Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/Fy__JVL_Lepo6mUUM4F3EM-X7dg.roa
File: Fy__JVL_Lepo6mUUM4F3EM-X7dg.roa (raw, json)
Hash identifier: 841fgQfyyxsP5yvIt805yflD9ODKBpncCMo1CIp2tRg=
Subject key identifier: 17:2F:FF:25:52:FF:2D:EA:68:EA:65:14:33:81:77:10:CF:97:ED:D8
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 019EAC7E7E1AF5F14526681F5994E816FA3E
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/Fy__JVL_Lepo6mUUM4F3EM-X7dg.roa
Signing time: Tue 09 Jun 2026 13:07:11 +0000
ROA not before: Tue 09 Jun 2026 13:07:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213786
IP address blocks: 152.89.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:7e:7e:1a:f5:f1:45:26:68:1f:59:94:e8:16:fa:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Jun 9 13:07:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=172fff2552ff2dea68ea651433817710cf97edd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:c5:0a:5b:bf:ab:64:43:e2:b2:2b:31:7f:
2c:24:ea:96:bc:88:1e:9c:62:56:8e:56:b1:99:7e:
a9:d4:a7:71:51:07:8c:d5:98:24:bc:11:0a:9a:76:
b5:ec:f0:c1:47:ee:b3:7d:f1:b0:68:70:10:35:61:
c2:c8:38:01:6f:2c:8f:f0:25:d4:8e:de:b8:ef:69:
a5:1c:51:e3:a0:28:8b:76:0c:71:1f:8a:08:d8:2b:
57:fd:14:af:7f:e7:c6:e1:2f:cf:45:cb:21:c4:5c:
c7:7f:24:19:fb:d3:67:8b:ab:a2:49:26:82:a7:ad:
c6:30:df:57:c0:7b:df:50:a8:14:04:db:5f:27:2d:
e3:ed:53:27:6a:fb:9e:83:20:a6:f6:95:17:3e:3d:
09:7b:df:16:09:d2:df:a2:5e:81:d4:75:e4:b6:cb:
87:88:c2:bc:ea:e1:6b:92:5a:a5:a7:ae:ba:5c:2c:
ce:fe:6f:76:d6:06:17:c5:20:ec:5a:84:b6:86:8f:
b0:9e:17:dd:fa:80:ac:d0:75:17:f6:11:b0:6b:de:
85:b2:be:ff:aa:53:1c:3c:4e:d3:05:52:4c:28:01:
5c:10:06:9e:e0:4d:cb:3a:5f:98:69:00:4f:e9:e8:
fe:43:79:39:cd:ae:d0:53:55:d0:c0:8e:14:2e:b0:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2F:FF:25:52:FF:2D:EA:68:EA:65:14:33:81:77:10:CF:97:ED:D8
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/Fy__JVL_Lepo6mUUM4F3EM-X7dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.24.0/22
Signature Algorithm: sha256WithRSAEncryption
37:44:fa:47:f7:0d:11:f9:49:65:5b:7f:0c:fa:63:4b:a8:61:
ea:cb:20:4a:c1:af:92:a2:33:e5:0d:34:84:1f:dd:49:86:92:
c3:fe:b2:e8:31:1f:a3:22:33:3c:12:fd:e3:94:49:35:ac:ab:
6b:8f:d6:ae:62:d5:a4:7f:a3:45:99:da:1b:5e:7f:c5:53:49:
53:03:77:44:bc:8b:60:1b:f4:06:53:37:57:0f:d9:a4:08:65:
ac:26:ca:32:12:bd:d6:f4:d7:b1:39:0a:f6:3f:ee:59:0f:72:
57:d2:e7:cc:ce:87:b5:bd:a8:f9:2e:c5:74:8a:b0:bd:db:05:
84:32:81:08:bb:f6:51:8a:d2:10:19:55:90:4c:8e:90:6e:95:
a3:d2:b1:c8:5a:a0:0a:82:7a:a9:07:35:44:cd:80:bd:5b:c9:
15:71:66:a2:f2:05:3f:4a:59:26:7d:b3:12:e5:51:c7:bc:a5:
00:f8:8b:11:80:02:12:f0:da:e0:00:1a:a3:f6:b4:4d:1d:c6:
19:4e:f1:40:de:69:54:15:40:42:05:22:81:02:27:a5:cf:4e:
51:ec:98:7f:29:49:2f:a5:e0:57:ab:c6:d9:87:2b:53:a6:4e:
3b:dd:05:a9:83:5e:32:84:aa:e2:74:06:15:19:a2:ff:1f:38:
60:cc:2f:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6sfn4a9fFFJmgfWZToFvo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjODc0YTVmNTI3MzRlMjYwZTdiZmE0ZDQ1MTE0YWRkOTI3
N2UzNTMwHhcNMjYwNjA5MTMwNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzJmZmYyNTUyZmYyZGVhNjhlYTY1MTQzMzgxNzcxMGNmOTdlZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCzFClu/q2RD4rIrMX8sJOqWvIge
nGJWjlaxmX6p1KdxUQeM1ZgkvBEKmna17PDBR+6zffGwaHAQNWHCyDgBbyyP8CXU
jt6472mlHFHjoCiLdgxxH4oI2CtX/RSvf+fG4S/PRcshxFzHfyQZ+9Nni6uiSSaC
p63GMN9XwHvfUKgUBNtfJy3j7VMnavuegyCm9pUXPj0Je98WCdLfol6B1HXktsuH
iMK86uFrklqlp666XCzO/m921gYXxSDsWoS2ho+wnhfd+oCs0HUX9hGwa96Fsr7/
qlMcPE7TBVJMKAFcEAae4E3LOl+YaQBP6ej+Q3k5za7QU1XQwI4ULrBrFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBcv/yVS/y3qaOplFDOBdxDPl+3YMB8GA1UdIwQY
MBaAFAyHSl9Sc04mDnv6TUURSt2Sd+NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81M2I0ODktYWI0OC00OWZlLTlkMDEt
YTBlMzdmMjVhNTE1LzEvRnlfX0pWTF9MZXBvNm1VVU00RjNFTS1YN2RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC81M2I0ODktYWI0OC00OWZlLTlkMDEtYTBlMzdmMjVhNTE1
LzEvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmFkYMA0G
CSqGSIb3DQEBCwUAA4IBAQA3RPpH9w0R+UllW38M+mNLqGHqyyBKwa+SojPlDTSE
H91JhpLD/rLoMR+jIjM8Ev3jlEk1rKtrj9auYtWkf6NFmdobXn/FU0lTA3dEvItg
G/QGUzdXD9mkCGWsJsoyEr3W9NexOQr2P+5ZD3JX0ufMzoe1vaj5LsV0irC92wWE
MoEIu/ZRitIQGVWQTI6QbpWj0rHIWqAKgnqpBzVEzYC9W8kVcWai8gU/SlkmfbMS
5VHHvKUA+IsRgAIS8NrgABqj9rRNHcYZTvFA3mlUFUBCBSKBAielz05R7Jh/KUkv
peBXq8bZhytTpk473QWpg14yhKridAYVGaL/HzhgzC9K
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:00:00 2026 by rpki-client