Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/fPuins3lFUZ1jY8d9PDJqkylDns.roa
File: fPuins3lFUZ1jY8d9PDJqkylDns.roa (raw, json)
Hash identifier: AByQCiojVMPZv7xB+mvq4iwdIkbNNsl1NPcp0f8rA/A=
Subject key identifier: 7C:FB:A2:9E:CD:E5:15:46:75:8D:8F:1D:F4:F0:C9:AA:4C:A5:0E:7B
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 019C9417B4B2F299686151FECC1B76922AC5
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/fPuins3lFUZ1jY8d9PDJqkylDns.roa
Signing time: Wed 25 Feb 2026 09:18:27 +0000
ROA not before: Wed 25 Feb 2026 09:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 70.40.136.0/21 maxlen: 21
70.40.136.0/24 maxlen: 24
70.40.137.0/24 maxlen: 24
70.40.138.0/24 maxlen: 24
70.40.139.0/24 maxlen: 24
70.40.140.0/24 maxlen: 24
70.40.141.0/24 maxlen: 24
70.40.142.0/24 maxlen: 24
70.40.143.0/24 maxlen: 24
104.247.170.0/24 maxlen: 24
104.247.171.0/24 maxlen: 24
104.247.172.0/24 maxlen: 24
104.247.174.0/24 maxlen: 24
104.247.175.0/24 maxlen: 24
104.247.176.0/24 maxlen: 24
104.247.177.0/24 maxlen: 24
104.247.178.0/24 maxlen: 24
104.247.180.0/24 maxlen: 24
104.247.181.0/24 maxlen: 24
104.247.182.0/24 maxlen: 24
104.247.183.0/24 maxlen: 24
104.247.184.0/24 maxlen: 24
104.247.185.0/24 maxlen: 24
104.247.186.0/24 maxlen: 24
104.247.187.0/24 maxlen: 24
104.247.188.0/24 maxlen: 24
104.247.189.0/24 maxlen: 24
104.247.190.0/24 maxlen: 24
104.247.191.0/24 maxlen: 24
185.73.84.0/24 maxlen: 24
185.73.129.0/24 maxlen: 24
185.73.130.0/24 maxlen: 24
185.73.131.0/24 maxlen: 24
185.137.215.0/24 maxlen: 24
2a03:a5a0:1::/48 maxlen: 48
2a03:a5a0:2::/48 maxlen: 48
2a03:a5a0:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:17:b4:b2:f2:99:68:61:51:fe:cc:1b:76:92:2a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Feb 25 09:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cfba29ecde51546758d8f1df4f0c9aa4ca50e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:be:e2:ef:ec:16:0e:96:71:b3:40:54:ba:
d2:45:90:2e:e6:ad:95:e2:84:5a:08:7f:ad:e6:47:
8b:68:0f:d9:a8:e7:89:e7:9c:bb:3b:1a:1c:15:34:
bf:ea:19:bd:d3:7b:2f:bf:19:00:15:b0:7d:4e:a5:
01:59:ce:02:75:b7:26:84:05:f1:0a:e5:0c:15:44:
cd:f6:25:2d:2b:16:47:6f:6b:7b:f2:e5:2e:b2:21:
33:66:5e:eb:1c:0e:f3:f3:91:74:0a:5c:ec:49:e7:
ad:e6:25:47:a1:1c:f6:e8:7a:26:3a:e9:81:9a:1d:
5b:cd:8f:98:ba:56:e1:16:d3:62:0f:52:57:1d:b0:
c0:6f:c1:16:0e:b4:97:7c:ac:f2:7f:10:43:b8:e9:
30:30:1f:46:c9:9d:d9:bc:0c:f7:cd:57:7a:10:78:
15:69:0a:a7:97:8f:99:97:95:8c:96:73:ac:7d:c9:
25:30:2d:8c:69:67:b4:22:c9:b1:09:23:a7:7b:d4:
ba:60:9d:9c:ff:ea:49:57:fc:91:e5:8b:32:59:22:
05:f3:e6:ee:6d:37:9f:7a:0d:6c:db:11:a9:cc:af:
6e:55:e6:09:b9:a6:9a:1f:f0:61:20:43:35:a4:60:
7f:21:ee:8d:12:a1:ab:8d:fe:a4:83:19:4f:98:c6:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FB:A2:9E:CD:E5:15:46:75:8D:8F:1D:F4:F0:C9:AA:4C:A5:0E:7B
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/fPuins3lFUZ1jY8d9PDJqkylDns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.40.136.0/21
104.247.170.0-104.247.172.255
104.247.174.0-104.247.178.255
104.247.180.0-104.247.191.255
185.73.84.0/24
185.73.129.0-185.73.131.255
185.137.215.0/24
IPv6:
2a03:a5a0:1::-2a03:a5a0:2:ffff:ffff:ffff:ffff:ffff
2a03:a5a0:4::/48
Signature Algorithm: sha256WithRSAEncryption
06:c4:6a:c7:9a:02:55:7a:6c:25:b0:95:a3:29:6b:32:5c:b8:
9c:02:a7:72:d5:d6:68:02:c2:e9:92:7f:13:f8:00:d1:d5:dd:
c4:2b:8d:39:af:5f:a6:9d:5a:a3:17:44:c3:21:3a:7b:86:9d:
45:22:af:b9:f8:5e:0a:c2:d5:1a:75:d9:f5:db:10:22:c6:33:
28:37:e7:66:9e:a8:b4:f8:ef:3c:b6:57:74:d6:1c:fa:91:8d:
52:76:6b:a4:0b:5e:99:72:cf:41:91:dd:7b:50:8d:81:67:35:
d1:ee:a7:45:da:cc:c1:4c:0b:f0:b3:48:c6:7a:83:1f:f5:b4:
a9:16:b2:15:ee:f3:bd:bd:04:e5:f2:80:73:56:71:cc:2e:06:
11:ad:eb:b9:31:09:8e:8d:19:9f:0c:c1:5a:aa:05:ab:9d:76:
3b:e9:12:86:c5:98:51:9b:ab:c1:cc:d8:f5:fd:ba:c4:8c:10:
a9:da:de:eb:90:6f:af:08:40:f2:ff:ee:df:f9:81:7d:c9:b0:
b9:d4:fd:2f:0d:51:75:98:f1:4b:21:b5:e8:34:c7:c3:32:3c:
28:12:11:ce:3a:f3:1e:b2:13:c8:33:86:8b:b4:17:1a:f1:e1:
e6:7c:15:45:01:3b:f5:b9:28:2a:15:98:1c:e3:0d:59:e4:7d:
a0:92:45:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:32 2026 by rpki-client