Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/fNvEzSEZKEMOwP2s2py-1jV2XWs.roa
File: fNvEzSEZKEMOwP2s2py-1jV2XWs.roa (raw, json)
Hash identifier: DzJ6MjZrbHAzhogqcdiMMaN3xhM/QOk2hRYlj+2DyQ8=
Subject key identifier: 7C:DB:C4:CD:21:19:28:43:0E:C0:FD:AC:DA:9C:BE:D6:35:76:5D:6B
Certificate issuer: /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial: 01A1AC727304FAE35D4784B2BB7B23DF0D87
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/fNvEzSEZKEMOwP2s2py-1jV2XWs.roa
Signing time: Thu 05 Nov 2026 16:02:23 +0000
ROA not before: Thu 05 Nov 2026 16:02:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201602
IP address blocks: 31.187.104.0/21 maxlen: 24
134.19.168.0/21 maxlen: 24
185.66.24.0/22 maxlen: 24
185.203.104.0/22 maxlen: 24
185.241.144.0/22 maxlen: 24
188.241.140.0/23 maxlen: 24
2a02:e380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:72:73:04:fa:e3:5d:47:84:b2:bb:7b:23:df:0d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Validity
Not Before: Nov 5 16:02:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cdbc4cd211928430ec0fdacda9cbed635765d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:a8:14:23:f3:97:02:4d:a9:59:c3:93:38:
d5:1e:fc:23:41:fc:ba:5d:07:56:b7:79:49:c2:a3:
e8:60:70:b9:9e:f0:f6:0e:be:00:52:bb:71:94:ea:
45:c9:8d:99:b0:0e:92:b5:8d:87:b5:c9:d4:b6:be:
31:a8:24:21:a8:01:bf:fa:68:39:05:6d:bc:7e:3c:
a2:44:20:a7:21:3f:11:11:82:5c:ff:4b:41:61:7e:
c2:a7:33:3e:a1:40:6f:0e:4d:7b:1c:7a:25:0d:54:
fd:08:31:40:0f:7e:e4:1b:57:dd:41:3a:b1:c8:cb:
70:01:94:5d:51:ec:56:bc:56:68:e3:fb:06:59:45:
31:46:a8:36:19:7f:29:b8:22:fd:02:cc:02:90:0a:
76:f5:32:c1:9c:74:18:c8:b9:68:0a:bd:4c:17:a2:
a7:4b:9e:ea:20:00:c8:7a:66:29:e1:9f:b0:e4:de:
04:12:08:bb:79:d4:c8:16:ec:af:bd:1a:23:e0:93:
c8:55:34:2d:61:43:a6:52:f2:f6:f8:e7:c7:e2:00:
e9:21:65:6a:8e:bb:28:bc:82:eb:99:b8:86:88:a5:
ea:d4:df:d9:60:dc:83:c6:e5:a5:78:6a:bf:70:9b:
f8:c4:7f:ba:22:44:70:b8:e7:1d:33:f7:57:28:65:
88:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DB:C4:CD:21:19:28:43:0E:C0:FD:AC:DA:9C:BE:D6:35:76:5D:6B
X509v3 Authority Key Identifier:
keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/fNvEzSEZKEMOwP2s2py-1jV2XWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.104.0/21
134.19.168.0/21
185.66.24.0/22
185.203.104.0/22
185.241.144.0/22
188.241.140.0/23
IPv6:
2a02:e380::/29
Signature Algorithm: sha256WithRSAEncryption
