Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/FVCULJqJnO29FxFeBFeyyVnr7Ns.roa
File: FVCULJqJnO29FxFeBFeyyVnr7Ns.roa (raw, json)
Hash identifier: 6Z35fsP0zYlPaoYpAQrwcDgpNfeC7fD0dws0h5hkdFE=
Subject key identifier: 15:50:94:2C:9A:89:9C:ED:BD:17:11:5E:04:57:B2:C9:59:EB:EC:DB
Certificate issuer: /CN=1036d59074fef412115f428b978222e47b8219cc
Certificate serial: 01A0C7891E679FA2CEBF146F1C6F67C709D4
Authority key identifier: 10:36:D5:90:74:FE:F4:12:11:5F:42:8B:97:82:22:E4:7B:82:19:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/FVCULJqJnO29FxFeBFeyyVnr7Ns.roa
Signing time: Tue 22 Sep 2026 05:14:07 +0000
ROA not before: Tue 22 Sep 2026 05:14:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208771
IP address blocks: 91.231.142.0/23 maxlen: 23
2a04:8280::/36 maxlen: 36
2a04:8280:1000::/36 maxlen: 36
2a04:8280:2000::/36 maxlen: 36
2a04:8280:3000::/36 maxlen: 36
2a04:8280:4000::/36 maxlen: 36
2a04:8280:5000::/36 maxlen: 36
2a04:8280:6000::/36 maxlen: 36
2a04:8280:7000::/36 maxlen: 36
2a04:8280:8000::/36 maxlen: 36
2a04:8280:9000::/36 maxlen: 36
2a04:8280:a000::/36 maxlen: 36
2a04:8280:b000::/36 maxlen: 36
2a04:8280:c000::/36 maxlen: 36
2a04:8280:d000::/36 maxlen: 36
2a04:8280:e000::/36 maxlen: 36
2a04:8280:f000::/36 maxlen: 36
2a04:8281::/36 maxlen: 36
2a04:8281:1000::/36 maxlen: 36
2a04:8281:2000::/36 maxlen: 36
2a04:8281:3000::/36 maxlen: 36
2a04:8281:4000::/36 maxlen: 36
2a04:8281:5000::/36 maxlen: 36
2a04:8281:6000::/36 maxlen: 36
2a04:8281:7000::/36 maxlen: 36
2a04:8281:8000::/36 maxlen: 36
2a04:8281:9000::/36 maxlen: 36
2a04:8281:a000::/36 maxlen: 36
2a04:8281:b000::/36 maxlen: 36
2a04:8281:c000::/36 maxlen: 36
2a04:8281:d000::/36 maxlen: 36
2a04:8281:e000::/36 maxlen: 36
2a04:8281:f000::/36 maxlen: 36
2a04:8282::/36 maxlen: 36
2a04:8282:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:89:1e:67:9f:a2:ce:bf:14:6f:1c:6f:67:c7:09:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1036d59074fef412115f428b978222e47b8219cc
Validity
Not Before: Sep 22 05:14:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1550942c9a899cedbd17115e0457b2c959ebecdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:c2:4f:22:4d:62:0f:9e:88:74:65:f8:eb:
06:ff:2b:ac:37:7d:a0:13:7e:4a:22:13:4d:90:49:
c3:94:7a:e0:ea:9a:32:3d:14:7e:54:48:18:c5:d2:
54:b8:91:d7:69:f3:27:ce:5e:ff:a1:18:0e:19:b9:
32:63:7c:55:f6:7f:ef:39:8b:ca:c9:a6:62:19:86:
87:3c:09:e0:28:3b:83:d0:72:31:aa:4e:3c:a5:b0:
4e:b3:97:24:f4:d8:8f:c4:b0:2e:b2:4f:9c:70:d0:
33:75:82:a4:f2:9a:8d:b7:17:e1:ff:fa:6b:d7:f4:
f8:1a:04:ab:4d:af:2c:e9:e1:25:2a:f3:ec:bb:09:
54:c3:35:6c:ca:82:3f:7c:16:92:a5:e3:83:61:a8:
5a:95:67:4d:cc:10:ca:c1:b7:ce:87:43:ae:38:fe:
76:cc:1f:ec:d2:f3:89:24:e6:e0:40:a2:7e:2c:92:
69:70:d3:e2:4c:82:7f:91:26:17:e1:9d:e3:71:8c:
4f:5a:f7:64:5a:b5:e3:49:41:84:fa:37:25:42:c4:
42:86:bb:47:ad:ed:d3:41:87:db:2b:4a:c0:c7:4f:
23:09:70:94:6c:25:c8:76:60:e8:36:81:4c:a6:78:
4b:db:64:b2:5a:73:ae:61:6d:c4:4b:2c:58:d4:b7:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:50:94:2C:9A:89:9C:ED:BD:17:11:5E:04:57:B2:C9:59:EB:EC:DB
X509v3 Authority Key Identifier:
keyid:10:36:D5:90:74:FE:F4:12:11:5F:42:8B:97:82:22:E4:7B:82:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/FVCULJqJnO29FxFeBFeyyVnr7Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.142.0/23
IPv6:
2a04:8280::-2a04:8282:1fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1a:eb:49:6d:ac:e7:6f:05:d2:1a:d4:4d:2d:43:0e:22:1b:d5:
c2:af:95:d1:0a:52:c2:52:db:0b:c8:84:ab:cd:da:ef:8b:86:
b8:34:84:1a:68:1a:1c:b4:41:5c:9b:b0:69:c9:3a:20:6e:74:
a2:cb:3a:87:5f:c3:eb:fc:c4:d4:aa:eb:db:ea:bb:36:3c:c8:
78:5c:49:19:99:05:dd:1f:25:c6:06:38:60:8f:09:49:ae:5b:
b2:c6:ef:30:ba:0e:c5:f8:f4:95:da:29:a5:8d:3e:a1:dc:16:
1f:0c:08:b6:dd:43:31:ba:89:aa:a9:d9:6b:6d:dc:73:a3:14:
85:e4:55:68:b4:cb:ea:69:d8:f2:4f:18:2a:fb:1f:9b:26:a7:
34:00:f6:02:58:e2:33:9e:4b:4f:fa:b3:3f:76:41:08:2f:ef:
e9:ee:1e:8c:ab:3f:93:cb:86:be:b5:ff:6f:96:2c:f9:46:a7:
f6:d2:3b:52:c7:a8:c9:c7:1d:ec:22:e6:83:68:23:cf:d0:d3:
bb:e6:58:dc:9a:b4:fd:19:dc:0b:61:d0:16:a2:96:61:e7:ef:
05:ef:f9:7a:13:9f:b6:ce:2c:8d:1b:7b:d3:f2:c2:4a:82:76:
7c:94:90:e7:a5:11:6a:19:b8:28:03:e7:74:9f:d0:7d:b2:61:
6b:80:76:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:27:10 2026 by rpki-client