Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/_FgKHiwZ54ey0goItnrxJYHRboo.roa
File: _FgKHiwZ54ey0goItnrxJYHRboo.roa (raw, json)
Hash identifier: sg5CvvnTfG2oD+toERRbafBqjfE3xSjzejxaJO1LxU8=
Subject key identifier: FC:58:0A:1E:2C:19:E7:87:B2:D2:0A:08:B6:7A:F1:25:81:D1:6E:8A
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 019C4C64FF383534607D3314D3F103941648
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/_FgKHiwZ54ey0goItnrxJYHRboo.roa
Signing time: Wed 11 Feb 2026 11:10:13 +0000
ROA not before: Wed 11 Feb 2026 11:10:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50254
IP address blocks: 83.219.234.0/24 maxlen: 24
185.145.124.0/22 maxlen: 22
185.145.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:64:ff:38:35:34:60:7d:33:14:d3:f1:03:94:16:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: Feb 11 11:10:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc580a1e2c19e787b2d20a08b67af12581d16e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:31:6d:ac:2a:e9:13:d0:46:45:44:3d:3a:
28:15:fd:dc:73:89:e1:14:c5:c5:b1:4d:80:99:d5:
17:d9:9e:ec:10:06:e9:1c:04:64:a9:44:bf:63:d5:
ca:52:0b:f9:79:81:d6:4f:eb:a4:20:dc:1a:bb:11:
26:94:77:8e:c2:13:9b:b1:3c:47:02:7a:89:d9:de:
e5:91:bc:04:9d:a4:62:57:09:4e:c4:e3:7f:ef:06:
46:ff:ba:05:5e:6f:54:ec:b7:e0:23:f9:c3:cc:93:
f8:02:82:65:2b:2e:41:1e:83:fd:1a:7d:56:e8:46:
1b:60:c7:30:c3:1b:f1:1e:0f:f0:c0:da:ed:8b:ee:
56:96:9e:71:d4:7e:85:95:aa:91:5c:74:d3:c5:66:
d3:2b:0e:a0:8c:01:8a:30:a8:8a:a3:9e:3e:c6:77:
96:f4:5f:8b:ac:da:94:7b:de:e9:88:90:b9:d9:fe:
a7:c1:cc:09:0b:eb:ff:09:d2:8c:ed:a8:fa:94:b1:
00:c9:19:78:ab:34:c2:b2:79:78:d8:e3:fa:2b:a2:
aa:4c:8c:56:ee:57:16:6c:ab:f3:28:ef:73:70:bd:
f6:42:ad:e9:fb:13:9a:bb:1e:54:14:0d:fa:d5:ac:
66:dd:81:b1:31:6a:cc:ff:71:92:cd:98:3e:c2:46:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:58:0A:1E:2C:19:E7:87:B2:D2:0A:08:B6:7A:F1:25:81:D1:6E:8A
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/_FgKHiwZ54ey0goItnrxJYHRboo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.234.0/24
185.145.124.0/22
Signature Algorithm: sha256WithRSAEncryption
99:d0:5e:e1:67:5f:20:68:e3:72:4a:a7:86:7f:f3:e4:8a:44:
55:27:92:c2:50:d9:14:a8:f6:29:76:62:c5:e2:03:b0:cc:b4:
61:67:f3:85:44:98:df:3f:71:b4:00:94:8e:a3:91:89:06:ac:
34:08:b2:99:23:65:9c:bb:89:64:ae:6e:db:8b:24:46:4a:46:
86:f7:ca:b3:92:0f:d8:ea:f8:05:c0:52:a0:d9:fd:32:fe:26:
cd:34:ae:6d:97:10:2b:37:e6:f6:41:f0:be:c5:d9:cf:42:0c:
39:e9:e3:0d:30:71:61:e7:47:13:1e:67:10:83:0f:0a:6d:34:
56:86:ba:de:ca:86:c7:63:7f:d7:39:95:b2:24:be:66:fd:ff:
5c:ad:10:bc:01:f8:d8:49:80:f9:5a:7b:19:71:40:56:7e:31:
4c:51:f3:f2:94:52:02:e4:dd:83:38:d7:16:3e:99:27:01:b8:
34:e5:8b:c3:37:ca:05:19:9b:49:18:74:5b:da:6e:90:ae:28:
d2:f0:99:5e:09:bb:aa:e3:59:9e:c4:34:ce:e4:0a:c0:68:91:
b4:03:bf:e3:19:f9:0d:30:a0:58:00:5e:d6:3c:c0:22:de:42:
b9:91:cd:a8:c7:c8:a7:51:48:86:8c:4b:12:86:ee:50:2f:77:
2f:5c:8e:71
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZxMZP84NTRgfTMU0/EDlBZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDRkMmZkYmVlM2FhM2UxMjE0MjhlYTcwNTBjOTQzOWQ4
ODg2YTkwHhcNMjYwMjExMTExMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzU4MGExZTJjMTllNzg3YjJkMjBhMDhiNjdhZjEyNTgxZDE2ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOIxbawq6RPQRkVEPTooFf3cc4nh
FMXFsU2AmdUX2Z7sEAbpHARkqUS/Y9XKUgv5eYHWT+ukINwauxEmlHeOwhObsTxH
AnqJ2d7lkbwEnaRiVwlOxON/7wZG/7oFXm9U7LfgI/nDzJP4AoJlKy5BHoP9Gn1W
6EYbYMcwwxvxHg/wwNrti+5Wlp5x1H6FlaqRXHTTxWbTKw6gjAGKMKiKo54+xneW
9F+LrNqUe97piJC52f6nwcwJC+v/CdKM7aj6lLEAyRl4qzTCsnl42OP6K6KqTIxW
7lcWbKvzKO9zcL32Qq3p+xOaux5UFA361axm3YGxMWrM/3GSzZg+wka8pQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPxYCh4sGeeHstIKCLZ68SWB0W6KMB8GA1UdIwQY
MBaAFD/U0v2+46o+EhQo6nBQyUOdiIapMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlUU19iN2pxajRTRkNqcWNGREpRNTJJaHFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NmI2OTItNGJiMy00NzNlLTk0MTMt
NjI2MWU1YjFmYzIwLzEvX0ZnS0hpd1o1NGV5MGdvSXRucnhKWUhSYm9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82NmI2OTItNGJiMy00NzNlLTk0MTMtNjI2MWU1YjFmYzIw
LzEvUDlUU19iN2pxajRTRkNqcWNGREpRNTJJaHFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU9vqAwQC
uZF8MA0GCSqGSIb3DQEBCwUAA4IBAQCZ0F7hZ18gaONySqeGf/PkikRVJ5LCUNkU
qPYpdmLF4gOwzLRhZ/OFRJjfP3G0AJSOo5GJBqw0CLKZI2Wcu4lkrm7biyRGSkaG
98qzkg/Y6vgFwFKg2f0y/ibNNK5tlxArN+b2QfC+xdnPQgw56eMNMHFh50cTHmcQ
gw8KbTRWhrreyobHY3/XOZWyJL5m/f9crRC8AfjYSYD5WnsZcUBWfjFMUfPylFIC
5N2DONcWPpknAbg05YvDN8oFGZtJGHRb2m6QrijS8JleCbuq41mexDTO5ArAaJG0
A7/jGfkNMKBYAF7WPMAi3kK5kc2ox8inUUiGjEsShu5QL3cvXI5x
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:03:16 2026 by rpki-client