Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/FKTTJ2_pJQ0c4167Z_9foASOfe8.roa
File: FKTTJ2_pJQ0c4167Z_9foASOfe8.roa (raw, json)
Hash identifier: 5QwyJIVruZ9DDqn9rtCcqANTOb2u+3Qm0t0OytggvZo=
Subject key identifier: 14:A4:D3:27:6F:E9:25:0D:1C:E3:5E:BB:67:FF:5F:A0:04:8E:7D:EF
Certificate issuer: /CN=113c673a25f75c8de0c860f469183a709a171e24
Certificate serial: 019F2368B8790E91C00EC944018568A8993D
Authority key identifier: 11:3C:67:3A:25:F7:5C:8D:E0:C8:60:F4:69:18:3A:70:9A:17:1E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/FKTTJ2_pJQ0c4167Z_9foASOfe8.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204731
IP address blocks: 185.241.224.0/22 maxlen: 22
185.241.224.0/23 maxlen: 23
185.241.226.0/23 maxlen: 23
2a0c:b381::/32 maxlen: 32
2a0c:b381:500::/40 maxlen: 40
2a0c:b381:700::/40 maxlen: 40
2a0c:b381:800::/40 maxlen: 40
2a0c:b381:900::/40 maxlen: 40
2a0c:b381:a00::/40 maxlen: 40
2a0c:b381:b00::/40 maxlen: 40
2a0c:b381:d00::/40 maxlen: 40
2a0c:b381:e00::/40 maxlen: 40
2a0c:b381:f00::/40 maxlen: 40
2a0c:b381:1000::/40 maxlen: 40
2a0c:b381:1100::/40 maxlen: 40
2a0c:b381:1200::/40 maxlen: 40
2a0c:b381:1300::/40 maxlen: 40
2a0c:b381:1400::/40 maxlen: 40
2a0c:b381:1500::/40 maxlen: 40
2a0c:b381:1600::/40 maxlen: 40
2a0c:b381:1700::/40 maxlen: 40
2a0c:b381:1800::/40 maxlen: 40
2a0c:b381:1900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b8:79:0e:91:c0:0e:c9:44:01:85:68:a8:99:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113c673a25f75c8de0c860f469183a709a171e24
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14a4d3276fe9250d1ce35ebb67ff5fa0048e7def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:08:23:54:f8:75:85:e7:70:0b:45:75:1f:
96:0d:c1:92:6a:f1:1e:68:ed:aa:88:e6:52:d1:bc:
0a:b6:b6:7b:9a:5e:08:df:38:85:9b:03:1b:a2:55:
d4:c7:b9:62:29:a4:bb:90:1e:66:12:1b:b5:e2:bf:
44:0c:ae:52:c1:3a:f3:be:0e:dd:ca:25:0e:73:b8:
b7:3f:ca:4f:cb:ff:b4:a5:20:78:a3:96:6f:3c:4a:
c7:4c:5d:01:f7:21:b8:20:87:96:7f:7d:0e:36:8b:
85:dc:55:c2:9f:e7:58:8b:7b:bb:3e:6b:0a:f8:82:
a2:58:4d:17:ca:b7:2c:2c:04:d6:ef:21:f8:01:d8:
b2:4b:e6:89:c2:81:0f:91:eb:5a:96:9a:57:b4:e9:
bd:61:b3:55:79:9f:b5:98:54:e0:ab:2d:6e:00:45:
ee:aa:37:0f:9b:64:b3:57:b7:c3:5a:f7:7e:3b:d5:
bf:6f:9c:23:67:ed:d1:ea:05:dc:f5:bb:54:c3:ba:
90:f9:15:ea:a9:fa:93:a5:7d:1e:36:3e:02:5b:45:
18:80:12:2f:85:48:30:c7:17:1e:e1:5f:0c:1d:d6:
7f:4d:9d:dd:1e:00:8b:00:b9:06:ad:8b:f3:03:96:
ca:3e:1f:12:01:e8:e2:80:71:43:72:eb:08:68:27:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A4:D3:27:6F:E9:25:0D:1C:E3:5E:BB:67:FF:5F:A0:04:8E:7D:EF
X509v3 Authority Key Identifier:
