Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/FmC2NHD1O2_12OtdoZyFcWE9fgQ.roa
File: FmC2NHD1O2_12OtdoZyFcWE9fgQ.roa (raw, json)
Hash identifier: VTBg0X7fu61d0MjhiBtZbQ9vf9gb3m6moAG8XlNj+4o=
Subject key identifier: 16:60:B6:34:70:F5:3B:6F:F5:D8:EB:5D:A1:9C:85:71:61:3D:7E:04
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A1BDD0EE8D6EE2126C7221C5723EE5E3AF
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/FmC2NHD1O2_12OtdoZyFcWE9fgQ.roa
Signing time: Mon 09 Nov 2026 00:59:08 +0000
ROA not before: Mon 09 Nov 2026 00:59:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.181.20.0/24 maxlen: 32
45.140.144.0/24 maxlen: 32
195.16.74.0/24 maxlen: 32
2a0e:4001:100::/40 maxlen: 128
2a0e:4001:1000::/36 maxlen: 128
2a0e:4001:2000::/36 maxlen: 36
2a0e:4001:5530::/44 maxlen: 128
2a0e:4001:d320::/44 maxlen: 128
2a10:2ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bd:d0:ee:8d:6e:e2:12:6c:72:21:c5:72:3e:e5:e3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Nov 9 00:59:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1660b63470f53b6ff5d8eb5da19c8571613d7e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:c1:b4:0c:ba:ab:9e:29:2c:1a:ea:d6:fc:
fb:f4:c7:50:29:f3:cf:78:90:46:04:c0:b1:5c:0c:
9f:92:dc:bd:32:51:d9:f0:ba:af:41:74:f8:ac:ee:
51:8d:00:75:67:db:4f:b2:2c:19:2b:24:ed:3b:44:
9c:ea:9e:0b:8f:d3:72:c8:4e:61:bb:df:57:1a:5f:
3f:0f:42:0a:17:94:e1:47:ef:4e:e9:9e:3d:95:17:
ca:8c:28:b4:dd:6c:f1:47:21:82:9d:14:90:9a:a9:
65:c3:12:ad:8e:ba:0b:5a:4f:e8:90:57:b2:cc:d8:
57:1c:c6:87:b0:da:d5:fb:42:7f:09:3f:43:1e:b5:
77:db:3e:22:23:d8:f7:d0:d0:7a:3c:1b:df:60:1f:
2a:a5:2e:d6:6b:a3:dd:0d:36:fe:95:62:24:d2:dc:
d7:17:19:76:07:43:67:82:6a:7b:e9:9a:f6:68:83:
10:fd:69:ff:05:53:b9:50:1f:bf:6a:bc:30:87:08:
4d:8d:58:f8:49:b0:02:5f:55:83:e9:82:e3:98:bf:
18:74:a7:13:d7:fc:86:65:43:74:c4:58:74:89:43:
6f:1e:df:0c:ac:21:43:cf:84:fe:4e:83:dc:64:63:
d3:7f:49:6c:52:9d:4d:87:14:db:24:45:b8:9e:bb:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:60:B6:34:70:F5:3B:6F:F5:D8:EB:5D:A1:9C:85:71:61:3D:7E:04
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/FmC2NHD1O2_12OtdoZyFcWE9fgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.20.0/24
45.140.144.0/24
195.16.74.0/24
IPv6:
2a0e:4001:100::/40
2a0e:4001:1000::-2a0e:4001:2fff:ffff:ffff:ffff:ffff:ffff
2a0e:4001:5530::/44
2a0e:4001:d320::/44
2a10:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
49:a2:95:38:56:ef:97:85:b7:28:0c:9d:eb:a9:eb:28:b7:02:
83:f5:c1:1d:b3:fd:13:56:b6:97:1c:c5:50:b8:07:37:7f:bf:
3c:7c:bd:d8:ea:cc:00:81:cb:94:2a:c2:be:66:19:93:c6:72:
5c:24:e2:ad:cb:47:0e:21:48:f6:34:42:7d:f1:2a:f3:91:81:
9e:d8:c7:71:f6:83:98:c3:69:69:33:0e:1a:1a:70:e8:84:98:
33:4d:04:53:23:c0:9c:57:eb:b2:76:50:49:70:43:84:48:89:
01:1c:51:75:7e:ac:19:8d:84:6c:1e:b0:40:33:ea:13:6f:da:
0f:ed:25:46:67:d6:f4:88:08:45:82:8f:37:d3:ad:f5:11:f4:
7b:63:9a:91:9c:8b:b1:ca:b2:a6:52:8c:e1:76:97:b0:98:24:
4a:85:7c:e9:d2:e9:e6:a5:4a:c4:59:59:7f:57:38:bb:4d:de:
df:8e:4b:f4:e1:2d:b0:94:0d:a4:10:a5:4a:02:6b:19:e3:65:
7e:af:35:79:06:69:a8:86:ce:bc:f9:3a:3e:b5:ef:31:c6:e2:
a8:0b:69:33:a4:fd:58:5f:74:08:28:28:7d:e6:69:a9:f8:a3:
a1:9c:93:1c:01:b1:2b:e1:d1:40:9f:bf:c9:c0:03:a3:a2:2c:
73:60:fa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:34 2026 by rpki-client