Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/FsW7oaumY-RciuPxPU481FYlsWA.roa
File: FsW7oaumY-RciuPxPU481FYlsWA.roa (raw, json)
Hash identifier: kOG2V3kSaBfJVyzAYdhFYIPRV2COuNXxNI3aDHa6jVQ=
Subject key identifier: 16:C5:BB:A1:AB:A6:63:E4:5C:8A:E3:F1:3D:4E:3C:D4:56:25:B1:60
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 01A1CB4E7ACC73E31DB9C3B5BE8B69A48AEB
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/FsW7oaumY-RciuPxPU481FYlsWA.roa
Signing time: Wed 11 Nov 2026 15:51:20 +0000
ROA not before: Wed 11 Nov 2026 15:51:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43350
IP address blocks: 5.104.136.0/21 maxlen: 24
37.143.32.0/21 maxlen: 24
37.153.168.0/22 maxlen: 22
37.156.228.0/24 maxlen: 24
46.166.128.0/19 maxlen: 24
46.166.176.0/20 maxlen: 24
77.247.176.0/21 maxlen: 21
77.247.176.0/24 maxlen: 24
85.159.232.0/21 maxlen: 24
89.38.160.0/22 maxlen: 22
92.114.100.0/22 maxlen: 22
92.114.100.0/24 maxlen: 24
109.201.128.0/19 maxlen: 19
176.126.232.0/24 maxlen: 24
176.126.233.0/24 maxlen: 24
185.7.76.0/22 maxlen: 24
185.11.144.0/24 maxlen: 24
185.47.200.0/24 maxlen: 24
185.47.201.0/24 maxlen: 24
185.47.202.0/24 maxlen: 24
185.47.203.0/24 maxlen: 24
185.107.36.0/24 maxlen: 24
185.107.37.0/24 maxlen: 24
185.107.38.0/24 maxlen: 24
185.107.44.0/22 maxlen: 22
185.107.45.0/24 maxlen: 24
185.107.56.0/22 maxlen: 22
185.107.68.0/22 maxlen: 22
185.107.80.0/22 maxlen: 22
185.107.92.0/22 maxlen: 22
185.107.100.0/22 maxlen: 24
185.107.116.0/22 maxlen: 24
185.164.208.0/24 maxlen: 24
185.164.209.0/24 maxlen: 24
185.164.210.0/24 maxlen: 24
185.164.211.0/24 maxlen: 24
188.209.55.0/24 maxlen: 24
188.209.56.0/24 maxlen: 24
188.209.57.0/24 maxlen: 24
212.92.104.0/21 maxlen: 21
212.92.112.0/21 maxlen: 21
212.92.120.0/22 maxlen: 22
212.92.124.0/23 maxlen: 23
2a00:1768::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:4e:7a:cc:73:e3:1d:b9:c3:b5:be:8b:69:a4:8a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Nov 11 15:51:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16c5bba1aba663e45c8ae3f13d4e3cd45625b160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:dd:ac:b2:bd:ff:6d:95:f5:57:6c:36:97:
eb:97:7b:6b:a7:a8:74:94:09:29:67:4e:0f:02:67:
08:2c:c8:43:27:7e:f5:ca:cb:7b:74:59:d2:29:a8:
14:4d:d9:84:84:5a:42:00:6d:60:96:0b:b9:64:d9:
87:f8:3c:eb:76:e2:3a:b4:9c:c6:e3:38:5f:83:ad:
b8:1c:db:03:6d:ef:fd:ae:d5:1c:11:47:73:79:f1:
40:c3:4c:1c:f9:44:09:58:82:ce:b1:5a:f9:ef:1f:
d4:07:50:18:9f:cf:70:83:77:a3:41:93:78:22:e9:
de:dc:f4:51:c5:2b:53:2c:63:21:e8:61:8a:28:b2:
fd:92:7e:04:d6:68:65:f5:31:08:1b:c9:62:c5:e0:
14:47:cf:39:3c:c4:b7:b3:3f:d4:c9:e3:37:85:fd:
fb:cd:09:a8:67:fa:05:48:2b:49:94:f7:a5:87:01:
81:73:5e:3e:6a:83:c3:f0:57:97:c4:e7:b4:a3:6e:
52:3b:1f:76:29:35:53:5a:58:6c:40:3f:74:df:35:
c9:ee:5c:3e:25:b7:f6:29:39:da:3c:8b:98:95:4a:
fb:20:26:87:54:1e:4f:98:65:16:94:f4:23:99:ab:
e1:27:e1:fa:86:cd:52:df:b1:d3:ae:be:d8:59:9c:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C5:BB:A1:AB:A6:63:E4:5C:8A:E3:F1:3D:4E:3C:D4:56:25:B1:60
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/FsW7oaumY-RciuPxPU481FYlsWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.136.0/21
37.143.32.0/21
37.153.168.0/22
37.156.228.0/24
46.166.128.0/19
46.166.176.0/20
77.247.176.0/21
85.159.232.0/21
89.38.160.0/22
92.114.100.0/22
109.201.128.0/19
176.126.232.0/23
185.7.76.0/22
185.11.144.0/24
185.47.200.0/22
185.107.36.0-185.107.38.255
185.107.44.0/22
185.107.56.0/22
185.107.68.0/22
185.107.80.0/22
185.107.92.0/22
185.107.100.0/22
185.107.116.0/22
185.164.208.0/22
188.209.55.0-188.209.57.255
212.92.104.0-212.92.125.255
IPv6:
2a00:1768::/32
Signature Algorithm: sha256WithRSAEncryption
6a:cb:e7:f9:67:00:71:f7:c3:06:67:6c:6d:ec:a0:fc:d5:ec:
4f:7c:37:00:3f:54:98:ee:af:c0:7f:3f:44:05:89:e7:11:83:
c9:90:3c:8f:47:f5:08:61:8f:75:d2:4a:fd:e6:13:07:0a:cd:
f3:a3:af:80:86:97:52:10:99:4e:4f:60:44:11:07:ca:ae:eb:
bb:90:08:17:fd:3a:2a:fe:bc:94:74:0b:83:c9:12:dd:3e:5a:
d9:f3:65:b8:66:27:2f:92:34:9e:b4:cd:b3:88:bd:d9:20:5d:
06:72:59:03:11:cb:a8:44:8a:70:cf:ca:fe:6b:a1:5a:2e:d6:
d8:82:b2:f2:63:b2:b1:f0:13:71:b2:98:38:1a:0d:e7:f7:fb:
54:b7:92:83:29:05:b9:d8:c8:1a:be:dc:a8:fc:da:56:ea:1f:
30:8a:dc:6c:fa:27:24:3a:19:d5:dd:ae:8c:d6:c9:2f:a4:bf:
1f:48:41:29:c3:25:e3:55:30:4f:22:f1:66:f8:4a:8b:4f:e5:
99:d9:f5:74:a7:9a:8b:06:cf:e7:29:d6:0e:77:82:be:9c:07:
bc:5f:49:fe:4b:99:61:9b:b9:72:1f:63:74:4c:4c:0b:ba:7c:
0a:ae:cd:b2:fd:c6:31:aa:5b:7d:78:fb:c7:a3:70:e3:d6:9b:
0f:1c:d7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:46:15 2026 by rpki-client