Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/fXPoY-0-q5iOyYhj9TEia273Zdo.roa
File: fXPoY-0-q5iOyYhj9TEia273Zdo.roa (raw, json)
Hash identifier: mEk1psIYpULRd0+LS2omMVGz1dNS2p38t/9B8etfgac=
Subject key identifier: 7D:73:E8:63:ED:3E:AB:98:8E:C9:88:63:F5:31:22:6B:6E:F7:65:DA
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019FA7A287DF2E2FF49AF7B813533C2E263B
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/fXPoY-0-q5iOyYhj9TEia273Zdo.roa
Signing time: Tue 28 Jul 2026 07:31:14 +0000
ROA not before: Tue 28 Jul 2026 07:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 80.86.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:a2:87:df:2e:2f:f4:9a:f7:b8:13:53:3c:2e:26:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Jul 28 07:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d73e863ed3eab988ec98863f531226b6ef765da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:3c:b2:a4:c1:e4:b0:03:9a:1c:1d:ed:ca:2a:
1f:c8:1d:34:11:24:2d:e5:7a:2d:3c:94:9a:23:e9:
18:d8:82:35:c9:bc:e0:d6:5f:a0:68:87:73:80:42:
88:fc:08:08:05:0d:8e:e6:e4:33:87:4a:23:74:29:
39:7a:25:78:74:94:e9:70:5f:f5:1f:09:75:41:d7:
0e:48:22:d5:5e:d7:62:36:11:5b:f9:25:0a:9a:15:
ff:f2:52:7d:77:96:89:2d:16:aa:f2:93:1a:ce:d0:
de:20:64:81:a6:06:73:38:55:03:c5:06:b2:df:80:
ab:d9:07:b2:c1:7c:f8:fd:a6:1c:d2:8f:86:10:bd:
68:f4:f3:21:ed:92:be:b0:1f:4d:5c:6a:e2:43:c6:
4f:8a:53:5c:aa:b2:7a:f2:8f:16:56:1e:4f:d5:c7:
ac:4e:98:31:63:5f:e2:5c:94:8d:c3:55:7b:93:7e:
3f:e1:13:33:56:cb:ff:d9:e7:e4:a2:08:ac:f6:dd:
66:e2:a2:a8:d7:2a:f3:d3:24:77:e5:7c:74:2f:46:
2b:19:4a:b0:0c:8c:4f:cb:95:8c:87:03:cd:3c:da:
15:2a:f1:ed:eb:a4:74:89:c3:64:ae:d6:ad:00:4b:
c4:66:d0:63:4d:5d:2e:86:28:da:81:00:aa:d1:15:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:E8:63:ED:3E:AB:98:8E:C9:88:63:F5:31:22:6B:6E:F7:65:DA
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/fXPoY-0-q5iOyYhj9TEia273Zdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.208.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c7:de:cc:40:a4:cc:a2:45:80:84:d5:38:fa:fa:7a:c9:40:
8f:a7:45:bb:60:98:9d:ee:8b:fc:b8:5f:3e:29:e5:a5:43:c4:
4e:0b:15:d4:84:73:3e:39:35:34:e6:66:06:b8:6b:66:8d:5e:
e3:e0:ce:e1:9e:0b:fa:d5:e2:74:82:de:55:76:dc:7d:d1:44:
29:25:92:46:2a:82:f3:0f:86:8b:f6:29:ff:3a:67:b7:0e:7f:
d4:75:25:6f:42:d8:ee:f5:a5:5a:4a:4e:d7:38:f3:5d:80:ad:
54:66:e1:17:0a:d5:1d:cf:3c:c9:5c:5b:7b:5d:4c:4f:75:38:
25:ab:e0:53:da:97:c7:13:06:14:3e:9f:45:50:00:02:31:78:
8d:e7:12:d9:8d:29:7d:36:1d:a1:e0:6c:24:15:38:99:08:bb:
2b:fc:91:03:88:6e:62:db:36:ee:da:d0:ab:76:b3:8a:7c:74:
bb:ba:b5:ac:01:b6:40:4c:2d:5d:2f:3b:7e:3e:5f:f9:fe:e9:
e2:c2:7f:24:f0:ed:f2:94:83:e8:9d:8c:2d:12:c7:59:6e:f2:
41:b3:56:ba:18:9e:3b:25:4a:b4:20:81:76:2d:c8:43:79:02:
20:07:4f:2c:0d:bb:85:55:d0:45:b4:3a:a9:89:8a:d2:52:77:
ac:2c:5e:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+nooffLi/0mve4E1M8LiY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh
YzJiZmMwHhcNMjYwNzI4MDczMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDczZTg2M2VkM2VhYjk4OGVjOTg4NjNmNTMxMjI2YjZlZjc2NWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/TyypMHksAOaHB3tyiofyB00ESQt
5XotPJSaI+kY2II1ybzg1l+gaIdzgEKI/AgIBQ2O5uQzh0ojdCk5eiV4dJTpcF/1
Hwl1QdcOSCLVXtdiNhFb+SUKmhX/8lJ9d5aJLRaq8pMaztDeIGSBpgZzOFUDxQay
34Cr2QeywXz4/aYc0o+GEL1o9PMh7ZK+sB9NXGriQ8ZPilNcqrJ68o8WVh5P1ces
TpgxY1/iXJSNw1V7k34/4RMzVsv/2efkogis9t1m4qKo1yrz0yR35Xx0L0YrGUqw
DIxPy5WMhwPNPNoVKvHt66R0icNkrtatAEvEZtBjTV0uhijagQCq0RVR1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1z6GPtPquYjsmIY/UxImtu92XaMB8GA1UdIwQY
MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt
YTEyZGUzYTMzNTUzLzEvZlhQb1ktMC1xNWlPeVloajlURWlhMjczWmRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz
LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFbQMA0G
CSqGSIb3DQEBCwUAA4IBAQAex97MQKTMokWAhNU4+vp6yUCPp0W7YJid7ov8uF8+
KeWlQ8ROCxXUhHM+OTU05mYGuGtmjV7j4M7hngv61eJ0gt5Vdtx90UQpJZJGKoLz
D4aL9in/Ome3Dn/UdSVvQtju9aVaSk7XOPNdgK1UZuEXCtUdzzzJXFt7XUxPdTgl
q+BT2pfHEwYUPp9FUAACMXiN5xLZjSl9Nh2h4GwkFTiZCLsr/JEDiG5i2zbu2tCr
drOKfHS7urWsAbZATC1dLzt+Pl/5/uniwn8k8O3ylIPonYwtEsdZbvJBs1a6GJ47
JUq0IIF2LchDeQIgB08sDbuFVdBFtDqpiYrSUnesLF5c
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:34:04 2026 by rpki-client