Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/FX65EUsBfwC3KYo7_xOGFuEzOJk.roa
File: FX65EUsBfwC3KYo7_xOGFuEzOJk.roa (raw, json)
Hash identifier: KHm9K/+5wb0bpzl81mZXqyHKMzk0Qwhwf/+PXfXSvuY=
Subject key identifier: 15:7E:B9:11:4B:01:7F:00:B7:29:8A:3B:FF:13:86:16:E1:33:38:99
Certificate issuer: /CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Certificate serial: 019F2368E418B6E78E9E4DAD69BA6A3B6082
Authority key identifier: 3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/FX65EUsBfwC3KYo7_xOGFuEzOJk.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207021
IP address blocks: 193.46.128.0/24 maxlen: 24
193.46.129.0/24 maxlen: 24
193.46.130.0/24 maxlen: 24
193.46.131.0/24 maxlen: 24
193.46.132.0/24 maxlen: 24
193.46.133.0/24 maxlen: 24
193.46.134.0/24 maxlen: 24
193.46.135.0/24 maxlen: 24
194.0.24.0/24 maxlen: 24
194.0.25.0/24 maxlen: 24
194.0.26.0/24 maxlen: 24
2001:678:20::/48 maxlen: 48
2001:678:24::/48 maxlen: 48
2001:67c:1bc::/48 maxlen: 48
2a02:850:ffe0::/48 maxlen: 48
2a02:850:ffe1::/48 maxlen: 48
2a02:850:ffe2::/48 maxlen: 48
2a02:850:ffe3::/48 maxlen: 48
2a02:850:ffe4::/48 maxlen: 48
2a02:850:ffe5::/48 maxlen: 48
2a02:850:ffe6::/48 maxlen: 48
2a02:850:ffe7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e4:18:b6:e7:8e:9e:4d:ad:69:ba:6a:3b:60:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=157eb9114b017f00b7298a3bff138616e1333899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:6a:78:ce:cc:9f:b4:f8:70:0d:c3:aa:3e:
67:89:4b:fe:04:92:4f:d5:68:23:a7:43:4b:cb:34:
87:c5:6f:a1:03:2d:25:4a:25:3f:93:b2:b8:85:9a:
26:7d:64:d5:29:1b:a9:d2:07:d0:f7:68:28:aa:1b:
7d:0a:4f:b4:f8:f3:9a:e5:36:9a:34:5c:89:91:1e:
82:af:f8:17:64:1b:41:be:4e:c9:84:a5:36:60:77:
e2:cc:bd:cf:ac:d4:ca:e3:dd:12:0f:7e:cf:fd:67:
31:78:10:10:19:24:7e:58:cb:c4:60:bc:c8:9f:be:
a3:14:3c:03:f7:dd:d2:44:cf:0f:88:dc:e1:e6:ad:
a0:94:ac:a6:7a:d2:83:69:b9:82:a1:a1:f4:6f:2a:
4a:09:38:45:cb:e5:9c:15:e7:e7:de:5c:b6:08:e8:
df:23:72:f8:82:13:74:98:25:ca:02:6a:75:94:7b:
56:8c:0d:bb:c9:3b:fc:6a:69:c7:8c:44:95:87:ee:
d6:43:ea:0a:e8:ff:d9:b4:3a:79:75:50:f6:af:e0:
0f:15:a6:67:72:d2:df:20:30:83:c7:fb:7d:0c:39:
ce:49:88:09:1c:4c:e8:c0:3b:c0:54:ed:1e:c5:85:
01:3c:dd:a5:ea:67:b0:88:c6:7f:e6:7f:4d:7e:1b:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7E:B9:11:4B:01:7F:00:B7:29:8A:3B:FF:13:86:16:E1:33:38:99
X509v3 Authority Key Identifier:
keyid:3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/FX65EUsBfwC3KYo7_xOGFuEzOJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.128.0/21
194.0.24.0-194.0.26.255
IPv6:
2001:678:20::/48
2001:678:24::/48
2001:67c:1bc::/48
