Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/fuD0CgY1AGpFOfbU6p4eMHDAb9U.roa
File: fuD0CgY1AGpFOfbU6p4eMHDAb9U.roa (raw, json)
Hash identifier: o0rs5EdkGYVbUk65GqpD7Ia9/i5PjxjFasvi4v7Sq3M=
Subject key identifier: 7E:E0:F4:0A:06:35:00:6A:45:39:F6:D4:EA:9E:1E:30:70:C0:6F:D5
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019D62C402DDE6075F44B7A5884815DE4F65
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/fuD0CgY1AGpFOfbU6p4eMHDAb9U.roa
Signing time: Mon 06 Apr 2026 12:28:26 +0000
ROA not before: Mon 06 Apr 2026 12:28:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48207
IP address blocks: 88.218.64.0/24 maxlen: 24
138.249.8.0/24 maxlen: 24
138.249.20.0/24 maxlen: 24
138.249.127.0/24 maxlen: 24
170.168.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:c4:02:dd:e6:07:5f:44:b7:a5:88:48:15:de:4f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Apr 6 12:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ee0f40a0635006a4539f6d4ea9e1e3070c06fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:de:96:5e:72:f2:0e:e3:a0:61:7d:fe:70:
de:17:e6:a8:26:9a:cf:c6:5a:42:22:4d:3d:43:35:
dd:2a:6b:fe:5c:80:21:78:5d:52:0d:f8:01:24:cc:
80:b3:7b:51:b5:ab:1e:65:08:15:01:c8:3a:31:71:
27:b8:1b:cd:a6:b7:46:8b:6e:67:56:d9:2f:c4:ae:
d6:a8:98:0c:aa:a1:9d:f6:5d:44:43:a1:5a:37:60:
09:89:7d:2f:bc:ef:4f:9c:cd:9f:1f:98:dc:67:1c:
fb:dd:c0:47:fd:e7:f4:98:f1:31:44:4b:a7:cc:30:
84:ab:94:5e:56:93:1a:8b:9a:c3:9f:df:5f:42:18:
69:5e:66:50:56:bb:8e:de:9e:80:9c:9e:43:0f:ac:
81:05:a2:b3:a8:cc:59:c1:4d:b4:f2:bc:72:e0:27:
c1:de:e7:4e:10:2c:ef:15:ec:bb:32:20:76:2f:6c:
87:06:ff:1b:84:70:f0:e8:4f:7b:99:27:b2:00:e1:
4f:90:d4:0e:09:c8:ad:a7:fe:30:94:7c:d6:1e:b6:
3b:15:69:02:1b:f7:bb:7b:33:6e:e1:f2:50:3c:67:
16:1c:a7:89:79:47:4f:6f:b6:e1:ad:3a:92:54:a4:
dd:47:1b:62:89:a9:48:dc:88:9e:4d:bc:7b:6b:94:
97:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E0:F4:0A:06:35:00:6A:45:39:F6:D4:EA:9E:1E:30:70:C0:6F:D5
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/fuD0CgY1AGpFOfbU6p4eMHDAb9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.64.0/24
138.249.8.0/24
138.249.20.0/24
138.249.127.0/24
170.168.102.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:80:fa:e2:92:db:d3:08:49:87:f2:e3:e3:f9:17:14:3c:65:
bd:3e:0f:77:3b:a0:a2:0f:7b:f8:e2:bf:c7:b4:9e:7f:30:51:
d6:cb:be:68:19:86:43:3b:27:71:ca:06:23:9e:b4:06:de:a7:
4e:11:3a:87:70:69:8e:9a:e0:d3:b0:66:fb:db:40:ea:65:76:
8c:a3:4b:b7:4e:08:51:5d:23:36:8a:5b:be:76:e9:8b:12:fd:
e5:f0:39:fd:fa:8c:cb:8e:58:bc:db:62:d5:95:c2:ba:10:f2:
77:f2:cf:79:5c:12:4f:e5:b5:5f:b0:4a:b6:98:d8:3b:09:04:
ff:78:02:e3:b1:67:35:74:f0:21:06:ad:34:13:dd:af:0f:31:
4f:da:bd:3e:0f:c4:5c:bf:76:99:8f:64:7e:d2:da:48:30:86:
50:ae:21:cd:e2:79:e2:03:70:0e:ab:49:c0:1c:0b:0f:07:b4:
bb:1a:80:d4:22:c6:03:50:71:22:ac:8d:07:11:43:46:bb:de:
bb:a0:d8:9d:1e:46:ab:04:07:38:87:74:6c:5c:46:a4:72:77:
8e:38:14:8d:8e:8e:38:72:19:6b:fa:22:b3:a0:9e:74:63:75:
10:a7:a2:d8:fe:33:5d:6a:e0:30:f8:53:c8:97:cc:69:38:03:
d9:ff:85:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:36 2026 by rpki-client