Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/fpfM-sjvgdKP8UmU7XJIaMafJMs.roa
File: fpfM-sjvgdKP8UmU7XJIaMafJMs.roa (raw, json)
Hash identifier: tAYKWVFO59YP9b4gxcf7jr0o3eZGtYUjZd6XY8JrmBI=
Subject key identifier: 7E:97:CC:FA:C8:EF:81:D2:8F:F1:49:94:ED:72:48:68:C6:9F:24:CB
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019EBB925C0600628B5B852F2110EA816ADB
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/fpfM-sjvgdKP8UmU7XJIaMafJMs.roa
Signing time: Fri 12 Jun 2026 11:23:11 +0000
ROA not before: Fri 12 Jun 2026 11:23:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39700
IP address blocks: 31.223.160.0/20 maxlen: 24
37.17.208.0/20 maxlen: 24
78.108.128.0/20 maxlen: 24
80.246.192.0/20 maxlen: 24
80.255.240.0/20 maxlen: 24
81.21.136.0/21 maxlen: 24
81.30.32.0/20 maxlen: 24
85.10.171.0/24 maxlen: 24
91.142.240.0/21 maxlen: 24
91.142.248.0/22 maxlen: 24
141.255.176.0/22 maxlen: 24
171.33.128.0/21 maxlen: 24
176.74.224.0/19 maxlen: 24
185.15.248.0/22 maxlen: 24
217.21.240.0/20 maxlen: 24
217.149.128.0/20 maxlen: 24
2001:4cb8::/29 maxlen: 48
2a00:c080:101c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:92:5c:06:00:62:8b:5b:85:2f:21:10:ea:81:6a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jun 12 11:23:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e97ccfac8ef81d28ff14994ed724868c69f24cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:08:83:66:ce:fc:2d:91:b8:c0:4d:5c:ad:
38:91:36:56:0e:0e:b3:99:83:9c:ec:0e:c1:b4:a5:
0d:6f:eb:4f:20:39:69:a6:03:08:f2:94:bb:04:4e:
c0:73:73:e7:f6:72:5b:0f:37:0a:a6:80:67:c4:ca:
03:f5:d8:76:44:ad:33:22:19:0a:70:59:1b:7d:65:
20:38:db:52:e4:0e:8f:ea:7c:8e:89:0e:cb:19:fc:
c5:6d:25:cc:45:44:08:ee:7a:39:7c:a8:b8:8d:59:
02:a6:19:8b:88:db:c6:8e:4b:c1:ff:bd:30:a2:0e:
81:72:08:5f:9a:09:19:3d:d7:5b:57:2b:8f:f2:31:
dc:1a:df:51:84:93:0f:75:c7:b8:84:65:d7:87:60:
b2:3b:07:40:63:bf:80:44:82:5f:e6:2f:36:33:30:
b3:c2:a0:59:6b:43:6a:56:7f:e9:0b:0f:0c:5b:42:
ce:1c:0c:e8:93:10:2d:64:c9:a3:3a:a7:93:86:84:
ba:ed:44:db:f5:71:cb:64:a3:bc:40:e0:95:61:78:
a5:d9:27:ed:c6:56:96:84:7a:37:80:86:d3:c9:23:
29:f0:3a:f1:ca:a8:3d:7d:87:88:ba:2b:02:d1:43:
69:30:5c:01:a4:ff:6b:de:10:1c:c4:06:b8:66:1b:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:97:CC:FA:C8:EF:81:D2:8F:F1:49:94:ED:72:48:68:C6:9F:24:CB
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/fpfM-sjvgdKP8UmU7XJIaMafJMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.160.0/20
37.17.208.0/20
78.108.128.0/20
80.246.192.0/20
80.255.240.0/20
81.21.136.0/21
81.30.32.0/20
85.10.171.0/24
91.142.240.0-91.142.251.255
141.255.176.0/22
171.33.128.0/21
176.74.224.0/19
185.15.248.0/22
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:4cb8::/29
2a00:c080:101c::/48
Signature Algorithm: sha256WithRSAEncryption
4b:da:c6:f8:e3:a0:b1:2f:ca:5d:ab:62:f9:c0:eb:ae:82:2a:
9c:85:a2:a4:2c:0b:78:ce:09:ac:37:bb:b0:43:dd:41:2a:49:
ad:fb:cf:63:5c:6e:27:8a:a2:4f:68:4e:4a:06:05:b4:79:15:
3d:d0:d2:69:0a:3e:df:31:7b:3c:24:a3:ea:f5:b8:b0:bb:60:
47:f1:07:2b:71:ea:e5:69:80:fc:fa:9d:14:f6:17:7d:1d:fd:
de:af:6e:72:bd:fa:1b:cd:59:42:eb:b5:dc:48:3c:a7:be:16:
7e:1a:b9:5e:36:4c:d1:1e:ac:ea:95:28:0e:c4:5f:61:b6:64:
b0:6b:3f:29:04:be:fa:9a:e3:f8:b7:e6:4c:b4:f3:c6:cd:a0:
b0:41:9a:e9:24:1f:9b:ed:24:06:8c:f1:4b:89:ae:b5:1b:78:
ac:74:bd:07:94:7d:c5:19:91:f5:5c:3c:94:6e:5b:d1:55:8c:
96:9e:07:f8:76:0e:d1:da:5e:d4:55:3d:72:82:36:ee:83:69:
92:79:77:40:00:7b:e9:aa:38:d4:44:c5:b2:fa:96:69:64:10:
4c:0e:cc:bf:d4:10:49:1f:45:27:95:30:7e:9c:76:52:59:7e:
5d:32:d9:e2:b4:6d:26:b9:d2:d5:53:6e:34:ef:da:e8:28:31:
f3:8f:4c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:14 2026 by rpki-client