Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/_FVC8u9Kd-960Cpun1ru5rZXSic.roa
File: _FVC8u9Kd-960Cpun1ru5rZXSic.roa (raw, json)
Hash identifier: +LhaQnFtyQm35+siQctWslFnTxDTargbgOuOWmRDAFg=
Subject key identifier: FC:55:42:F2:EF:4A:77:EF:7A:D0:2A:6E:9F:5A:EE:E6:B6:57:4A:27
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 019D52E0515ACF35677EC35268EF30F7DB7B
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/_FVC8u9Kd-960Cpun1ru5rZXSic.roa
Signing time: Fri 03 Apr 2026 10:25:25 +0000
ROA not before: Fri 03 Apr 2026 10:25:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 185.63.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:e0:51:5a:cf:35:67:7e:c3:52:68:ef:30:f7:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Apr 3 10:25:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc5542f2ef4a77ef7ad02a6e9f5aeee6b6574a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:d6:83:e8:89:4f:5e:86:85:9c:c6:5c:b9:
d8:d4:b1:60:dc:6d:3a:24:71:71:86:a4:d1:42:c2:
60:91:58:12:b6:cb:39:81:99:ea:0d:fa:15:28:cf:
c0:72:32:e4:44:47:45:8d:bd:19:84:f7:04:4f:d2:
39:76:71:4e:fe:49:2a:09:65:c1:60:f3:05:ce:1c:
2a:d1:38:c6:69:19:1f:46:68:13:bd:7d:e3:74:c0:
5b:15:c5:b4:9b:6e:44:8c:1a:be:38:d1:4b:fe:e9:
e8:80:10:6a:9a:3a:5c:14:8b:b7:c9:c7:71:e0:d5:
0f:4d:05:52:ce:af:24:35:42:fd:61:1c:80:a3:06:
65:74:8a:21:50:cc:13:0c:51:c9:7b:6e:df:78:6a:
7d:e7:d8:92:56:28:a0:9d:45:e2:15:84:79:7b:72:
c2:87:b3:6d:6e:a4:f1:e6:57:6f:e2:a6:6e:c4:ed:
86:f1:59:36:34:88:c5:eb:73:12:0b:18:93:aa:9e:
37:35:0a:36:3e:7d:8a:e1:7f:38:3b:95:57:f4:73:
fe:1f:1b:8c:97:d4:c3:df:e5:e2:a5:83:24:94:12:
88:f8:a5:b0:7a:0c:24:ec:60:63:61:eb:bf:36:ea:
8b:e5:d9:57:6f:e5:6f:b1:38:20:b9:01:cf:92:53:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:55:42:F2:EF:4A:77:EF:7A:D0:2A:6E:9F:5A:EE:E6:B6:57:4A:27
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/_FVC8u9Kd-960Cpun1ru5rZXSic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.33.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:9a:1c:6b:52:70:a4:6a:94:39:16:51:5e:2c:b7:02:ad:8c:
78:8a:cf:f2:23:fe:22:ee:f2:da:fc:cc:76:2e:23:b1:8b:f3:
ec:4d:c5:f5:c6:04:7b:6b:5f:54:bf:70:ee:f1:2d:1b:0a:32:
4e:05:b9:c9:03:9b:9d:54:c4:ee:1c:2e:10:ff:02:93:b7:ca:
65:95:13:03:58:c0:e4:5c:5e:48:a4:2f:f2:a2:10:25:f8:77:
10:ff:a6:9a:f8:19:30:e7:73:2a:dd:c0:89:ff:42:9e:b8:21:
e6:f5:d2:87:1d:30:f7:27:1d:f7:2f:8b:60:10:0c:96:45:cd:
c5:30:56:da:91:b8:24:56:33:14:12:b5:58:98:6a:05:29:a0:
e4:9c:1e:41:a7:24:4e:52:b6:6a:31:33:5c:77:85:66:60:94:
a8:f7:e6:e7:49:f1:a3:54:84:17:de:81:4a:e3:19:92:b4:a4:
4c:6e:da:c8:f8:eb:40:15:3a:46:8f:26:f0:f6:89:cd:35:7a:
aa:dd:9e:02:fd:b6:cf:46:ab:71:4a:e7:65:bb:85:99:81:26:
f4:67:06:aa:27:8c:c2:55:68:5e:41:49:df:c9:6c:68:21:13:
96:24:3e:e3:19:a2:54:5a:41:9d:e6:55:7b:32:47:c0:83:a3:
94:da:26:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:22 2026 by rpki-client