Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/fyxsLRJZFn7CTFSJ2VnoPkiPR2s.roa
File: fyxsLRJZFn7CTFSJ2VnoPkiPR2s.roa (raw, json)
Hash identifier: 8HFUKsLTWzFpdFnaVvVRZkBC3eF7vcFOlN74+dbWE3g=
Subject key identifier: 7F:2C:6C:2D:12:59:16:7E:C2:4C:54:89:D9:59:E8:3E:48:8F:47:6B
Certificate issuer: /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial: 019D71AAEBD38EF29DAB2DB9CA848BD780EE
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/fyxsLRJZFn7CTFSJ2VnoPkiPR2s.roa
Signing time: Thu 09 Apr 2026 09:55:19 +0000
ROA not before: Thu 09 Apr 2026 09:55:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210021
IP address blocks: 31.14.228.0/22 maxlen: 22
31.14.228.0/24 maxlen: 24
31.14.229.0/24 maxlen: 24
31.14.230.0/24 maxlen: 24
31.14.231.0/24 maxlen: 24
86.105.144.0/24 maxlen: 24
86.105.145.0/24 maxlen: 24
86.105.146.0/24 maxlen: 24
86.105.147.0/24 maxlen: 24
185.206.80.0/22 maxlen: 22
185.206.80.0/24 maxlen: 24
185.206.81.0/24 maxlen: 24
185.206.82.0/24 maxlen: 24
185.206.83.0/24 maxlen: 24
185.206.172.0/22 maxlen: 22
185.206.172.0/24 maxlen: 24
185.206.173.0/24 maxlen: 24
185.206.174.0/24 maxlen: 24
185.206.175.0/24 maxlen: 24
185.253.77.0/24 maxlen: 24
2a05:27c0::/48 maxlen: 48
2a05:27c0:1::/48 maxlen: 48
2a05:27c0:2::/48 maxlen: 64
2a05:27c0:3::/48 maxlen: 64
2a05:27c0:4::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:aa:eb:d3:8e:f2:9d:ab:2d:b9:ca:84:8b:d7:80:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Validity
Not Before: Apr 9 09:55:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f2c6c2d1259167ec24c5489d959e83e488f476b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:7d:4e:81:11:ab:66:2e:6c:a9:93:62:1d:
5f:c1:d5:4b:aa:04:24:93:39:57:3f:b7:3c:84:8d:
7a:56:a7:34:57:e9:1f:cf:e9:f4:2f:fb:34:59:1b:
5b:e3:20:1b:ed:39:34:fd:ba:96:4c:9c:0c:22:83:
49:4c:be:64:36:13:92:60:fd:53:39:85:42:66:32:
68:38:2d:61:2a:21:e5:a6:11:59:19:20:14:9b:bb:
ad:ba:db:3d:74:f4:ac:3a:d6:9c:0d:5b:2b:24:16:
ba:e5:40:8f:a3:45:c7:0f:6b:91:80:a0:b5:1e:d5:
86:71:eb:ac:20:d6:24:77:92:f1:37:c2:eb:06:33:
93:c2:5b:aa:4f:9a:82:9d:c0:82:28:e5:24:8e:04:
20:c6:9d:77:45:d1:ab:c5:7c:20:fd:34:f7:ea:a2:
77:91:f7:8c:a5:90:ae:62:ca:98:b2:9b:ec:21:4b:
90:f2:b9:7f:f7:b0:12:8b:b2:90:c1:c7:a3:85:94:
98:6c:2e:7f:a0:ba:2f:7b:57:b3:f0:de:eb:cd:38:
1a:17:04:fe:2e:3e:4b:eb:79:f9:61:8d:c0:66:3e:
c2:fd:a6:57:0f:44:57:a6:19:4b:a1:f2:b8:42:86:
1c:4e:80:bd:ab:68:05:88:28:c7:dc:e4:9e:0c:17:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2C:6C:2D:12:59:16:7E:C2:4C:54:89:D9:59:E8:3E:48:8F:47:6B
X509v3 Authority Key Identifier:
keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/fyxsLRJZFn7CTFSJ2VnoPkiPR2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.228.0/22