keyid:11:3C:67:3A:25:F7:5C:8D:E0:C8:60:F4:69:18:3A:70:9A:17:1E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/FKTTJ2_pJQ0c4167Z_9foASOfe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.224.0/22
IPv6:
2a0c:b381::/32
Signature Algorithm: sha256WithRSAEncryption
17:0b:ad:88:8b:a4:58:17:86:10:2f:17:4a:b5:ff:55:f1:ab:
27:02:f4:da:13:17:77:7f:c5:d8:61:c5:7b:f4:c7:fa:44:b6:
7b:65:f7:83:73:72:bb:8f:cd:2d:99:2a:49:3b:8d:03:4c:c9:
31:af:86:8d:ed:0e:88:f9:ad:5a:f9:b3:2a:ce:fe:29:02:58:
0c:da:54:11:bb:ce:19:aa:93:02:26:38:7c:e0:76:71:fa:d2:
61:d6:dc:25:2b:57:d0:79:ad:c2:72:9c:d3:79:18:6b:ae:e1:
e3:0c:7b:f1:1c:7e:d6:74:8d:a7:57:27:81:8e:2b:d9:13:ec:
af:0f:2b:75:6e:f5:aa:1a:73:fc:ba:d8:5b:1a:43:b6:70:86:
c1:c4:96:02:97:0e:81:5f:02:cc:0b:86:a4:bf:2c:5e:01:92:
fb:11:f0:a1:63:b7:28:37:bb:e2:8a:12:2b:fd:cf:be:c9:18:
ec:92:d8:f5:2e:10:b8:89:a3:be:10:ce:84:18:4d:3a:66:0e:
8b:b0:34:35:fa:d9:fe:c4:55:be:3a:7e:1d:c8:eb:6c:58:0f:
62:5f:cc:d9:95:ea:40:30:ef:85:bc:17:c3:f4:93:c0:1c:24:
51:9d:54:42:88:5c:93:d3:66:dd:07:67:98:a2:23:83:ec:93:
4c:fe:31:d7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaLh5DpHADslEAYVoqJk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2M2NzNhMjVmNzVjOGRlMGM4NjBmNDY5MTgzYTcwOWEx
NzFlMjQwHhcNMjYwNzAyMTUxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGE0ZDMyNzZmZTkyNTBkMWNlMzVlYmI2N2ZmNWZhMDA0OGU3ZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztEII1T4dYXncAtFdR+WDcGSavEe
aO2qiOZS0bwKtrZ7ml4I3ziFmwMbolXUx7liKaS7kB5mEhu14r9EDK5SwTrzvg7d
yiUOc7i3P8pPy/+0pSB4o5ZvPErHTF0B9yG4IIeWf30ONouF3FXCn+dYi3u7PmsK
+IKiWE0XyrcsLATW7yH4AdiyS+aJwoEPketalppXtOm9YbNVeZ+1mFTgqy1uAEXu
qjcPm2SzV7fDWvd+O9W/b5wjZ+3R6gXc9btUw7qQ+RXqqfqTpX0eNj4CW0UYgBIv
hUgwxxce4V8MHdZ/TZ3dHgCLALkGrYvzA5bKPh8SAejigHFDcusIaCfrUwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBSk0ydv6SUNHONeu2f/X6AEjn3vMB8GA1UdIwQY
MBaAFBE8Zzol91yN4Mhg9GkYOnCaFx4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVR4bk9pWDNYSTNneUdEMGFSZzZjSm9YSGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85NjFhY2EtZjQyNS00ODg3LWFmNGEt
Y2ZhMDYxMDMwMzQ2LzEvRktUVEoyX3BKUTBjNDE2N1pfOWZvQVNPZmU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85NjFhY2EtZjQyNS00ODg3LWFmNGEtY2ZhMDYxMDMwMzQ2
LzEvRVR4bk9pWDNYSTNneUdEMGFSZzZjSm9YSGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufHgMA0E
AgACMAcDBQAqDLOBMA0GCSqGSIb3DQEBCwUAA4IBAQAXC62Ii6RYF4YQLxdKtf9V
8asnAvTaExd3f8XYYcV79Mf6RLZ7ZfeDc3K7j80tmSpJO40DTMkxr4aN7Q6I+a1a
+bMqzv4pAlgM2lQRu84ZqpMCJjh84HZx+tJh1twlK1fQea3CcpzTeRhrruHjDHvx
HH7WdI2nVyeBjivZE+yvDyt1bvWqGnP8uthbGkO2cIbBxJYClw6BXwLMC4akvyxe
AZL7EfChY7coN7viihIr/c++yRjsktj1LhC4iaO+EM6EGE06Zg6LsDQ1+tn+xFW+
On4dyOtsWA9iX8zZlepAMO+FvBfD9JPAHCRRnVRCiFyT02bdB2eYoiOD7JNM/jHX
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:15 2026 by rpki-client