2a02:850:ffe0::/45
Signature Algorithm: sha256WithRSAEncryption
33:90:87:e0:92:0a:fd:f7:05:86:00:05:73:3b:7f:51:0a:57:
00:1d:53:5c:4d:8f:1a:d8:94:65:4d:f1:29:ee:fc:6a:75:68:
1b:a8:68:5f:f3:94:77:76:e3:b6:7d:22:4b:a9:9b:b5:fd:90:
0d:0d:f5:0e:cd:fb:2b:e6:82:3c:5b:9c:26:b0:4a:60:63:cf:
c6:bf:4d:a4:4a:9b:1a:98:b0:e3:44:92:7e:d0:c9:bd:40:af:
49:95:50:32:4b:ed:ae:da:03:22:75:6d:d7:e8:5e:07:d7:23:
f9:35:17:82:0d:d5:56:4f:a1:c6:51:c6:c1:16:a6:3a:28:ad:
54:50:3d:03:cc:61:5e:12:36:5c:08:e7:f0:62:0d:50:6c:1e:
d8:a7:68:46:6a:60:9c:d8:f2:7b:bf:d9:62:2e:76:da:ac:2a:
30:1b:f4:cb:bf:e1:0e:47:45:cb:4b:c3:7c:63:8e:b4:9d:ba:
40:2c:4b:46:c1:cf:eb:ad:44:45:8c:e9:33:4b:e5:39:87:d6:
ca:3e:8c:18:8f:40:39:a8:4c:3d:10:a5:64:45:ea:12:b9:ce:
5b:ea:29:b4:74:cb:1a:17:f3:44:05:f9:91:ff:e2:d3:4b:97:
b1:96:82:93:ee:3d:d3:14:7f:9c:6b:86:34:08:de:dd:4d:85:
63:f4:a7:a7
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZ8jaOQYtueOnk2tabpqO2CCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNTEwZTIxYmExYzlkNjAwNTg5MTMwMjU1YTM2OTI4ZjFj
OGYyM2IwHhcNMjYwNzAyMTUxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTdlYjkxMTRiMDE3ZjAwYjcyOThhM2JmZjEzODYxNmUxMzMzODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2FqeM7Mn7T4cA3Dqj5niUv+BJJP
1Wgjp0NLyzSHxW+hAy0lSiU/k7K4hZomfWTVKRup0gfQ92goqht9Ck+0+POa5Taa
NFyJkR6Cr/gXZBtBvk7JhKU2YHfizL3PrNTK490SD37P/WcxeBAQGSR+WMvEYLzI
n76jFDwD993SRM8PiNzh5q2glKymetKDabmCoaH0bypKCThFy+WcFefn3ly2COjf
I3L4ghN0mCXKAmp1lHtWjA27yTv8amnHjESVh+7WQ+oK6P/ZtDp5dVD2r+APFaZn
ctLfIDCDx/t9DDnOSYgJHEzowDvAVO0exYUBPN2l6mewiMZ/5n9NfhvT9QIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFBV+uRFLAX8AtymKO/8ThhbhMziZMB8GA1UdIwQY
MBaAFDxRDiG6HJ1gBYkTAlWjaSjxyPI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEZFT0lib2NuV0FGaVJNQ1ZhTnBLUEhJOGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTIt
YTk3NjVlZGM3OTVjLzEvRlg2NUVVc0Jmd0MzS1lvN194T0dGdUV6T0prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTItYTk3NjVlZGM3OTVj
LzEvUEZFT0lib2NuV0FGaVJNQ1ZhTnBLUEhJOGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAaBAIAATAUAwQDwS6AMAwD
BAPCABgDBADCABowKgQCAAIwJAMHACABBngAIAMHACABBngAJAMHACABBnwBvAMH
AyoCCFD/4DANBgkqhkiG9w0BAQsFAAOCAQEAM5CH4JIK/fcFhgAFczt/UQpXAB1T
XE2PGtiUZU3xKe78anVoG6hoX/OUd3bjtn0iS6mbtf2QDQ31Ds37K+aCPFucJrBK
YGPPxr9NpEqbGpiw40SSftDJvUCvSZVQMkvtrtoDInVt1+heB9cj+TUXgg3VVk+h
xlHGwRamOiitVFA9A8xhXhI2XAjn8GINUGwe2KdoRmpgnNjye7/ZYi522qwqMBv0
y7/hDkdFy0vDfGOOtJ26QCxLRsHP661ERYzpM0vlOYfWyj6MGI9AOahMPRClZEXq
ErnOW+optHTLGhfzRAX5kf/i00uXsZaCk+490xR/nGuGNAje3U2FY/Snpw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:49 2026 by rpki-client