Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/Fxj2PQ4g7pi3ezd7kTUkevy0Hqw.roa
File: Fxj2PQ4g7pi3ezd7kTUkevy0Hqw.roa (raw, json)
Hash identifier: 3q/P5a6Z/WWo36q8gIcP74OlVCHu94ppWOpYRDuBKmU=
Subject key identifier: 17:18:F6:3D:0E:20:EE:98:B7:7B:37:7B:91:35:24:7A:FC:B4:1E:AC
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 019D6D679DFE23A8F47AB9F48CC8F5A80EBC
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/Fxj2PQ4g7pi3ezd7kTUkevy0Hqw.roa
Signing time: Wed 08 Apr 2026 14:03:20 +0000
ROA not before: Wed 08 Apr 2026 14:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 78.40.216.0/24 maxlen: 24
85.193.92.0/24 maxlen: 24
85.193.93.0/24 maxlen: 24
85.193.95.0/24 maxlen: 24
87.249.50.0/24 maxlen: 24
89.191.228.0/24 maxlen: 24
90.156.231.0/24 maxlen: 24
94.228.122.0/24 maxlen: 24
176.57.212.0/24 maxlen: 24
176.57.221.0/24 maxlen: 24
185.104.112.0/24 maxlen: 24
185.104.115.0/24 maxlen: 24
185.247.18.0/24 maxlen: 24
185.247.19.0/24 maxlen: 24
188.225.14.0/24 maxlen: 24
194.35.116.0/24 maxlen: 24
194.35.117.0/24 maxlen: 24
194.35.118.0/24 maxlen: 24
194.35.119.0/24 maxlen: 24
217.25.91.0/24 maxlen: 24
217.25.95.0/24 maxlen: 24
217.151.229.0/24 maxlen: 24
217.151.231.0/24 maxlen: 24
2a03:6f02::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:67:9d:fe:23:a8:f4:7a:b9:f4:8c:c8:f5:a8:0e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Apr 8 14:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1718f63d0e20ee98b77b377b9135247afcb41eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:a0:04:51:5b:f3:32:f9:1f:37:28:91:92:
15:8e:6b:53:f0:c5:3c:74:8c:ec:fe:3d:01:94:43:
7f:ac:80:c6:a1:8e:67:32:30:98:e3:b4:22:1f:33:
9c:53:72:fe:db:83:17:71:81:a6:98:71:bb:fc:88:
bc:08:f7:99:0c:d4:e1:fb:53:48:58:0a:ea:9a:ba:
69:50:fd:ac:2e:74:2c:3f:61:be:ab:21:5a:16:9d:
55:98:29:2b:89:84:df:82:25:db:7c:58:44:d7:6a:
65:df:f6:f2:5f:5c:2a:01:60:3e:1c:7a:7a:6c:04:
7b:b4:67:39:89:1d:35:14:ea:ab:18:d6:0f:01:6e:
1b:48:0e:22:49:fe:24:f9:74:20:8e:99:54:46:96:
1a:51:de:24:3b:0d:7a:ff:f2:13:8b:2d:4c:4d:ff:
11:3c:f0:aa:9c:3a:ad:c9:63:62:04:e2:ac:00:ce:
cd:70:3d:25:7a:29:b3:91:fe:88:01:a2:f4:28:3c:
ac:49:ca:ef:ef:e4:13:cf:9c:22:39:f8:35:ce:8b:
ad:fd:2a:66:b1:43:66:e4:1f:5b:00:5b:41:7f:40:
53:d0:44:4f:73:55:2d:64:c9:26:d8:23:93:cb:22:
f6:71:d1:d7:6b:f5:fc:1f:37:b6:84:1b:19:e4:97:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:18:F6:3D:0E:20:EE:98:B7:7B:37:7B:91:35:24:7A:FC:B4:1E:AC
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/Fxj2PQ4g7pi3ezd7kTUkevy0Hqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.216.0/24
85.193.92.0/23
85.193.95.0/24
87.249.50.0/24
89.191.228.0/24
90.156.231.0/24
94.228.122.0/24
176.57.212.0/24
176.57.221.0/24
185.104.112.0/24
185.104.115.0/24
185.247.18.0/23
188.225.14.0/24
194.35.116.0/22
217.25.91.0/24
217.25.95.0/24
217.151.229.0/24
217.151.231.0/24
IPv6:
2a03:6f02::/64
Signature Algorithm: sha256WithRSAEncryption
7c:7c:71:17:54:13:2f:da:31:a2:0c:c4:cc:aa:2c:1a:7e:6d:
14:2f:40:b0:ea:b5:27:4d:69:4d:bd:90:8c:00:8c:84:30:b1:
f9:d2:55:27:a2:02:75:55:66:93:c2:84:a1:ec:dd:fa:4e:35:
ad:ab:21:48:1a:ed:2a:a2:7e:06:33:67:9e:03:2e:87:61:6f:
65:f2:6d:61:8c:03:61:f9:dd:e4:f3:33:c8:ee:1f:31:3c:91:
8c:bd:e8:df:33:1c:de:a4:e9:54:e1:07:43:f8:2c:e7:38:21:
52:14:d6:12:15:7f:64:2e:5f:3b:e9:b9:29:93:4c:d8:2d:15:
ef:7f:c1:9b:62:8f:63:44:0b:4e:3a:02:0b:b9:77:f7:a2:1b:
46:b8:e1:fa:37:06:bb:76:08:f7:4b:05:96:ad:ba:2b:47:c3:
c9:f7:dd:bc:43:61:ef:9a:a7:96:df:51:3f:b1:26:41:e3:f6:
7f:af:70:5a:a6:25:39:e6:16:4c:6e:b8:bf:a2:e7:2b:80:28:
34:5b:08:b8:98:d2:d3:7f:be:af:1b:d5:5e:80:1a:13:c6:80:
10:ac:19:4e:93:d2:f4:d1:ae:fa:fa:9d:ec:27:00:e8:16:b5:
0c:8f:06:53:71:84:e9:61:e9:96:04:77:31:cf:ae:2d:a2:75:
76:30:b5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:54 2026 by rpki-client