Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/FzlkTAFVrFiVAlrg5k9O8RgqTRo.roa
File: FzlkTAFVrFiVAlrg5k9O8RgqTRo.roa (raw, json)
Hash identifier: di2JSUIti459RqFlcovjuYG5N7iQ8p7FOakkzalMmcI=
Subject key identifier: 17:39:64:4C:01:55:AC:58:95:02:5A:E0:E6:4F:4E:F1:18:2A:4D:1A
Certificate issuer: /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial: 01A086191AD9EFB18C906CC8D322222A03D2
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/FzlkTAFVrFiVAlrg5k9O8RgqTRo.roa
Signing time: Wed 09 Sep 2026 12:16:27 +0000
ROA not before: Wed 09 Sep 2026 12:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209795
IP address blocks: 194.93.12.0/23 maxlen: 23
194.93.12.0/24 maxlen: 24
194.93.14.0/23 maxlen: 23
2a09:2080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:19:1a:d9:ef:b1:8c:90:6c:c8:d3:22:22:2a:03:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Validity
Not Before: Sep 9 12:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1739644c0155ac5895025ae0e64f4ef1182a4d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:ba:5b:a2:7a:cf:78:66:21:84:a8:82:9c:
b2:07:a2:fd:42:68:cc:ba:d0:a8:20:bb:2d:3d:a2:
59:d9:06:72:f9:15:47:0f:03:68:78:88:45:32:ae:
f3:44:33:eb:5b:c4:f4:66:9b:80:b9:bd:f7:c6:91:
6d:9d:2f:39:7d:01:33:62:e3:e6:1f:9e:76:7b:23:
a0:b3:8c:1f:41:d1:3f:7b:85:82:87:f6:fb:ab:69:
99:9d:c5:e1:5f:27:1e:8e:80:86:e3:25:56:7f:46:
c6:cf:2c:b2:31:3d:bc:37:ff:9f:39:32:c9:e5:3d:
5b:2d:79:9c:07:7b:d7:e8:b0:af:32:a8:7a:52:4f:
07:dd:c5:2e:57:72:58:63:6c:52:86:7c:66:89:f6:
59:15:d8:ea:4e:75:cc:ae:b7:38:eb:fe:48:a4:b7:
8d:6f:e4:b6:f5:8f:b1:cb:6a:69:c3:d3:cc:3c:38:
c2:0b:9b:74:88:9e:62:a7:15:fa:92:7e:27:d3:f0:
92:6e:13:23:7d:db:3e:af:7d:3c:9e:21:46:13:92:
ec:b7:f8:4e:4f:b9:36:5f:b2:c2:ce:0b:fd:a9:d6:
7b:b5:5e:77:8d:b3:15:20:46:8a:4a:70:c4:62:3b:
f7:62:72:1d:ce:10:4e:62:93:77:49:e6:b2:7a:38:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:39:64:4C:01:55:AC:58:95:02:5A:E0:E6:4F:4E:F1:18:2A:4D:1A
X509v3 Authority Key Identifier:
keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/FzlkTAFVrFiVAlrg5k9O8RgqTRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.12.0/22
IPv6:
2a09:2080::/29
Signature Algorithm: sha256WithRSAEncryption
50:47:a3:bb:22:28:bf:ee:38:a6:23:1b:2e:6c:cb:8a:c5:fb:
05:41:e2:a4:9b:b3:1c:ac:e6:34:98:8b:b7:7d:28:5c:0e:11:
d2:4b:55:0f:bf:28:0e:1c:35:7b:6b:d6:9c:7b:d8:ec:87:eb:
91:89:e6:2c:db:ef:0e:09:13:21:dd:0d:2a:77:a1:36:82:91:
79:17:66:50:84:81:20:ce:13:20:b2:cf:cc:5a:8c:07:d3:b5:
f6:82:01:d0:9d:50:a8:57:d4:8f:1a:d8:fc:9b:c4:0d:d4:1a:
26:54:bd:46:22:a0:18:4d:60:db:eb:08:14:b6:14:89:d8:c4:
33:16:75:09:1e:73:7f:7d:f5:1c:36:07:d7:d3:36:8d:d6:5c:
ab:2e:00:a0:b0:47:31:f1:41:73:dc:0a:08:f1:bc:6f:69:ef:
fe:eb:4b:be:c3:7c:36:2a:ae:74:5d:28:26:3f:5d:01:f7:0a:
d5:c2:6a:d3:72:2a:e7:aa:25:e5:e4:de:6d:ee:2e:27:03:9d:
fe:27:f6:9c:9d:f1:44:8b:79:cc:d6:bd:2e:e1:f1:7f:ea:76:
74:ac:90:26:85:d5:90:c8:61:4e:4d:e4:4c:3e:c1:38:05:c7:
00:50:b8:34:a1:2c:8e:97:89:2a:0f:ff:53:94:05:bf:ba:34:
d5:73:d6:b2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaCGGRrZ77GMkGzI0yIiKgPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjA1NzQ4NTJjNmJiOTIzZmNiMzgwNDI1YzRmZDNlZDVj
MGJhOTMwHhcNMjYwOTA5MTIxNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzM5NjQ0YzAxNTVhYzU4OTUwMjVhZTBlNjRmNGVmMTE4MmE0ZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4K6W6J6z3hmIYSogpyyB6L9QmjM
utCoILstPaJZ2QZy+RVHDwNoeIhFMq7zRDPrW8T0ZpuAub33xpFtnS85fQEzYuPm
H552eyOgs4wfQdE/e4WCh/b7q2mZncXhXycejoCG4yVWf0bGzyyyMT28N/+fOTLJ
5T1bLXmcB3vX6LCvMqh6Uk8H3cUuV3JYY2xShnxmifZZFdjqTnXMrrc46/5IpLeN
b+S29Y+xy2ppw9PMPDjCC5t0iJ5ipxX6kn4n0/CSbhMjfds+r308niFGE5Lst/hO
T7k2X7LCzgv9qdZ7tV53jbMVIEaKSnDEYjv3YnIdzhBOYpN3Seayejg7KQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBc5ZEwBVaxYlQJa4OZPTvEYKk0aMB8GA1UdIwQY
MBaAFAEgV0hSxruSP8s4BCXE/T7VwLqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2Qt
ZDViMWRiZGQxYjVmLzEvRnpsa1RBRlZyRmlWQWxyZzVrOU84UmdxVFJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2QtZDViMWRiZGQxYjVm
LzEvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwl0MMA0E
AgACMAcDBQMqCSCAMA0GCSqGSIb3DQEBCwUAA4IBAQBQR6O7Iii/7jimIxsubMuK
xfsFQeKkm7McrOY0mIu3fShcDhHSS1UPvygOHDV7a9ace9jsh+uRieYs2+8OCRMh
3Q0qd6E2gpF5F2ZQhIEgzhMgss/MWowH07X2ggHQnVCoV9SPGtj8m8QN1BomVL1G
IqAYTWDb6wgUthSJ2MQzFnUJHnN/ffUcNgfX0zaN1lyrLgCgsEcx8UFz3AoI8bxv
ae/+60u+w3w2Kq50XSgmP10B9wrVwmrTcirnqiXl5N5t7i4nA53+J/acnfFEi3nM
1r0u4fF/6nZ0rJAmhdWQyGFOTeRMPsE4BccAULg0oSyOl4kqD/9TlAW/ujTVc9ay
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:19:46 2026 by rpki-client