Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/fnyIa8mLQHVgiXE89bhVVM5Yl9g.roa
File: fnyIa8mLQHVgiXE89bhVVM5Yl9g.roa (raw, json)
Hash identifier: 691/vGayPBHXYDVauvoERip3QUP0hLW5nqwZdaTBTmc=
Subject key identifier: 7E:7C:88:6B:C9:8B:40:75:60:89:71:3C:F5:B8:55:54:CE:58:97:D8
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A0632F032B2141E1659D23F01103F79F35
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/fnyIa8mLQHVgiXE89bhVVM5Yl9g.roa
Signing time: Wed 02 Sep 2026 17:33:40 +0000
ROA not before: Wed 02 Sep 2026 17:33:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 87.58.64.0/24 maxlen: 24
87.58.65.0/24 maxlen: 24
137.31.4.0/24 maxlen: 24
137.31.5.0/24 maxlen: 24
137.31.6.0/24 maxlen: 24
137.31.7.0/24 maxlen: 24
137.31.96.0/24 maxlen: 24
137.31.97.0/24 maxlen: 24
137.31.98.0/24 maxlen: 24
137.31.159.0/24 maxlen: 24
137.31.165.0/24 maxlen: 24
137.31.166.0/24 maxlen: 24
137.31.192.0/24 maxlen: 24
137.31.193.0/24 maxlen: 24
137.31.194.0/24 maxlen: 24
137.31.195.0/24 maxlen: 24
137.31.196.0/24 maxlen: 24
137.31.197.0/24 maxlen: 24
137.31.255.0/24 maxlen: 24
159.254.0.0/24 maxlen: 24
159.254.1.0/24 maxlen: 24
159.254.2.0/24 maxlen: 24
159.254.3.0/24 maxlen: 24
159.254.4.0/24 maxlen: 24
159.254.5.0/24 maxlen: 24
159.254.6.0/24 maxlen: 24
159.254.7.0/24 maxlen: 24
159.254.8.0/24 maxlen: 24
159.254.9.0/24 maxlen: 24
159.254.10.0/24 maxlen: 24
159.254.11.0/24 maxlen: 24
159.254.12.0/24 maxlen: 24
159.254.80.0/24 maxlen: 24
159.254.81.0/24 maxlen: 24
159.254.82.0/24 maxlen: 24
159.254.186.0/24 maxlen: 24
159.254.187.0/24 maxlen: 24
159.254.188.0/24 maxlen: 24
159.254.189.0/24 maxlen: 24
159.254.190.0/24 maxlen: 24
159.254.191.0/24 maxlen: 24
159.254.200.0/24 maxlen: 24
159.254.201.0/24 maxlen: 24
159.254.207.0/24 maxlen: 24
159.254.208.0/24 maxlen: 24
194.9.116.0/24 maxlen: 24
2a03:eec0:3601::/48 maxlen: 48
2a03:eec0:3602::/48 maxlen: 48
2a03:eec0:3603::/48 maxlen: 48
2a03:eec0:3604::/48 maxlen: 48
2a03:eec0:3605::/48 maxlen: 48
2a03:eec0:3606::/48 maxlen: 48
2a03:eec0:3607::/48 maxlen: 48
2a03:eec0:3608::/48 maxlen: 48
2a03:eec0:3609::/48 maxlen: 48
2a03:eec0:360a::/48 maxlen: 48
2a03:eec0:360b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:2f:03:2b:21:41:e1:65:9d:23:f0:11:03:f7:9f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Sep 2 17:33:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e7c886bc98b40756089713cf5b85554ce5897d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:e6:5e:b0:32:81:0f:c6:9d:5f:16:16:f9:
81:ef:98:09:f7:db:fb:1a:89:92:90:c4:4f:1b:84:
98:24:47:25:e9:9a:c2:1e:c6:10:02:91:84:0c:f1:
12:8d:2a:71:35:10:81:15:69:15:e0:60:24:ad:20:
55:7d:52:d0:6c:9d:16:88:97:af:72:d7:fc:bd:74:
9f:67:de:ba:4f:58:93:78:25:91:5c:15:37:ce:61:
ca:03:40:ae:7f:30:18:b2:b8:1a:b8:07:56:a7:62:
56:e6:37:9d:c7:78:5f:11:a7:fc:7a:cb:32:1d:2e:
d9:81:a2:db:5b:e1:40:e2:b4:c4:a3:29:f9:64:85:
34:9d:7c:77:05:a3:c2:c2:cd:5a:e0:71:57:ac:b1:
9e:61:4d:b9:7d:19:39:fe:98:67:a2:b1:73:6a:95:
3c:c7:a3:6b:d1:70:56:67:1e:55:b7:22:45:a7:81:
ac:13:cc:94:d3:13:82:c9:38:42:f3:cb:24:14:08:
8a:47:34:59:64:ea:57:e6:8a:71:26:87:bd:51:6b:
e7:ec:70:36:f7:e7:2b:69:9b:6d:26:07:71:48:75:
b9:db:23:fd:29:15:f5:95:6e:d4:b3:c0:b7:d7:a7:
1b:57:0a:d2:13:45:1c:20:9f:e8:49:0d:88:d8:b1:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7C:88:6B:C9:8B:40:75:60:89:71:3C:F5:B8:55:54:CE:58:97:D8
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/fnyIa8mLQHVgiXE89bhVVM5Yl9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.64.0/23
137.31.4.0/22
137.31.96.0-137.31.98.255
137.31.159.0/24
137.31.165.0-137.31.166.255
137.31.192.0-137.31.197.255
137.31.255.0/24
159.254.0.0-159.254.12.255
159.254.80.0-159.254.82.255
159.254.186.0-159.254.191.255
159.254.200.0/23
159.254.207.0-159.254.208.255
194.9.116.0/24
IPv6:
2a03:eec0:3601::-2a03:eec0:360b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2a:15:01:ef:50:5c:ee:d6:f7:98:a0:63:6a:14:a7:5b:f0:43:
3a:e3:d3:47:6d:08:06:90:3c:71:78:88:f1:fc:7c:31:ea:4b:
03:ef:b7:5e:7d:32:29:a6:18:0d:f5:fa:0d:6c:37:b7:68:15:
f5:35:44:ef:42:24:7b:de:23:15:2c:a8:ba:eb:10:a5:2b:51:
eb:f8:51:1a:c7:3c:fe:dd:07:ff:1b:bf:91:c1:a7:31:89:ea:
6e:2e:bd:96:24:ec:d0:b5:7a:33:8e:64:d6:a9:b1:7a:f3:6e:
0e:09:0c:88:17:ab:e5:d6:64:b8:77:64:6d:b9:5e:d2:11:0d:
cd:98:cf:82:c1:c3:6d:6d:e5:87:24:0d:a9:b7:98:c1:7d:11:
a6:41:db:fd:e2:04:b4:9f:b0:27:eb:d6:b1:95:46:93:5d:bc:
cc:22:5a:bb:e4:6a:bf:83:6e:03:d1:74:c5:7b:e2:04:9d:87:
cd:70:d7:f8:4d:a3:67:df:90:ff:de:3f:82:05:54:95:3d:2a:
5f:bc:8c:24:45:77:bb:6f:0b:72:18:77:83:cc:54:24:cb:2e:
b6:09:83:29:40:85:e6:12:84:e2:54:60:18:ce:4c:eb:93:0e:
6b:a1:29:e2:e9:47:97:46:70:88:4d:55:06:9c:e0:98:58:d7:
c2:40:b8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:59 2026 by rpki-client