86.105.144.0/22
185.206.80.0/22
185.206.172.0/22
185.253.77.0/24
IPv6:
2a05:27c0::-2a05:27c0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a6:bd:82:ff:0b:f3:57:35:8c:a1:3b:e4:5e:65:aa:a2:1a:b3:
50:1d:27:a9:1f:64:a7:98:97:6b:35:eb:80:43:b9:9b:4a:ad:
f9:ce:5e:c3:80:03:8c:7b:ea:e6:04:4f:5c:c9:27:42:17:70:
10:61:6e:f3:12:8b:91:e8:0e:6c:01:ba:9f:e5:1a:84:44:c2:
c4:fe:13:42:a3:71:75:7c:a8:59:17:d3:45:81:bb:9f:8f:60:
12:37:18:17:8b:63:ee:5b:38:bd:ad:0a:68:36:e4:eb:ae:99:
17:53:1d:ef:8b:da:6b:cc:d6:cf:19:a0:e9:f7:b9:04:d0:8a:
31:8e:ed:3c:8e:63:40:3c:f9:c1:75:f9:e6:7f:9d:ee:87:ce:
af:48:ab:6a:cc:4c:09:33:c5:b3:ee:a8:ed:4f:7b:c1:7b:c7:
94:3e:eb:ff:7c:7e:e6:f5:77:76:b1:3d:d1:ac:87:1f:f6:e8:
ea:6c:97:b1:5c:33:71:f6:f7:70:8d:6e:bb:c3:dc:be:d5:52:
19:0a:db:b3:6e:ba:8b:e9:6a:d8:6b:af:8e:1c:74:25:81:56:
b7:ef:f9:91:b0:dd:dc:e6:c7:64:eb:43:c3:a7:f5:1c:82:82:
8e:dc:3c:b5:31:64:c1:bc:74:0f:d4:66:9c:7c:0b:d9:5c:1f:
4c:06:41:1e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZ1xquvTjvKdqy25yoSL14DuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMjYzOWIzNWU1ZDlkMGZiMzY5NmZlMmZkNjFjYjZmNGMz
ZmE1MDQwHhcNMjYwNDA5MDk1NTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjJjNmMyZDEyNTkxNjdlYzI0YzU0ODlkOTU5ZTgzZTQ4OGY0NzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC59ToERq2YubKmTYh1fwdVLqgQk
kzlXP7c8hI16Vqc0V+kfz+n0L/s0WRtb4yAb7Tk0/bqWTJwMIoNJTL5kNhOSYP1T
OYVCZjJoOC1hKiHlphFZGSAUm7ututs9dPSsOtacDVsrJBa65UCPo0XHD2uRgKC1
HtWGceusINYkd5LxN8LrBjOTwluqT5qCncCCKOUkjgQgxp13RdGrxXwg/TT36qJ3
kfeMpZCuYsqYspvsIUuQ8rl/97ASi7KQwcejhZSYbC5/oLove1ez8N7rzTgaFwT+
Lj5L63n5YY3AZj7C/aZXD0RXphlLofK4QoYcToC9q2gFiCjH3OSeDBccvwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFH8sbC0SWRZ+wkxUidlZ6D5Ij0drMB8GA1UdIwQY
MBaAFDImObNeXZ0Ps2lv4v1hy29MP6UEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWlZNXMxNWRuUS16YVdfaV9XSExiMHdfcFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82NjJmYmYtNTU3Ni00NTk1LTg5MmIt
YjViM2FlYWU5OGVhLzEvZnl4c0xSSlpGbjdDVEZTSjJWbm9Qa2lQUjJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82NjJmYmYtNTU3Ni00NTk1LTg5MmItYjViM2FlYWU5OGVh
LzEvTWlZNXMxNWRuUS16YVdfaV9XSExiMHdfcFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAkBAIAATAeAwQCHw7kAwQC
VmmQAwQCuc5QAwQCuc6sAwQAuf1NMBgEAgACMBIwEAMFBioFJ8ADBwAqBSfAAAQw
DQYJKoZIhvcNAQELBQADggEBAKa9gv8L81c1jKE75F5lqqIas1AdJ6kfZKeYl2s1
64BDuZtKrfnOXsOAA4x76uYET1zJJ0IXcBBhbvMSi5HoDmwBup/lGoREwsT+E0Kj
cXV8qFkX00WBu5+PYBI3GBeLY+5bOL2tCmg25OuumRdTHe+L2mvM1s8ZoOn3uQTQ
ijGO7TyOY0A8+cF1+eZ/ne6Hzq9Iq2rMTAkzxbPuqO1Pe8F7x5Q+6/98fub1d3ax
PdGshx/26Opsl7FcM3H293CNbrvD3L7VUhkK27Nuuovpathrr44cdCWBVrfv+ZGw
3dzmx2TrQ8On9RyCgo7cPLUxZMG8dA/UZpx8C9lcH0wGQR4=
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:32 2026 by rpki-client