Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FYXdIlBsYr3K_Pw-m010EKVIsrU.roa
File: FYXdIlBsYr3K_Pw-m010EKVIsrU.roa (raw, json)
Hash identifier: x3y6yP+Vh8fu3tWvc9BtQVrcaF/AmiF/k3HCBDYyAQg=
Subject key identifier: 15:85:DD:22:50:6C:62:BD:CA:FC:FC:3E:9B:4D:74:10:A5:48:B2:B5
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FA7635F09CB0086D888BB984E348DDA00
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FYXdIlBsYr3K_Pw-m010EKVIsrU.roa
Signing time: Tue 28 Jul 2026 06:22:15 +0000
ROA not before: Tue 28 Jul 2026 06:22:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 46.34.29.0/24 maxlen: 24
78.154.127.0/24 maxlen: 24
82.108.173.0/24 maxlen: 24
82.109.98.0/24 maxlen: 24
82.109.151.0/24 maxlen: 24
82.109.166.0/24 maxlen: 24
85.189.17.0/24 maxlen: 24
87.82.233.0/24 maxlen: 24
87.83.232.0/24 maxlen: 24
87.84.188.0/24 maxlen: 24
87.84.232.0/24 maxlen: 24
194.242.132.0/24 maxlen: 24
195.72.169.0/24 maxlen: 24
217.79.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:63:5f:09:cb:00:86:d8:88:bb:98:4e:34:8d:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 28 06:22:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1585dd22506c62bdcafcfc3e9b4d7410a548b2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:e4:80:38:6d:63:40:9f:86:90:bb:50:9b:
7c:19:db:aa:e3:27:b7:ea:67:12:85:7a:9f:59:c5:
4b:fa:91:07:5a:5a:85:28:4c:08:fc:35:6c:35:2c:
a0:de:f6:8f:6f:03:0f:a9:ec:10:57:de:b8:c5:8d:
b8:a8:f5:ae:3d:43:bb:52:fa:33:28:3b:f3:f3:c5:
2d:ad:b0:f5:c8:f7:64:82:49:b7:c5:e3:a7:30:6b:
14:f9:54:87:aa:ef:bd:b9:5e:83:33:e6:4e:26:01:
2a:ba:3c:b6:1c:20:3f:e8:d1:c3:37:63:10:d3:1b:
46:e5:da:ea:84:93:b4:ae:1b:92:6b:f2:46:34:89:
a1:3b:f3:0f:53:e0:fa:7e:61:ef:de:1f:e9:da:f5:
0c:12:80:c1:2e:97:65:5b:89:8b:d1:7c:88:dc:71:
e6:aa:7f:b4:68:9b:19:51:38:b0:31:ad:51:74:31:
cf:76:9f:8c:4c:ef:3b:81:95:50:7c:2e:1a:6d:16:
c7:c4:8a:4b:4c:60:61:29:9a:df:e9:97:68:21:c4:
a6:92:43:00:64:dc:56:50:80:db:f6:31:23:5c:5a:
89:65:c4:73:78:4e:e2:fe:e9:5d:4b:b2:9e:9c:80:
83:91:ef:eb:71:7e:12:a8:e8:fe:82:cc:68:8a:bf:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:85:DD:22:50:6C:62:BD:CA:FC:FC:3E:9B:4D:74:10:A5:48:B2:B5
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FYXdIlBsYr3K_Pw-m010EKVIsrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.29.0/24
78.154.127.0/24
82.108.173.0/24
82.109.98.0/24
82.109.151.0/24
82.109.166.0/24
85.189.17.0/24
