Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/FblgizDhqR052b7Rb7HxWYg2JDU.roa
File: FblgizDhqR052b7Rb7HxWYg2JDU.roa (raw, json)
Hash identifier: ukjre2pKx9ZsNQN9DOZTFUoYV7Iqwog22EFIjKbpS9Y=
Subject key identifier: 15:B9:60:8B:30:E1:A9:1D:39:D9:BE:D1:6F:B1:F1:59:88:36:24:35
Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial: 019C95FFAD6F5A2535C8C884E62B25F1C0D4
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/FblgizDhqR052b7Rb7HxWYg2JDU.roa
Signing time: Wed 25 Feb 2026 18:11:27 +0000
ROA not before: Wed 25 Feb 2026 18:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201730
IP address blocks: 37.221.88.0/22 maxlen: 24
37.221.88.0/24 maxlen: 24
37.221.89.0/24 maxlen: 24
37.221.90.0/24 maxlen: 24
37.221.91.0/24 maxlen: 24
185.65.92.0/22 maxlen: 22
185.65.92.0/24 maxlen: 24
185.65.93.0/24 maxlen: 24
185.65.94.0/24 maxlen: 24
185.65.95.0/24 maxlen: 24
185.78.100.0/22 maxlen: 22
185.78.100.0/24 maxlen: 24
185.78.101.0/24 maxlen: 24
185.78.102.0/24 maxlen: 24
185.78.103.0/24 maxlen: 24
185.138.244.0/22 maxlen: 22
185.138.244.0/24 maxlen: 24
185.138.245.0/24 maxlen: 24
185.138.246.0/24 maxlen: 24
185.138.247.0/24 maxlen: 24
185.146.148.0/22 maxlen: 22
185.146.148.0/24 maxlen: 24
185.146.149.0/24 maxlen: 24
185.146.150.0/24 maxlen: 24
185.146.151.0/24 maxlen: 24
194.169.252.0/24 maxlen: 24
2a03:1aa0::/32 maxlen: 36
2a05:5fc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:ff:ad:6f:5a:25:35:c8:c8:84:e6:2b:25:f1:c0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Validity
Not Before: Feb 25 18:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15b9608b30e1a91d39d9bed16fb1f15988362435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:dd:54:32:48:69:36:1f:e1:49:ee:41:f5:
8d:06:8c:a7:87:1e:46:1e:77:6c:fb:2a:cc:df:81:
c8:a7:05:c4:20:d9:87:14:ea:5b:65:15:f4:1c:df:
ef:44:d9:5a:6a:e5:f3:4d:f0:4b:24:e7:d3:41:fd:
30:aa:cf:a5:6c:a5:23:67:fc:73:29:fb:b6:20:de:
da:56:c5:11:a4:be:77:25:8a:a4:4d:fb:b4:e7:50:
e7:ea:94:74:a9:5c:1f:98:ff:9c:30:7d:2d:58:2c:
ff:51:0f:3e:21:30:e1:8f:52:a3:b0:e2:21:76:bb:
b2:c2:00:15:91:ca:75:47:0a:b0:6c:c9:ce:4f:a3:
b2:dc:56:1d:17:13:fe:cd:2a:fc:cf:39:bb:dd:5c:
af:19:b0:e8:eb:83:fd:47:81:eb:ee:8d:ec:23:91:
33:04:15:34:16:c7:cd:df:78:33:65:79:b2:d9:8e:
19:a7:ac:44:d3:9f:6b:00:77:56:67:1e:4d:81:ab:
6b:35:cd:e3:85:2a:e3:48:d0:f3:dc:de:93:36:74:
f5:b3:0b:09:9c:cc:19:a9:cc:da:21:ba:d8:50:66:
f9:90:09:99:67:1a:4b:13:99:04:65:85:71:9d:1b:
eb:c6:ff:03:f9:ec:1e:9a:cc:24:46:32:a4:33:50:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:60:8B:30:E1:A9:1D:39:D9:BE:D1:6F:B1:F1:59:88:36:24:35
X509v3 Authority Key Identifier:
keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/FblgizDhqR052b7Rb7HxWYg2JDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.88.0/22
185.65.92.0/22
185.78.100.0/22
185.138.244.0/22
185.146.148.0/22
194.169.252.0/24
IPv6:
2a03:1aa0::/32
2a05:5fc1::/32
Signature Algorithm: sha256WithRSAEncryption
24:1a:40:bc:ed:5c:b3:d7:ec:a0:07:dc:0c:2b:0d:ed:fc:ed:
e2:0b:63:aa:1a:6f:21:63:96:0d:1d:86:8b:c7:09:0c:a1:f4:
fb:19:db:be:67:50:4f:65:75:6c:ac:ee:9e:77:06:1f:85:5a:
06:8c:8d:0c:65:90:76:f1:9d:89:da:4a:d6:06:16:89:cb:40:
1c:bc:60:bb:9e:09:5b:59:40:97:02:6c:e9:76:9d:f1:2c:b5:
99:e2:ee:75:4e:d7:8f:0c:ea:50:8e:34:0e:04:5f:1f:20:0a:
51:9a:81:39:26:ee:c7:36:15:b3:41:87:15:63:aa:e2:d4:c3:
69:5d:3b:ca:46:17:c5:46:1a:1f:d2:78:38:08:f2:3a:14:ec:
4e:1f:fb:da:c9:eb:91:76:32:58:15:e7:46:47:ee:54:1a:48:
53:80:1b:15:5e:99:e9:bc:d4:8b:c8:32:ce:7c:d4:c8:ba:a0:
b8:8f:df:b2:dd:53:22:94:69:4f:ae:b9:d0:1f:31:61:fb:8b:
66:5c:36:25:75:9b:d7:3e:cd:b4:a3:a0:70:7e:4a:f3:38:5e:
ab:35:a2:4c:2b:51:21:8a:db:55:ba:74:8d:03:4c:22:24:1a:
a0:d4:eb:5a:6a:5c:b4:50:84:43:80:1c:24:75:43:d5:6c:c2:
8c:ed:d4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:07:35 2026 by rpki-client