Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/fmuRuMynV3t-W1T59fbCP9gm_2M.roa
File: fmuRuMynV3t-W1T59fbCP9gm_2M.roa (raw, json)
Hash identifier: 6pRpct2vh79WehrYAlgUzvTdvNK24YaVVaa9iZsg5+Y=
Subject key identifier: 7E:6B:91:B8:CC:A7:57:7B:7E:5B:54:F9:F5:F6:C2:3F:D8:26:FF:63
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019D96D16E48E92AB988AFE5EA5872A4F31B
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/fmuRuMynV3t-W1T59fbCP9gm_2M.roa
Signing time: Thu 16 Apr 2026 15:03:20 +0000
ROA not before: Thu 16 Apr 2026 15:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 94.103.0.0/24 maxlen: 24
109.172.54.0/24 maxlen: 24
109.172.55.0/24 maxlen: 24
130.49.187.0/24 maxlen: 24
130.49.188.0/24 maxlen: 24
130.49.189.0/24 maxlen: 24
130.49.190.0/24 maxlen: 24
130.49.191.0/24 maxlen: 24
130.49.218.0/24 maxlen: 24
130.49.219.0/24 maxlen: 24
153.80.240.0/24 maxlen: 24
153.80.241.0/24 maxlen: 24
153.80.242.0/24 maxlen: 24
153.80.243.0/24 maxlen: 24
178.130.46.0/24 maxlen: 24
178.130.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:d1:6e:48:e9:2a:b9:88:af:e5:ea:58:72:a4:f3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Apr 16 15:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e6b91b8cca7577b7e5b54f9f5f6c23fd826ff63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:6d:96:47:29:bf:a7:cd:37:8e:7b:03:ad:
77:29:ab:5b:bc:bf:6f:a6:d2:17:1e:65:f1:7c:ea:
8b:36:a0:ac:1c:23:e1:d9:8d:9c:88:37:24:f0:d5:
94:eb:b5:59:ac:ec:e0:2a:00:7a:22:06:4a:38:d3:
a0:bb:9e:28:81:a5:16:46:cf:e6:78:31:d8:c5:40:
5f:63:6e:81:79:fc:fe:b3:4f:d1:f3:df:ef:e3:14:
c3:1d:7d:80:7c:ec:f1:cb:2c:93:2d:05:8f:21:67:
d5:37:15:c7:ea:13:e1:06:88:2e:82:84:d1:f8:51:
e3:dc:11:36:69:c9:4d:ac:3b:df:be:62:a9:f8:69:
aa:34:82:7a:87:f2:90:72:92:c0:b3:59:8c:43:ce:
87:a8:33:87:a7:e3:1e:e0:59:04:1b:a3:fe:aa:b0:
b6:a0:97:f7:f9:a2:8f:bd:ee:f1:a7:2e:58:50:72:
09:94:72:fc:c5:4d:02:78:fd:33:62:30:5e:cb:53:
61:02:28:ff:1c:3a:cd:99:f6:0f:a6:6f:f3:15:78:
68:1b:af:2c:13:76:3f:07:21:41:79:2f:7b:bb:44:
d3:86:22:49:72:bc:cc:39:5f:fc:77:ee:c9:58:84:
c1:b6:8d:ef:c9:6d:a7:58:3c:d2:ff:01:1c:ac:81:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6B:91:B8:CC:A7:57:7B:7E:5B:54:F9:F5:F6:C2:3F:D8:26:FF:63
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/fmuRuMynV3t-W1T59fbCP9gm_2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.0.0/24
109.172.54.0/23
130.49.187.0-130.49.191.255
130.49.218.0/23
153.80.240.0/22
178.130.46.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:86:cd:0c:83:d8:c1:c9:a9:61:9b:80:d9:2e:bf:54:73:94:
80:d2:95:9f:ec:c1:69:2a:5c:52:49:22:b0:ca:e5:5f:8c:f0:
b5:e6:e7:a6:75:c4:70:e8:62:b7:14:a4:e8:a4:56:b1:f9:3d:
8c:1f:46:a3:07:12:da:40:33:2c:af:be:28:46:02:06:f1:9f:
31:71:44:3c:34:6b:8a:1b:0a:f8:46:f0:21:ac:80:3f:be:4b:
3d:aa:cd:2e:03:76:5c:3f:c3:18:52:1a:8d:f3:84:5e:ab:73:
78:aa:ec:b4:27:cb:f1:7b:e0:11:77:07:2c:a6:89:ff:b8:c3:
3f:a7:26:48:06:a6:4e:ca:ff:23:a2:d6:fe:8f:9b:70:af:5e:
fa:0d:b7:75:e5:03:28:d2:69:fe:e9:60:f4:ee:2f:3d:c8:88:
e7:b1:6c:4c:84:00:6a:43:6b:2a:01:60:21:b0:5f:ee:98:2b:
ea:e5:18:16:59:00:9b:7e:a0:17:2c:2a:b2:be:26:f0:5c:e0:
d9:a9:1b:78:f3:af:ed:d4:fd:5c:1f:ca:d3:fd:d2:8a:f8:71:
aa:6e:b1:2a:9e:13:c5:04:f9:5e:14:10:fa:f5:9e:65:64:ae:
0b:b7:1e:4a:f2:c0:c9:d8:c4:97:d2:e8:53:76:0c:b8:78:41:
b0:7d:0e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:43 2026 by rpki-client