Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/FuMfqL6UHDl83J7ntPBqlyL1ZJs.roa
File: FuMfqL6UHDl83J7ntPBqlyL1ZJs.roa (raw, json)
Hash identifier: pa0fPwEB+esydMhpBokgB7+SeI4p5Cp3+wHPwmlwHu0=
Subject key identifier: 16:E3:1F:A8:BE:94:1C:39:7C:DC:9E:E7:B4:F0:6A:97:22:F5:64:9B
Certificate issuer: /CN=ea146a79f737efff756d48e35a8a05b97022214f
Certificate serial: 019F2369158D18618AE39DF20FE8B076CD57
Authority key identifier: EA:14:6A:79:F7:37:EF:FF:75:6D:48:E3:5A:8A:05:B9:70:22:21:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/FuMfqL6UHDl83J7ntPBqlyL1ZJs.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12676
IP address blocks: 88.205.0.0/20 maxlen: 24
88.205.32.0/19 maxlen: 24
88.205.64.0/19 maxlen: 24
88.205.96.0/19 maxlen: 24
185.90.228.0/22 maxlen: 24
212.46.96.0/19 maxlen: 24
213.9.0.0/17 maxlen: 24
2a02:4c00::/32 maxlen: 40
2a02:4c00::/40 maxlen: 40
2a02:4c00:100::/40 maxlen: 40
2a02:4c01::/32 maxlen: 32
2a02:4c02::/32 maxlen: 32
2a02:4c03::/32 maxlen: 32
2a02:4c04::/32 maxlen: 32
2a02:4c05::/32 maxlen: 32
2a02:4c06::/32 maxlen: 32
2a02:4c07::/32 maxlen: 34
2a02:4c07:4000::/34 maxlen: 34
2a02:4c07:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:15:8d:18:61:8a:e3:9d:f2:0f:e8:b0:76:cd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea146a79f737efff756d48e35a8a05b97022214f
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16e31fa8be941c397cdc9ee7b4f06a9722f5649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:52:66:47:b2:50:cd:c7:16:5d:00:12:7c:
ab:35:31:31:5f:e1:71:bf:38:ec:90:64:7d:60:60:
6e:10:53:ad:e2:5c:c1:b6:db:a2:e5:ed:78:93:d5:
d2:51:91:41:5d:d5:3a:30:20:68:d0:a2:d1:eb:72:
9e:ab:1d:7c:ea:c5:cc:b9:25:3a:45:89:0a:dd:44:
95:b8:40:b5:c7:ba:1f:4a:45:ba:4e:92:c7:48:e5:
bb:92:0c:fb:cd:94:ad:c5:71:24:65:77:a7:e5:69:
39:b6:f3:93:0c:a8:2f:10:99:f5:68:70:57:d0:a6:
1f:79:da:ce:77:0e:36:e9:19:72:a0:57:3a:a5:4b:
fd:73:4e:14:42:ce:0b:65:7f:f0:ae:ce:36:8c:88:
a5:7b:ff:59:ab:3b:5c:cf:a5:ae:9a:bc:f8:bb:04:
75:ef:19:f8:05:c3:30:5b:b6:97:5c:a4:50:87:29:
a0:4f:1c:05:45:2c:89:e1:f5:56:59:e4:02:e4:a1:
1b:4a:0b:1e:5a:62:5b:0c:20:f6:fe:76:7a:f1:0b:
f5:15:2e:6c:9a:97:bf:f4:c4:43:ea:56:fc:69:b4:
b0:d5:29:4d:62:6d:da:57:29:41:e2:ab:b0:64:a9:
44:47:b6:44:fa:34:92:3d:d2:02:40:4b:f8:48:4b:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E3:1F:A8:BE:94:1C:39:7C:DC:9E:E7:B4:F0:6A:97:22:F5:64:9B
X509v3 Authority Key Identifier:
keyid:EA:14:6A:79:F7:37:EF:FF:75:6D:48:E3:5A:8A:05:B9:70:22:21:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/FuMfqL6UHDl83J7ntPBqlyL1ZJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.205.0.0/20
88.205.32.0-88.205.127.255
185.90.228.0/22
212.46.96.0/19
213.9.0.0/17
IPv6:
2a02:4c00::/29
Signature Algorithm: sha256WithRSAEncryption
31:f5:e7:f7:7a:ec:c7:4a:a4:c4:50:20:90:f2:4a:02:54:6a:
b3:7d:a4:67:08:09:14:46:9c:31:f5:2d:b6:02:0c:b7:69:1d:
91:96:da:66:0f:de:2c:19:7a:6a:78:01:71:a0:aa:3d:fb:75:
29:7c:2a:95:af:8c:e5:fa:63:e1:ea:c8:57:78:d2:c1:85:20:
e6:96:73:e2:12:b9:64:a1:46:ef:c0:8b:d9:47:db:f4:fb:34:
a1:90:07:77:b7:e1:70:41:a5:61:a5:5a:61:9d:73:aa:b9:6a:
34:79:57:04:a8:dc:eb:20:66:b6:14:da:25:16:25:4b:ef:0c:
71:31:10:21:7c:a8:18:e8:d0:b5:64:06:44:e4:1c:a8:78:67:
59:30:d2:eb:ba:a6:5c:a4:cd:63:22:04:8c:16:b6:ae:8b:e9:
0b:36:00:fd:5b:e3:04:23:99:91:48:85:d4:8c:eb:02:96:a2:
bb:d5:a8:ad:09:96:f8:c9:5f:ea:4c:5b:27:5c:4c:d9:ae:d1:
9c:7e:0f:44:fa:35:05:f0:b2:6b:cf:6e:55:a5:1d:96:b5:9d:
91:55:ea:ed:d9:7d:6b:93:8e:e3:19:2f:a7:05:b9:6e:0c:bd:
f4:35:c3:09:ea:50:f9:2b:21:37:4e:45:6b:1c:6a:76:7b:a0:
06:21:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:35:13 2026 by rpki-client