:84:5F:CC:7A:9A
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/fFdP2b-tC7tpPv96FwzYhF_Mepo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.32.0/22
85.8.156.0-85.8.163.255
93.190.10.0/23
139.28.32.0/22
193.17.4.0/24
193.17.7.0/24
194.169.92.0/22
IPv6:
2a02:f240::/29
Signature Algorithm: sha256WithRSAEncryption
6b:62:1e:2f:9b:81:79:59:a7:02:a5:4e:fe:1e:ae:9e:72:0d:
f2:be:5a:df:7f:a6:86:74:4c:f5:61:3c:dc:bc:83:a7:80:27:
65:42:87:bb:76:30:90:21:bb:a1:40:c3:cd:4d:9d:0f:f1:1b:
66:36:3f:8a:d2:35:0f:65:b8:be:16:af:96:eb:0b:56:cc:bf:
5a:ac:d7:30:a8:5d:72:6c:bd:70:b3:07:7b:d1:0e:dc:15:34:
61:5a:5d:cc:5d:63:3e:67:36:85:9d:b2:7a:e1:0f:42:31:6b:
7a:e5:2d:19:9d:b2:f5:95:ae:bb:2d:87:85:a1:f8:b3:b6:3b:
e1:fc:47:a8:9e:7e:77:26:2e:42:b9:34:7f:a6:ad:0d:ad:a7:
e1:f4:33:58:1b:9b:9f:3e:f9:e0:48:6e:3f:5d:2f:d4:10:78:
f1:0c:bc:2f:83:bc:1b:ed:80:4f:d3:e6:6c:59:be:8f:0b:55:
b1:2a:83:7e:53:ba:ff:14:0c:13:ab:59:ef:fc:c1:26:75:67:
b3:43:8c:45:62:3a:ca:14:b6:50:af:ab:0a:e1:59:5e:64:84:
5f:f2:70:89:19:c1:4d:cc:73:fe:36:4a:7a:8e:74:62:eb:fe:
12:0d:dd:d2:6c:e5:79:5a:7b:d4:88:d8:e1:77:ca:0a:71:78:
6a:ab:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:57:41 2026 by rpki-client