Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/fiAC-nRFG3j7z6sAPBOW0WWmbbQ.roa
File: fiAC-nRFG3j7z6sAPBOW0WWmbbQ.roa (raw, json)
Hash identifier: ymlpT421LeYxNgWZaTRLoVGcyg20fikWOGjrcNBgr1I=
Subject key identifier: 7E:20:02:FA:74:45:1B:78:FB:CF:AB:00:3C:13:96:D1:65:A6:6D:B4
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 01A0A0862EC80FF1EDACD3C33A26E0FFE45C
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/fiAC-nRFG3j7z6sAPBOW0WWmbbQ.roa
Signing time: Mon 14 Sep 2026 15:25:43 +0000
ROA not before: Mon 14 Sep 2026 15:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 85.155.130.0/24 maxlen: 24
85.155.131.0/24 maxlen: 24
85.155.132.0/24 maxlen: 24
209.35.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:86:2e:c8:0f:f1:ed:ac:d3:c3:3a:26:e0:ff:e4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Sep 14 15:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e2002fa74451b78fbcfab003c1396d165a66db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:80:5a:6e:e2:29:cd:98:c8:33:83:be:4c:
84:e6:0e:7e:ab:f8:2d:0e:dc:be:a8:78:ec:1c:be:
47:bc:4b:c1:f3:6c:e1:d3:ca:6b:4b:a6:77:71:99:
49:6f:d3:bb:23:f7:45:51:dc:5c:8c:51:7e:d4:65:
2d:ce:cf:06:31:bb:7b:38:2e:b4:06:bd:03:d0:9b:
af:15:0a:d2:c4:4c:11:1d:2a:5a:e4:13:7a:b5:f0:
76:2e:ac:08:24:e1:6b:49:85:5f:b8:2f:48:95:00:
8a:01:89:c8:f5:88:5d:e2:0e:2f:d7:60:3d:4c:7d:
ef:92:61:7b:37:38:e3:16:83:71:f1:46:bd:82:ea:
cf:71:fa:0b:8b:ef:1d:01:27:34:e3:94:0f:ac:72:
a9:00:a6:f4:74:e2:5c:d4:62:d4:43:45:5e:4a:9b:
a8:88:a3:76:82:4a:3d:d2:17:ce:56:97:12:e6:2e:
e1:bf:cd:5f:36:12:99:f7:65:8e:42:b6:23:40:9d:
44:69:62:16:e5:75:8d:1b:66:63:bc:47:d3:ce:08:
b4:79:c2:cc:a1:b9:c2:7e:c6:ef:d6:a0:4f:0f:43:
2a:c1:f2:07:5d:1c:0d:2f:75:de:67:d7:30:0b:b7:
75:b8:b0:3c:39:6c:42:e9:3a:d5:c7:a5:08:6e:10:
fb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:20:02:FA:74:45:1B:78:FB:CF:AB:00:3C:13:96:D1:65:A6:6D:B4
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/fiAC-nRFG3j7z6sAPBOW0WWmbbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.130.0-85.155.132.255
209.35.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c6:2f:82:8d:8f:6c:86:d0:ca:0d:85:73:54:00:31:01:05:
10:e0:a0:30:89:8e:13:1a:60:d7:6e:47:2d:38:a3:c2:03:bd:
5b:db:eb:ed:42:bf:32:9e:a1:a7:4b:0e:5d:41:87:77:57:b4:
a5:72:79:f3:6b:6f:c3:b0:c1:2b:bf:69:41:d4:8e:78:99:40:
07:0f:86:00:d8:df:5e:03:6d:20:7b:30:9b:3d:c8:12:f2:80:
14:63:ac:5c:23:4d:af:5c:c5:d8:fe:e5:fb:6f:bb:bd:87:c9:
b2:a8:59:d7:eb:e1:6f:f0:c2:f4:7a:f4:b0:74:b6:d7:d9:dd:
92:71:d4:e0:b4:1d:6c:aa:d9:d4:c3:aa:6b:be:b3:12:d8:c0:
c4:f6:44:3b:f2:be:82:6c:39:f7:25:c6:85:b7:a1:a9:b4:54:
b9:cb:34:d2:33:48:9c:49:d6:32:2d:5a:43:33:bb:05:f7:3d:
e8:66:eb:25:8a:a0:05:59:d5:ed:21:d2:d0:3a:5b:8d:40:d2:
f1:7f:82:8c:c2:40:9b:94:08:85:bc:34:f0:6d:10:e4:1f:7b:
c9:fa:ff:b0:01:12:3d:d2:46:b8:cb:4e:41:ff:b7:6e:e0:85:
a1:84:80:ec:7c:e4:50:62:e2:41:ad:19:2e:f3:b4:f7:04:c6:
0e:de:93:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:22:11 2026 by rpki-client