Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/FMZLd4Ps16YzGBMpOnOc44HcG18.roa
File: FMZLd4Ps16YzGBMpOnOc44HcG18.roa (raw, json)
Hash identifier: jgDZrPFGw8aOglddPDZFhV8lrzoZRsEiVQVdiUDUggU=
Subject key identifier: 14:C6:4B:77:83:EC:D7:A6:33:18:13:29:3A:73:9C:E3:81:DC:1B:5F
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019E8DC96AFB4E0D2D1193F59A610A4CDF5A
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/FMZLd4Ps16YzGBMpOnOc44HcG18.roa
Signing time: Wed 03 Jun 2026 14:00:48 +0000
ROA not before: Wed 03 Jun 2026 14:00:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210656
IP address blocks: 89.223.20.0/24 maxlen: 32
92.255.16.0/24 maxlen: 32
92.255.58.0/23 maxlen: 32
94.126.204.0/22 maxlen: 32
94.139.248.0/22 maxlen: 32
185.184.128.0/22 maxlen: 32
185.216.194.0/23 maxlen: 32
2a0d:d6c2::/48 maxlen: 48
2a0d:d6c7:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:c9:6a:fb:4e:0d:2d:11:93:f5:9a:61:0a:4c:df:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Jun 3 14:00:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14c64b7783ecd7a6331813293a739ce381dc1b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:af:60:6f:13:f3:ef:81:e6:22:d7:f9:29:8a:
38:39:10:3c:da:88:dc:85:47:e9:da:a3:3c:d3:95:
a6:d1:d3:85:99:33:17:97:4f:b9:8b:0c:48:8b:e7:
82:f1:f8:3d:e7:48:ce:4e:66:67:e8:87:74:bf:96:
d5:15:a9:37:fa:25:55:d8:32:aa:59:4d:a3:6a:3f:
dd:37:04:20:fb:99:c0:b8:01:21:35:18:02:8e:01:
e7:f8:53:53:29:c8:09:7f:6a:f6:f4:00:fc:14:ca:
14:6b:c6:4d:42:9f:86:97:2e:30:df:b5:aa:f6:be:
d8:68:16:8f:9d:49:e5:28:79:b0:ba:25:25:b9:64:
e9:cc:23:9b:b1:ec:ae:6f:91:f1:57:2c:6c:30:51:
47:95:6c:5e:6c:f1:79:cf:b2:4c:2c:e3:35:a7:eb:
ba:28:29:20:7d:e6:0b:43:80:7b:0a:d2:bb:9f:f7:
5d:1e:69:c6:9d:77:a9:c1:e2:4b:5b:c8:36:7f:06:
82:77:89:05:b8:c4:3a:09:ae:76:3b:38:7b:65:23:
29:cd:8d:80:0a:d4:50:46:85:94:53:dc:0e:d0:c0:
a5:d8:32:01:5b:fb:1a:da:f7:d4:66:0d:65:18:d0:
72:7e:c8:1c:99:2f:54:e6:af:45:98:98:d8:c8:3b:
1d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C6:4B:77:83:EC:D7:A6:33:18:13:29:3A:73:9C:E3:81:DC:1B:5F
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/FMZLd4Ps16YzGBMpOnOc44HcG18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.20.0/24
92.255.16.0/24
92.255.58.0/23
94.126.204.0/22
94.139.248.0/22
185.184.128.0/22
185.216.194.0/23
IPv6:
2a0d:d6c2::/48
2a0d:d6c7:3::/48
Signature Algorithm: sha256WithRSAEncryption
6f:d3:23:c8:22:27:d8:e2:02:22:07:c3:7d:20:5c:00:05:b2:
ee:34:c5:0f:51:30:8e:2f:e8:fe:5c:fc:71:e3:b6:cf:83:b1:
78:de:35:5f:66:fa:de:89:94:11:44:0a:32:f0:9b:07:2c:c9:
4c:ce:68:41:44:03:f3:d7:e5:d3:8a:aa:7d:28:26:bb:5f:3a:
1e:a6:1d:b9:65:dd:41:03:23:59:76:04:40:18:4b:6b:17:83:
f2:bc:11:84:cc:08:20:5b:2d:3f:e3:b4:b5:14:9d:65:83:8a:
a3:5f:46:80:48:c3:5f:ec:3d:82:7f:57:c2:90:2a:e8:ec:44:
85:74:ab:0f:5e:23:92:45:0f:9d:4d:d4:bf:47:f0:4f:be:a8:
b1:fd:fa:bb:d9:35:9e:53:58:6a:94:91:0a:a5:29:a8:7b:1f:
2d:93:f8:f5:dd:a8:67:89:4d:c0:7c:9b:88:49:ef:75:4b:91:
7a:83:3f:fc:82:aa:97:03:0e:54:ad:0b:4b:b6:95:1d:a3:f5:
0d:20:6c:4d:b7:77:98:58:37:8d:b0:83:9e:8d:73:a7:9c:3b:
94:72:fc:1b:14:8c:6e:9b:b7:60:47:c3:de:69:16:06:a4:16:
4e:03:04:af:13:59:b9:28:b0:9f:09:8f:fd:bb:17:a8:9a:06:
04:87:c5:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:28:07 2026 by rpki-client