Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/FQvXbkq8hYxKkYxMBlYJ3Ul4NRA.roa
File: FQvXbkq8hYxKkYxMBlYJ3Ul4NRA.roa (raw, json)
Hash identifier: TJ7fk5nL80pjHlbzTBgEwjp62EWclV89UTeLYtUWNcU=
Subject key identifier: 15:0B:D7:6E:4A:BC:85:8C:4A:91:8C:4C:06:56:09:DD:49:78:35:10
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019D6E8C96FACE24F853DEF43943DDFDF05C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/FQvXbkq8hYxKkYxMBlYJ3Ul4NRA.roa
Signing time: Wed 08 Apr 2026 19:23:20 +0000
ROA not before: Wed 08 Apr 2026 19:23:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.84.216.0/24 maxlen: 24
45.85.90.0/24 maxlen: 24
45.91.23.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
45.130.143.0/24 maxlen: 24
45.146.53.0/24 maxlen: 24
45.148.25.0/24 maxlen: 24
45.157.98.0/24 maxlen: 24
45.157.99.0/24 maxlen: 24
89.251.2.0/24 maxlen: 24
93.185.160.0/24 maxlen: 24
93.185.161.0/24 maxlen: 24
136.144.26.0/24 maxlen: 24
136.144.27.0/24 maxlen: 24
185.227.33.0/24 maxlen: 24
194.5.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6e:8c:96:fa:ce:24:f8:53:de:f4:39:43:dd:fd:f0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Apr 8 19:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=150bd76e4abc858c4a918c4c065609dd49783510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:77:13:60:32:cf:65:6b:13:5c:fa:51:8d:
4a:46:cf:44:47:1c:26:f1:7e:ce:4b:7f:72:87:a0:
36:56:5e:e1:93:c9:c2:5d:9f:75:73:7a:0c:db:ab:
cc:79:7c:4b:ee:10:bd:e6:fa:97:96:4c:8c:9e:b7:
78:c8:a9:97:19:bf:07:1b:14:c7:e2:22:b6:c0:60:
65:5d:14:f5:b9:d4:78:dc:63:a4:74:e2:d2:c1:98:
a3:eb:5e:b2:9d:1c:ff:a3:a2:7f:26:ca:9a:ac:a2:
ae:b1:d2:59:41:88:00:5e:53:ef:34:e4:94:ee:a0:
fd:23:f4:db:c5:f0:10:1b:58:db:0d:84:72:a8:15:
6c:f2:18:bf:74:fd:d7:2b:b2:39:83:e8:e9:20:74:
30:cc:e6:c9:35:05:e0:53:4a:56:04:65:41:94:1f:
c8:06:4f:a4:01:bb:39:12:15:b3:61:4e:03:18:a5:
0b:6f:b8:81:c4:a5:8c:ed:83:4e:b1:b8:f8:20:42:
b4:9d:c3:5d:e1:11:c5:3b:49:ac:93:90:70:4c:b4:
94:3c:4b:81:40:b4:fc:2a:46:5e:77:6a:01:c2:f0:
6b:b6:ef:cb:dc:9c:97:b6:11:87:6f:82:5f:2d:d2:
96:30:59:60:db:fa:85:59:9b:44:8b:77:f4:14:6b:
3a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0B:D7:6E:4A:BC:85:8C:4A:91:8C:4C:06:56:09:DD:49:78:35:10
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/FQvXbkq8hYxKkYxMBlYJ3Ul4NRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/24
45.85.90.0/24
45.91.23.0/24
45.95.243.0/24
45.130.143.0/24
45.146.53.0/24
45.148.25.0/24
45.157.98.0/23
89.251.2.0/24
93.185.160.0/23
136.144.26.0/23
185.227.33.0/24
194.5.49.0/24
Signature Algorithm: sha256WithRSAEncryption
29:de:f3:10:de:1a:04:40:aa:c9:d5:1e:e1:9a:7b:6f:4e:ad:
20:63:fd:dc:11:06:42:e2:92:9f:41:a6:a1:1d:9c:77:0e:44:
94:7e:cf:3b:36:6d:0f:64:ab:64:2d:ba:35:81:7a:30:ed:c9:
d6:d8:d0:51:1f:88:b1:9c:a0:ab:f3:14:8a:45:b8:55:71:6d:
fd:b3:75:09:cb:38:f0:d1:40:39:5c:da:27:19:0a:3d:9f:d2:
b4:b8:23:0d:cd:51:34:c4:9a:fc:ed:67:91:e1:f1:c0:72:c4:
ec:a8:70:53:69:9b:c7:dd:a1:9d:05:ed:d3:be:3c:84:0f:05:
78:b1:8b:9c:af:5c:58:81:1f:a7:ab:d5:2a:14:98:8c:6e:e1:
b6:94:e2:57:ad:bc:e9:9c:85:0c:b8:e1:b8:5b:b9:1f:a6:35:
92:4f:f7:05:d3:5e:af:83:58:c5:b3:8e:3c:86:c6:8b:77:4e:
08:e8:d7:30:7c:fe:a6:fe:83:32:a9:38:70:fd:65:c0:bc:46:
9f:97:8f:95:48:b1:98:56:15:34:bd:47:56:7c:39:4f:74:99:
59:27:11:1d:95:ae:b8:38:1e:c4:b1:33:b0:6a:b4:8f:c0:e0:
d5:e7:e1:24:dd:7c:e6:e5:4c:f3:f5:fd:fa:be:80:ef:05:80:
af:ef:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:45:04 2026 by rpki-client