Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Fd25MzqOlRmFC78IQJuJ_wF_7JI.roa
File: Fd25MzqOlRmFC78IQJuJ_wF_7JI.roa (raw, json)
Hash identifier: A+KUwVUwwwXhDHCrmqs3sMvcJPVFEEJvaFcDazio//8=
Subject key identifier: 15:DD:B9:33:3A:8E:95:19:85:0B:BF:08:40:9B:89:FF:01:7F:EC:92
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019E408C9D9CBA0889D758D242B9DB236759
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Fd25MzqOlRmFC78IQJuJ_wF_7JI.roa
Signing time: Tue 19 May 2026 14:03:37 +0000
ROA not before: Tue 19 May 2026 14:03:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201002
IP address blocks: 138.249.24.0/24 maxlen: 24
138.249.25.0/24 maxlen: 24
138.249.26.0/24 maxlen: 24
138.249.32.0/24 maxlen: 24
138.249.33.0/24 maxlen: 24
138.249.34.0/24 maxlen: 24
138.249.35.0/24 maxlen: 24
138.249.40.0/24 maxlen: 24
138.249.41.0/24 maxlen: 24
138.249.42.0/24 maxlen: 24
138.249.43.0/24 maxlen: 24
138.249.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:8c:9d:9c:ba:08:89:d7:58:d2:42:b9:db:23:67:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: May 19 14:03:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15ddb9333a8e9519850bbf08409b89ff017fec92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:12:33:68:d0:1d:0e:0f:1f:bc:95:93:38:
37:7a:4c:04:36:e4:48:5f:46:ba:60:63:07:c9:35:
c1:a2:86:3e:d8:dc:bc:e3:6f:d4:a9:f5:51:5d:9a:
d0:78:77:df:a6:ac:87:52:cf:20:fe:dd:dd:77:ea:
32:72:38:82:7d:70:ac:a4:12:d8:23:53:2a:ff:cc:
9c:30:91:30:0e:13:8d:a9:a1:8f:d9:29:6b:8b:1b:
6b:04:07:d8:66:bc:20:fb:09:2c:42:00:4d:68:ca:
9a:ee:d9:ba:49:15:02:bd:a7:2c:d9:e6:05:c5:12:
c7:f2:4c:13:7b:5a:a5:f1:54:65:1e:99:a2:ec:8f:
32:aa:5a:49:75:0a:0d:d9:1d:be:49:1b:2c:c8:54:
fb:a1:3b:aa:06:1d:ef:50:35:1d:40:2c:c6:97:88:
1f:09:cb:fe:0e:4f:27:89:23:43:e8:8e:da:71:b1:
5a:60:38:67:b0:e7:86:27:b0:03:d4:2f:3b:08:87:
ba:8e:70:c5:08:49:ec:8c:4c:d1:5c:ad:ad:6f:5a:
a7:94:fc:61:44:4e:79:2e:5a:0c:d3:5d:f4:0f:65:
6a:ce:03:b5:6e:ec:e8:ca:4c:0e:ae:e7:a9:24:0b:
3b:41:2d:d3:c4:36:b4:ed:59:6c:9d:18:78:2d:04:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DD:B9:33:3A:8E:95:19:85:0B:BF:08:40:9B:89:FF:01:7F:EC:92
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Fd25MzqOlRmFC78IQJuJ_wF_7JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.24.0-138.249.26.255
138.249.32.0/22
138.249.40.0/22
138.249.135.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ea:86:11:ee:d0:76:6f:9e:45:d5:b8:d3:49:ba:6d:4c:62:
76:1c:06:0b:7f:4a:b2:dc:74:d1:46:04:e3:3d:0e:0e:98:19:
af:32:5c:17:4a:2c:f3:de:e2:71:ae:67:c8:c9:90:2c:52:7d:
bb:13:1e:d1:4b:52:eb:34:7f:ff:d1:5e:51:1c:44:1c:8b:12:
ee:28:f0:4c:48:10:0f:81:4d:ae:e9:76:18:09:6a:81:80:8f:
3b:80:2d:a2:8f:54:cc:2a:b8:4b:55:74:53:0c:e1:98:93:8c:
9c:a8:67:7d:a5:75:58:84:93:81:54:90:26:bb:56:da:4b:84:
7b:9d:38:89:a9:5b:b2:5d:d7:46:aa:43:42:34:5e:2b:83:74:
b6:36:6c:3e:c2:b7:be:e7:d5:b5:03:c1:cc:ff:c4:3c:e8:a8:
e5:8d:f3:5b:41:c1:ae:e5:10:2c:8b:e5:02:90:63:c1:b2:e4:
7c:19:66:3a:ae:46:46:58:01:0a:c4:86:de:0a:34:18:d4:2f:
0f:e0:5c:67:d1:75:d0:1e:8c:b7:30:6f:b8:27:1e:14:a7:24:
23:ca:10:67:55:a2:3e:b6:5a:a2:44:13:19:b6:39:14:7e:a0:
58:5e:b9:e4:68:db:97:d5:8c:65:82:4f:a4:a2:6a:de:05:92:
64:ed:4d:25
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ5AjJ2cugiJ11jSQrnbI2dZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjYwNTE5MTQwMzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWRkYjkzMzNhOGU5NTE5ODUwYmJmMDg0MDliODlmZjAxN2ZlYzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqugSM2jQHQ4PH7yVkzg3ekwENuRI
X0a6YGMHyTXBooY+2Ny842/UqfVRXZrQeHffpqyHUs8g/t3dd+oycjiCfXCspBLY
I1Mq/8ycMJEwDhONqaGP2SlrixtrBAfYZrwg+wksQgBNaMqa7tm6SRUCvacs2eYF
xRLH8kwTe1ql8VRlHpmi7I8yqlpJdQoN2R2+SRssyFT7oTuqBh3vUDUdQCzGl4gf
Ccv+Dk8niSND6I7acbFaYDhnsOeGJ7AD1C87CIe6jnDFCEnsjEzRXK2tb1qnlPxh
RE55LloM0130D2VqzgO1buzoykwOruepJAs7QS3TxDa07VlsnRh4LQSUDQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFBXduTM6jpUZhQu/CECbif8Bf+ySMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvRmQyNU16cU9sUm1GQzc4SVFKdUpfd0ZfN0pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAOK+RgD
BACK+RoDBAKK+SADBAKK+SgDBACK+YcwDQYJKoZIhvcNAQELBQADggEBAEnqhhHu
0HZvnkXVuNNJum1MYnYcBgt/SrLcdNFGBOM9Dg6YGa8yXBdKLPPe4nGuZ8jJkCxS
fbsTHtFLUus0f//RXlEcRByLEu4o8ExIEA+BTa7pdhgJaoGAjzuALaKPVMwquEtV
dFMM4ZiTjJyoZ32ldViEk4FUkCa7VtpLhHudOImpW7Jd10aqQ0I0XiuDdLY2bD7C
t77n1bUDwcz/xDzoqOWN81tBwa7lECyL5QKQY8Gy5HwZZjquRkZYAQrEht4KNBjU
Lw/gXGfRddAejLcwb7gnHhSnJCPKEGdVoj62WqJEExm2ORR+oFheueRo25fVjGWC
T6Siat4FkmTtTSU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:35 2026 by rpki-client