Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/fnvEaAT28borLlTTWpW2AtTD6ZE.roa
File: fnvEaAT28borLlTTWpW2AtTD6ZE.roa (raw, json)
Hash identifier: NaMO1Gs4SP/y+KjGpBAZ+hgdfrK/8YBpbJ/SmLQlPcM=
Subject key identifier: 7E:7B:C4:68:04:F6:F1:BA:2B:2E:54:D3:5A:95:B6:02:D4:C3:E9:91
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 019F4A758898B810FCC647218E709141FA74
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/fnvEaAT28borLlTTWpW2AtTD6ZE.roa
Signing time: Fri 10 Jul 2026 05:17:24 +0000
ROA not before: Fri 10 Jul 2026 05:17:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216154
IP address blocks: 45.10.172.0/23 maxlen: 23
45.10.172.0/24 maxlen: 24
45.10.173.0/24 maxlen: 24
45.88.172.0/22 maxlen: 22
45.114.60.0/22 maxlen: 22
80.74.24.0/21 maxlen: 21
84.252.102.0/23 maxlen: 23
85.137.88.0/21 maxlen: 21
88.218.120.0/22 maxlen: 22
89.46.131.0/24 maxlen: 24
89.150.34.0/23 maxlen: 23
89.150.41.0/24 maxlen: 24
89.150.59.0/24 maxlen: 24
91.132.56.0/22 maxlen: 22
91.132.224.0/24 maxlen: 24
103.54.16.0/22 maxlen: 22
103.90.72.0/23 maxlen: 23
103.90.74.0/23 maxlen: 23
103.90.74.0/24 maxlen: 24
103.90.75.0/24 maxlen: 24
103.137.248.0/22 maxlen: 22
132.243.112.0/20 maxlen: 20
157.228.112.0/20 maxlen: 20
185.200.176.0/22 maxlen: 22
188.241.196.0/23 maxlen: 23
2a0c:db40::/32 maxlen: 32
2a0c:db40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:75:88:98:b8:10:fc:c6:47:21:8e:70:91:41:fa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Jul 10 05:17:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e7bc46804f6f1ba2b2e54d35a95b602d4c3e991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:da:81:00:11:a1:84:ee:2b:70:89:ca:3a:
f1:2b:56:d1:ba:81:b0:6c:7b:e5:44:c4:a8:1a:cc:
dd:4a:21:cc:35:d8:53:70:cd:b1:6f:0e:5a:94:ad:
5f:71:76:bd:69:4c:8d:53:84:53:14:35:4f:f4:5a:
bb:7c:74:2f:c5:50:a0:14:f8:f8:e8:68:2f:9f:50:
c9:4f:c2:ab:19:d0:13:64:ab:2e:c7:d3:4c:65:a2:
ec:dc:14:33:50:a5:21:c7:4d:10:81:05:9f:66:a2:
32:d4:59:a6:2d:8c:d2:de:b1:e7:50:fe:75:9b:af:
4b:5c:39:4f:79:9f:b8:50:da:14:52:a6:42:39:ad:
00:5f:ac:48:78:2a:2d:11:98:43:b1:b4:f3:c3:39:
3e:8d:86:8a:75:1d:d7:f1:68:16:87:ac:f4:55:e2:
16:d6:1b:70:30:81:f8:40:e4:cd:09:fa:d0:48:7b:
c4:09:43:d6:35:2f:30:f7:30:e2:80:98:40:2a:9b:
2a:b6:d2:1f:e8:b7:62:3b:3e:2d:aa:92:46:bc:4b:
6e:ea:d3:72:52:e1:a8:36:80:68:28:e9:96:6b:30:
91:45:c9:de:49:db:20:5d:aa:5e:d1:41:e0:e9:ae:
7c:db:16:a9:7d:6e:55:02:4a:52:03:65:c8:8c:54:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7B:C4:68:04:F6:F1:BA:2B:2E:54:D3:5A:95:B6:02:D4:C3:E9:91
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/fnvEaAT28borLlTTWpW2AtTD6ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.172.0/23
45.88.172.0/22
45.114.60.0/22
80.74.24.0/21
84.252.102.0/23
85.137.88.0/21
88.218.120.0/22
89.46.131.0/24
89.150.34.0/23
89.150.41.0/24
89.150.59.0/24
91.132.56.0/22
91.132.224.0/24
103.54.16.0/22
103.90.72.0/22
103.137.248.0/22
132.243.112.0/20
157.228.112.0/20
185.200.176.0/22
188.241.196.0/23
IPv6:
2a0c:db40::/32
Signature Algorithm: sha256WithRSAEncryption
a9:2b:93:7e:06:39:8b:fc:47:a6:ca:83:02:57:79:53:21:94:
17:a1:8f:20:fe:c1:94:d8:d3:ef:3a:53:d4:28:dc:92:26:31:
2a:ff:3e:09:7e:cf:11:61:99:4a:cb:43:b0:fa:e4:56:0f:be:
b0:13:d5:b9:09:50:d4:0f:f9:1a:48:2d:70:2d:1f:4d:83:a4:
c3:17:31:3d:ed:b1:f6:28:86:c3:b8:68:48:ec:cc:03:20:17:
53:9b:8e:01:50:23:3b:36:09:67:6d:81:97:1b:5c:c3:6d:c4:
1e:53:98:23:ec:7d:d4:e0:44:a9:f3:4b:b5:b6:93:7e:d0:ed:
44:a7:f8:25:27:df:5a:72:c8:7e:7f:51:9f:8b:cd:08:36:6e:
15:c7:fb:25:e4:12:0d:55:d8:3c:11:36:45:d2:08:04:54:ce:
04:62:65:21:b3:83:bb:9f:49:b4:a2:3f:73:b1:a7:00:f5:e6:
b3:2a:70:c9:80:73:f5:a3:80:41:97:d0:d1:a7:ba:a6:cf:d2:
ef:93:c4:6a:e7:94:38:c3:4b:78:16:bb:06:f6:a9:a6:72:a5:
fb:3c:4b:88:4b:1f:6a:0a:22:89:3f:ed:b5:8d:e1:3d:98:29:
a4:93:61:e4:99:1a:cd:1a:0e:04:85:7d:f1:3b:9f:b1:d2:68:
5f:48:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:37 2026 by rpki-client