87.82.233.0/24
87.83.232.0/24
87.84.188.0/24
87.84.232.0/24
194.242.132.0/24
195.72.169.0/24
217.79.112.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f1:ca:e7:8a:dd:f1:fa:c3:22:d4:e9:55:85:db:f9:e7:9d:
8a:0c:bb:cf:b4:e9:84:6c:71:f4:eb:da:2c:32:b3:c5:17:c9:
f0:09:70:0d:93:9d:60:6e:f1:67:76:f6:f1:ed:28:fe:bb:10:
d4:39:44:44:81:ef:39:b5:4a:af:52:e0:b7:f2:8b:fd:d6:1e:
4a:56:43:cf:a0:3b:67:bd:56:ff:97:9b:69:49:a7:9c:48:b2:
56:34:63:98:61:eb:1f:f8:42:5d:90:53:17:fd:f3:db:53:ce:
65:60:64:1b:99:ba:d2:a9:29:85:36:c8:7e:20:ee:7c:6e:3b:
55:79:08:4e:06:7e:56:2f:95:b8:42:e8:3b:01:7c:87:c5:61:
66:89:02:3c:b0:22:21:3a:e9:c1:e6:11:46:e5:55:79:76:e1:
2f:92:69:26:f5:4d:fe:30:38:45:42:7c:a0:48:63:11:1d:df:
d8:b2:31:ab:5e:85:34:e5:b2:9e:a3:4b:ec:fd:25:ad:d8:bf:
be:f1:ad:b8:30:31:02:e2:ab:b5:10:0d:d4:3a:57:f5:5e:c9:
a4:c8:9f:ec:d5:9c:42:92:20:37:a2:5c:52:d3:5e:17:e9:f5:
13:c0:d2:f3:cd:10:59:9b:9a:30:20:a6:03:e0:69:0b:51:da:
21:f3:09:6b
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZ+nY18JywCG2Ii7mE40jdoAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzI4MDYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTg1ZGQyMjUwNmM2MmJkY2FmY2ZjM2U5YjRkNzQxMGE1NDhiMmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8nkgDhtY0CfhpC7UJt8Gduq4ye3
6mcShXqfWcVL+pEHWlqFKEwI/DVsNSyg3vaPbwMPqewQV964xY24qPWuPUO7Uvoz
KDvz88UtrbD1yPdkgkm3xeOnMGsU+VSHqu+9uV6DM+ZOJgEqujy2HCA/6NHDN2MQ
0xtG5drqhJO0rhuSa/JGNImhO/MPU+D6fmHv3h/p2vUMEoDBLpdlW4mL0XyI3HHm
qn+0aJsZUTiwMa1RdDHPdp+MTO87gZVQfC4abRbHxIpLTGBhKZrf6ZdoIcSmkkMA
ZNxWUIDb9jEjXFqJZcRzeE7i/uldS7KenICDke/rcX4SqOj+gsxoir919wIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFBWF3SJQbGK9yvz8PptNdBClSLK1MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvRllYZElsQnNZcjNLX1B3LW0wMTBFS1ZJc3JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQALiIdAwQA
Tpp/AwQAUmytAwQAUm1iAwQAUm2XAwQAUm2mAwQAVb0RAwQAV1LpAwQAV1PoAwQA
V1S8AwQAV1ToAwQAwvKEAwQAw0ipAwQA2U9wMA0GCSqGSIb3DQEBCwUAA4IBAQBr
8crnit3x+sMi1OlVhdv5552KDLvPtOmEbHH069osMrPFF8nwCXANk51gbvFndvbx
7Sj+uxDUOUREge85tUqvUuC38ov91h5KVkPPoDtnvVb/l5tpSaecSLJWNGOYYesf
+EJdkFMX/fPbU85lYGQbmbrSqSmFNsh+IO58bjtVeQhOBn5WL5W4Qug7AXyHxWFm
iQI8sCIhOunB5hFG5VV5duEvkmkm9U3+MDhFQnygSGMRHd/YsjGrXoU05bKeo0vs
/SWt2L++8a24MDEC4qu1EA3UOlf1XsmkyJ/s1ZxCkiA3olxS014X6fUTwNLzzRBZ
m5owIKYD4GkLUdoh8wlr
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:56 2026 by rpki-client