Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/fl2pyBnIoQ-VEdTa69hXXV6H5mw.roa
File: fl2pyBnIoQ-VEdTa69hXXV6H5mw.roa (raw, json)
Hash identifier: EGcyAF9xhaMQ1ne1hnq1kD386OD8JebtGbSKaTIP2q4=
Subject key identifier: 7E:5D:A9:C8:19:C8:A1:0F:95:11:D4:DA:EB:D8:57:5D:5E:87:E6:6C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 01A0C308CAF872D24EE08324534E098387FF
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/fl2pyBnIoQ-VEdTa69hXXV6H5mw.roa
Signing time: Mon 21 Sep 2026 08:15:28 +0000
ROA not before: Mon 21 Sep 2026 08:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47406
IP address blocks: 160.202.28.0/22 maxlen: 24
185.118.72.0/22 maxlen: 24
185.123.36.0/22 maxlen: 24
185.154.88.0/22 maxlen: 24
185.176.200.0/22 maxlen: 24
185.211.12.0/22 maxlen: 24
185.211.15.0/24 maxlen: 24
2a06:9240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:08:ca:f8:72:d2:4e:e0:83:24:53:4e:09:83:87:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Sep 21 08:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e5da9c819c8a10f9511d4daebd8575d5e87e66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:51:46:91:5a:08:ac:6a:10:c5:a8:48:ee:
99:3f:b3:fc:3c:02:d8:73:5c:17:97:d5:2b:54:bb:
47:b6:85:c2:3a:14:94:d4:48:4f:40:0a:6e:2d:99:
74:51:de:89:48:7d:88:f3:a3:42:ac:88:c3:a3:58:
5b:39:79:7b:c8:09:3c:e7:d8:76:f7:8f:fb:0a:de:
82:95:f4:e9:ab:cd:20:40:4f:c3:11:09:76:2b:d0:
c1:a2:2c:45:b5:95:dd:66:44:02:f8:cb:73:80:68:
ba:56:d6:41:ea:39:a0:67:b1:8c:d8:82:b1:a7:9d:
0b:b7:8b:f6:27:c0:33:c6:c7:48:b5:f4:ad:87:b6:
ab:68:1a:a7:2d:0a:34:08:c0:7f:78:0a:10:ba:82:
2f:4d:0c:fa:a5:6f:ef:80:b1:3c:11:bf:02:e1:7c:
08:77:e8:b9:d9:fc:64:34:82:f4:96:86:06:4c:78:
cb:cb:0a:bf:84:e8:4a:b6:d4:59:8f:80:ba:76:43:
da:22:c0:5e:03:89:bc:04:11:ad:0b:01:a7:1e:69:
0d:c4:fc:90:a0:ef:a0:14:f7:bd:7e:53:d0:46:5d:
f2:32:7b:03:07:f5:d7:52:66:b8:fd:3e:e3:7d:98:
e5:cf:22:bd:f9:86:0c:86:8f:6b:c6:f5:17:8d:dc:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5D:A9:C8:19:C8:A1:0F:95:11:D4:DA:EB:D8:57:5D:5E:87:E6:6C
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/fl2pyBnIoQ-VEdTa69hXXV6H5mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.28.0/22
185.118.72.0/22
185.123.36.0/22
185.154.88.0/22
185.176.200.0/22
185.211.12.0/22
IPv6:
2a06:9240::/29
Signature Algorithm: sha256WithRSAEncryption
40:8b:52:1b:31:1d:c7:da:46:3c:80:ae:7a:44:e8:96:32:49:
d4:13:11:1f:ac:6d:c4:69:d4:5d:6c:87:36:ed:a1:2d:51:da:
a1:58:81:82:ee:b4:43:4e:12:58:1c:bf:27:26:47:1a:49:5c:
c6:d7:13:82:f9:9b:fb:4e:93:7c:9e:61:18:0f:e3:06:99:39:
ec:eb:d2:3e:99:54:4d:79:db:57:db:b5:0f:07:f6:e3:14:6a:
f0:44:1b:22:2c:a2:cd:5f:96:52:ba:52:63:29:47:99:f8:b1:
54:4f:18:1a:32:c4:42:40:8e:78:a6:a5:72:cb:7a:bf:91:b0:
4b:c7:38:c3:f4:5a:14:ad:78:c3:33:66:20:fc:ae:49:d3:82:
d5:7e:38:b2:47:d0:69:51:17:eb:9c:f5:87:6a:02:57:84:ae:
13:de:83:c6:ec:5d:4e:b1:3c:31:dc:ed:d9:2f:5a:5b:f1:b2:
bf:4b:23:eb:ad:99:88:fc:1c:b8:67:f9:d7:7c:ad:9d:4a:e4:
2e:3f:4f:a9:bc:19:f8:0f:be:8f:e9:32:1b:54:3e:43:d1:7a:
c5:b2:04:7b:c6:b9:85:11:aa:2a:af:ce:e4:dd:27:11:af:0e:
a9:5e:f9:21:cb:92:06:a5:79:d4:cf:3c:46:ce:ad:98:b4:34:
67:f0:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:52 2026 by rpki-client