Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FwEYWY_lI2uZpd0AIl34EC9Z6Mc.roa
File: FwEYWY_lI2uZpd0AIl34EC9Z6Mc.roa (raw, json)
Hash identifier: aJy7vks2WuwXYbYvhRzW+EXK8mOWrNlU1hOD8wDBts0=
Subject key identifier: 17:01:18:59:8F:E5:23:6B:99:A5:DD:00:22:5D:F8:10:2F:59:E8:C7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A0D23A7CF14DA131981DA0774389CAECD0
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FwEYWY_lI2uZpd0AIl34EC9Z6Mc.roa
Signing time: Thu 24 Sep 2026 07:04:03 +0000
ROA not before: Thu 24 Sep 2026 07:04:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211422
IP address blocks: 195.211.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:3a:7c:f1:4d:a1:31:98:1d:a0:77:43:89:ca:ec:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 24 07:04:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=170118598fe5236b99a5dd00225df8102f59e8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:7c:3c:eb:79:87:99:b6:f1:0c:32:06:91:
d2:67:a0:10:4d:30:bb:c9:3b:cc:d8:02:18:c2:d3:
61:95:f4:06:ca:ca:7f:6a:b8:a2:10:95:0c:fa:fd:
70:eb:da:6a:24:19:9c:a7:34:26:ef:07:7f:9d:a3:
5d:21:ac:2d:8b:a7:e7:99:ee:e1:f1:c7:f1:c9:36:
36:7b:c5:f5:90:0e:c7:39:b1:c9:20:b1:d1:7a:a2:
72:74:39:7e:2e:dd:ff:b4:5c:2d:72:78:aa:8e:44:
69:6f:ba:5c:c8:d3:35:86:78:e0:1b:6c:61:b5:c9:
71:4b:39:d2:1c:ab:a9:c2:48:aa:6c:66:91:8f:91:
cd:34:29:76:3e:10:33:a0:42:37:00:e2:23:0b:7e:
9f:8c:50:cc:75:7a:6b:49:ee:df:b5:c1:06:69:98:
9c:2d:bc:22:ff:48:2c:0a:95:d8:28:ae:9e:c9:d3:
0e:46:73:b7:a9:1e:e6:26:ae:22:d9:60:23:e7:9c:
c8:61:f0:1c:4b:c5:63:9f:12:2f:2c:04:61:5e:04:
22:52:5c:e7:cc:e4:3b:c7:7e:b3:62:1f:65:29:6c:
70:59:c8:df:74:27:6d:29:f7:d5:11:3a:f4:88:d8:
eb:41:cc:5c:1e:e1:0a:fc:bb:a5:37:3b:70:11:97:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:01:18:59:8F:E5:23:6B:99:A5:DD:00:22:5D:F8:10:2F:59:E8:C7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FwEYWY_lI2uZpd0AIl34EC9Z6Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a0:7b:ba:7d:07:c0:15:6b:7e:2e:eb:05:3c:9e:a1:27:e9:
a6:13:c8:78:48:20:01:b5:01:e5:aa:c1:45:a8:6c:f9:d0:17:
fa:e6:08:6d:38:74:a3:cc:75:05:0a:aa:66:f3:9e:c3:a3:82:
bb:3d:0a:11:d5:82:84:c8:2f:c1:cc:74:14:26:e7:35:be:e8:
45:84:f6:c2:49:3d:8c:81:b1:41:e0:fe:d7:1f:46:0f:59:62:
61:b5:e3:f7:d7:3f:42:4b:08:71:d6:33:c7:57:eb:3e:d1:70:
05:d4:01:9e:6a:5d:76:a5:83:e6:b3:ea:34:c0:88:aa:9a:d6:
c6:d5:ff:aa:9d:29:e9:02:c0:4d:0d:bc:3e:fe:08:42:e0:b1:
ab:c5:aa:8a:4f:2c:84:87:67:2e:9e:26:20:9a:47:23:6f:73:
e7:93:e8:7f:95:1a:f0:19:25:c1:2d:fe:b1:86:19:d6:cb:5f:
22:ed:89:74:ae:2c:3b:d1:e2:c5:4e:c4:31:97:76:6e:de:ef:
ec:16:1c:b7:c4:c1:ce:e8:94:53:d4:f8:0d:14:c0:44:b7:0b:
05:0a:bf:95:69:b2:64:2e:09:5e:d0:f9:e7:50:07:09:0c:09:
12:fd:ed:12:0a:2c:c8:21:e5:85:34:0d:41:99:be:4a:da:1d:
4c:0d:0f:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDSOnzxTaExmB2gd0OJyuzQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjYwOTI0MDcwNDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzAxMTg1OThmZTUyMzZiOTlhNWRkMDAyMjVkZjgxMDJmNTllOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3p8POt5h5m28QwyBpHSZ6AQTTC7
yTvM2AIYwtNhlfQGysp/ariiEJUM+v1w69pqJBmcpzQm7wd/naNdIawti6fnme7h
8cfxyTY2e8X1kA7HObHJILHReqJydDl+Lt3/tFwtcniqjkRpb7pcyNM1hnjgG2xh
tclxSznSHKupwkiqbGaRj5HNNCl2PhAzoEI3AOIjC36fjFDMdXprSe7ftcEGaZic
Lbwi/0gsCpXYKK6eydMORnO3qR7mJq4i2WAj55zIYfAcS8VjnxIvLARhXgQiUlzn
zOQ7x36zYh9lKWxwWcjfdCdtKffVETr0iNjrQcxcHuEK/LulNztwEZeTqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBcBGFmP5SNrmaXdACJd+BAvWejHMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvRndFWVdZX2xJMnVacGQwQUlsMzRFQzlaNk1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9O+MA0G
CSqGSIb3DQEBCwUAA4IBAQB7oHu6fQfAFWt+LusFPJ6hJ+mmE8h4SCABtQHlqsFF
qGz50Bf65ghtOHSjzHUFCqpm857Do4K7PQoR1YKEyC/BzHQUJuc1vuhFhPbCST2M
gbFB4P7XH0YPWWJhteP31z9CSwhx1jPHV+s+0XAF1AGeal12pYPms+o0wIiqmtbG
1f+qnSnpAsBNDbw+/ghC4LGrxaqKTyyEh2cuniYgmkcjb3Pnk+h/lRrwGSXBLf6x
hhnWy18i7Yl0riw70eLFTsQxl3Zu3u/sFhy3xMHO6JRT1PgNFMBEtwsFCr+VabJk
Lgle0PnnUAcJDAkS/e0SCizIIeWFNA1Bmb5K2h1MDQ/4
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:38:39 2026 by rpki-client