Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/FONMbE7JQ_555_AhVQTIUm9lk_Y.roa
File: FONMbE7JQ_555_AhVQTIUm9lk_Y.roa (raw, json)
Hash identifier: GG4U0G3QeJ4kcb/w+WXTiBuOwG5JvNB4bAGnAM53Suc=
Subject key identifier: 14:E3:4C:6C:4E:C9:43:FE:79:E7:F0:21:55:04:C8:52:6F:65:93:F6
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A063DFB53B4D6D837A1A0E9CAA8F17BD0F
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/FONMbE7JQ_555_AhVQTIUm9lk_Y.roa
Signing time: Wed 02 Sep 2026 20:46:40 +0000
ROA not before: Wed 02 Sep 2026 20:46:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211851
IP address blocks: 130.78.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:df:b5:3b:4d:6d:83:7a:1a:0e:9c:aa:8f:17:bd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Sep 2 20:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14e34c6c4ec943fe79e7f0215504c8526f6593f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:27:d8:c4:0d:1e:94:9d:5d:b0:d5:08:70:
57:e1:4c:5b:4e:d0:56:1f:61:21:2b:20:89:35:4c:
f3:44:2a:29:ce:f8:6e:13:a2:86:0a:18:11:e9:fa:
f2:e2:6b:35:c1:14:96:a4:82:2c:24:35:dd:e1:32:
d6:a2:5d:24:72:25:40:b0:02:86:9f:57:6f:c2:c5:
bb:e6:87:5b:a0:78:28:44:1a:06:5d:d4:2f:eb:e8:
5b:df:d0:43:46:ac:32:02:a4:a9:c7:e6:0f:a2:30:
0a:6f:b9:0b:10:87:e4:57:29:ce:f9:c9:47:78:b9:
3b:54:b4:76:8a:f6:a8:8d:de:86:b9:03:c7:d9:30:
19:7a:f0:b0:bc:49:9f:8e:eb:8c:f1:c6:ee:e0:10:
2d:87:d4:a9:6a:a2:60:e8:d6:86:0c:38:0c:6a:b9:
9c:62:5a:28:b8:ed:83:bf:61:93:7f:38:9d:e0:bd:
14:13:cf:5a:cf:87:1f:61:6a:a8:3f:be:0f:65:f5:
78:df:40:f6:e8:0c:cc:9d:1c:19:f4:a1:b8:19:bf:
5e:4e:97:aa:8c:63:4a:99:a1:ae:83:f7:84:a5:ff:
5f:2d:39:40:71:26:1b:69:82:11:1f:8d:fa:df:b7:
71:08:07:11:ff:22:e2:68:33:bd:0a:53:da:c2:0d:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E3:4C:6C:4E:C9:43:FE:79:E7:F0:21:55:04:C8:52:6F:65:93:F6
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/FONMbE7JQ_555_AhVQTIUm9lk_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.187.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5d:8d:a6:cd:12:30:37:ea:89:91:ac:de:4e:24:e6:2f:c4:
6f:c2:a2:3e:0e:cf:b3:c7:a5:af:41:81:13:3a:2d:63:2f:d1:
45:51:0a:d2:ea:c2:86:a6:31:1e:ff:e0:a5:18:2c:d8:dc:c7:
e0:1e:20:b1:87:09:87:cb:55:50:ca:a7:09:5c:81:c7:e2:e2:
fc:cf:6c:a5:50:ac:ae:49:a0:f1:c9:34:de:c6:63:08:18:21:
37:91:32:6e:a9:a0:71:98:2d:82:c5:97:42:1e:65:95:b7:b2:
5d:f6:c9:b0:c7:f5:26:19:0c:85:ee:33:08:2e:35:1f:36:15:
6e:ce:9d:a3:1d:6a:de:5f:54:e2:fe:1d:72:bc:b1:b4:1b:5b:
93:56:34:2e:68:77:6c:12:d6:be:a3:dd:9a:ae:ab:59:14:3c:
ab:5e:21:fd:bc:06:cf:07:bf:bb:fa:5b:54:96:2d:50:8f:40:
01:76:d4:7a:d6:37:91:b5:cf:cf:c5:7c:7c:26:3e:4a:28:75:
11:12:d9:ae:2a:6c:e8:e5:80:ab:b8:f3:7a:5b:fc:a5:db:13:
77:57:68:67:b2:12:7a:85:15:54:9d:72:2e:c4:af:3a:ae:2c:
b5:ee:81:59:f1:7e:5c:b4:63:d7:4c:cc:ea:23:61:52:4d:a3:
81:0f:09:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBj37U7TW2DehoOnKqPF70PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl
MjlkMjUwHhcNMjYwOTAyMjA0NjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGUzNGM2YzRlYzk0M2ZlNzllN2YwMjE1NTA0Yzg1MjZmNjU5M2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAcn2MQNHpSdXbDVCHBX4UxbTtBW
H2EhKyCJNUzzRCopzvhuE6KGChgR6fry4ms1wRSWpIIsJDXd4TLWol0kciVAsAKG
n1dvwsW75odboHgoRBoGXdQv6+hb39BDRqwyAqSpx+YPojAKb7kLEIfkVynO+clH
eLk7VLR2ivaojd6GuQPH2TAZevCwvEmfjuuM8cbu4BAth9SpaqJg6NaGDDgMarmc
YloouO2Dv2GTfzid4L0UE89az4cfYWqoP74PZfV430D26AzMnRwZ9KG4Gb9eTpeq
jGNKmaGug/eEpf9fLTlAcSYbaYIRH43637dxCAcR/yLiaDO9ClPawg2UVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBTjTGxOyUP+eefwIVUEyFJvZZP2MB8GA1UdIwQY
MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct
NWNmNTZlZTQzNWIzLzEvRk9OTWJFN0pRXzU1NV9BaFZRVElVbTlsa19ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz
LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgk67MA0G
CSqGSIb3DQEBCwUAA4IBAQCEXY2mzRIwN+qJkazeTiTmL8RvwqI+Ds+zx6WvQYET
Oi1jL9FFUQrS6sKGpjEe/+ClGCzY3MfgHiCxhwmHy1VQyqcJXIHH4uL8z2ylUKyu
SaDxyTTexmMIGCE3kTJuqaBxmC2CxZdCHmWVt7Jd9smwx/UmGQyF7jMILjUfNhVu
zp2jHWreX1Ti/h1yvLG0G1uTVjQuaHdsEta+o92arqtZFDyrXiH9vAbPB7+7+ltU
li1Qj0ABdtR61jeRtc/PxXx8Jj5KKHUREtmuKmzo5YCruPN6W/yl2xN3V2hnshJ6
hRVUnXIuxK86riy17oFZ8X5ctGPXTMzqI2FSTaOBDwlS
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:35:51 2026 by rpki-client