Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FmIoCR2_TFMaDTC1uD1KtttILu0.roa
File: FmIoCR2_TFMaDTC1uD1KtttILu0.roa (raw, json)
Hash identifier: LwmlX6vZF1WL1YfSdc7N1QdZk0rVsrTKo8JywcG2xUA=
Subject key identifier: 16:62:28:09:1D:BF:4C:53:1A:0D:30:B5:B8:3D:4A:B6:DB:48:2E:ED
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0AFAE90E0C2355007B62963AB08456506
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FmIoCR2_TFMaDTC1uD1KtttILu0.roa
Signing time: Thu 17 Sep 2026 14:04:08 +0000
ROA not before: Thu 17 Sep 2026 14:04:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 46.34.22.0/24 maxlen: 24
87.82.240.0/24 maxlen: 24
87.85.141.0/24 maxlen: 24
212.134.97.0/24 maxlen: 24
212.135.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:ae:90:e0:c2:35:50:07:b6:29:63:ab:08:45:65:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 17 14:04:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=166228091dbf4c531a0d30b5b83d4ab6db482eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:07:8c:e0:39:ac:35:e9:87:0e:47:63:c7:
1a:f4:09:89:2b:ac:2d:32:c7:4b:60:37:c4:12:93:
c6:36:a7:63:56:6f:c8:c6:44:6a:6d:21:aa:d4:e9:
ad:bb:66:e5:fc:0c:6e:24:10:20:73:32:53:d1:79:
bf:e2:53:cb:9e:d5:84:21:8b:18:9e:21:20:c9:54:
49:cb:e1:7d:21:a1:a7:13:3a:da:e4:c6:96:f7:27:
38:d8:c1:d7:e5:42:21:f4:db:d4:80:7b:b1:fc:f7:
d8:43:a5:96:8a:d8:03:d5:0f:39:fa:44:ad:cf:21:
b3:41:eb:b2:6a:11:1d:10:48:20:3a:e5:c8:dc:87:
45:d4:8e:07:d0:2f:7b:4b:9a:02:ab:fe:84:ef:d0:
64:47:69:91:86:fc:64:61:58:57:ff:59:e0:5f:14:
8e:8b:1b:71:5c:32:93:4d:c6:7c:29:fc:e8:cf:92:
e3:f8:e9:95:fc:e0:40:59:6a:b1:30:6e:5f:d5:18:
a4:51:7b:5e:d9:7a:de:9a:e4:e9:ae:1b:67:7c:3a:
76:45:a9:65:5a:b8:1f:a9:86:fa:1a:cb:6d:37:69:
56:93:f4:6c:c4:7a:52:6f:70:39:2c:13:12:2a:5f:
73:3b:81:12:6f:d8:fa:30:ab:e9:cb:b0:78:89:cb:
e2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:62:28:09:1D:BF:4C:53:1A:0D:30:B5:B8:3D:4A:B6:DB:48:2E:ED
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FmIoCR2_TFMaDTC1uD1KtttILu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.22.0/24
87.82.240.0/24
87.85.141.0/24
212.134.97.0/24
212.135.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:72:92:9e:5b:4f:a9:66:2a:0c:9a:a2:aa:08:dc:d2:44:87:
92:27:25:0e:e0:7c:8e:2a:f0:13:53:1c:ff:7d:7d:46:ab:5d:
3b:d7:c0:ba:c5:93:0a:71:8b:4c:d6:ef:13:38:d3:3c:06:0a:
c1:79:1f:8b:d7:d8:fd:41:3e:5a:91:8f:97:fb:95:ae:bf:fc:
27:91:38:83:70:17:6e:92:46:5c:7b:13:f8:a5:1c:2d:a7:89:
2e:85:d3:8b:2b:df:c1:7b:3d:de:b6:18:83:b2:06:59:dd:a8:
05:15:78:9e:da:d5:f0:d4:b3:9f:f7:e4:68:ab:4a:d4:67:9a:
26:5c:8c:c5:f1:27:80:ce:40:81:2e:13:c6:33:82:8c:4d:a1:
0b:f6:97:6f:60:cb:ee:e7:c2:d1:76:4e:86:95:92:80:ca:8b:
19:10:78:c1:af:22:97:4c:a1:9e:90:34:0e:81:e2:b3:f2:2f:
24:40:58:ff:3c:fb:c1:05:1c:86:f2:92:e3:1b:8e:24:21:88:
8a:61:8e:8b:35:d4:bf:1a:28:5d:25:ac:69:e7:53:f9:55:8d:
88:09:2f:da:6e:9b:cc:62:6f:10:df:67:97:5c:ca:ff:68:1c:
96:09:5c:28:b4:85:73:46:02:33:60:3d:eb:f8:63:c4:88:42:
2e:8a:e8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:11:52 2026 by rpki-client