90:de:c5:21:f1:b2:c6:1c:07:62:65:fa:1f:c3:21:31:ad:9a:
ce:7a:bf:f3:b7:50:5e:9d:f4:2a:64:a4:83:5e:f5:b0:4f:da:
1b:16:63:80:1e:be:3f:43:2a:a0:9a:af:31:1f:26:09:d6:bf:
19:0e:0e:46:85:37:28:c0:ee:89:d0:77:1c:6c:3b:37:8e:24:
26:c4:7e:03:0f:87:6a:94:16:67:25:37:f3:bc:6c:33:4e:29:
fb:1d:46:86:20:43:01:7f:3a:5c:1c:4c:59:5e:d8:fd:a5:bc:
b3:22:de:ea:0e:56:77:05:d2:56:1c:0a:30:7c:13:87:f1:e3:
2e:1e:59:63:93:5d:ce:06:27:71:3d:64:4b:8b:55:3b:f9:04:
25:7b:5a:09:04:3b:56:d9:a6:0c:98:3a:df:26:71:80:64:46:
9c:00:d3:2b:a3:ef:f1:04:3f:89:2e:1a:57:73:07:d2:36:b2:
e1:c6:63:a4:4c:60:37:d4:94:36:a7:f7:d9:18:5b:c5:ce:6d:
ca:97:f7:ea:75:18:a8:2f:0a:68:7e:ec:f5:65:ed:8a:8f:7e:
56:98:2f:ca:5a:2d:a0:8a:d9:5f:d3:13:44:23:aa:55:b5:ec:
4a:7a:87:34:d5:88:74:29:53:4b:c0:c0:af:87:82:09:07:f5:
6a:51:a0:dd
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAaGscnME+uNdR4Syu3sj3w2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTYxOGE2MTk1ZjFlY2FjYjA4NWNlZDNiMGExYTE3YzYy
YTJjZmEwHhcNMjYxMTA1MTYwMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2RiYzRjZDIxMTkyODQzMGVjMGZkYWNkYTljYmVkNjM1NzY1ZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09uoFCPzlwJNqVnDkzjVHvwjQfy6
XQdWt3lJwqPoYHC5nvD2Dr4AUrtxlOpFyY2ZsA6StY2HtcnUtr4xqCQhqAG/+mg5
BW28fjyiRCCnIT8REYJc/0tBYX7CpzM+oUBvDk17HHolDVT9CDFAD37kG1fdQTqx
yMtwAZRdUexWvFZo4/sGWUUxRqg2GX8puCL9AswCkAp29TLBnHQYyLloCr1MF6Kn
S57qIADIemYp4Z+w5N4EEgi7edTIFuyvvRoj4JPIVTQtYUOmUvL2+OfH4gDpIWVq
jrsovILrmbiGiKXq1N/ZYNyDxuWleGq/cJv4xH+6IkRwuOcdM/dXKGWIiQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFHzbxM0hGShDDsD9rNqcvtY1dl1rMB8GA1UdIwQY
MBaAFAVWGKYZXx7Kywhc7TsKGhfGKiz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2Qt
NWFlNWJjYTZmNDhjLzEvZk52RXpTRVpLRU1Pd1AyczJweS0xalYyWFdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2QtNWFlNWJjYTZmNDhj
LzEvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDH7toAwQD
hhOoAwQCuUIYAwQCuctoAwQCufGQAwQBvPGMMA0EAgACMAcDBQMqAuOAMA0GCSqG
SIb3DQEBCwUAA4IBAQCQ3sUh8bLGHAdiZfofwyExrZrOer/zt1BenfQqZKSDXvWw
T9obFmOAHr4/Qyqgmq8xHyYJ1r8ZDg5GhTcowO6J0HccbDs3jiQmxH4DD4dqlBZn
JTfzvGwzTin7HUaGIEMBfzpcHExZXtj9pbyzIt7qDlZ3BdJWHAowfBOH8eMuHllj
k13OBidxPWRLi1U7+QQle1oJBDtW2aYMmDrfJnGAZEacANMro+/xBD+JLhpXcwfS
NrLhxmOkTGA31JQ2p/fZGFvFzm3Kl/fqdRioLwpofuz1Ze2Kj35WmC/KWi2gitlf
0xNEI6pVtexKeoc01Yh0KVNLwMCvh4IJB/VqUaDd
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:48:38 2026 by rpki-client