Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/FcXv6_6IBhw3gOJhd-oIzN0MdTA.roa
File: FcXv6_6IBhw3gOJhd-oIzN0MdTA.roa (raw, json)
Hash identifier: QOZ8gHmHm+d2woOpHnxCfU5p8HTqH4kCDsC9bYWmmqM=
Subject key identifier: 15:C5:EF:EB:FE:88:06:1C:37:80:E2:61:77:EA:08:CC:DD:0C:75:30
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 019F84AFFDE9B51DE3DA9F2A43E7BDF07242
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/FcXv6_6IBhw3gOJhd-oIzN0MdTA.roa
Signing time: Tue 21 Jul 2026 12:39:14 +0000
ROA not before: Tue 21 Jul 2026 12:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200040
IP address blocks: 131.222.240.0/24 maxlen: 24
131.222.241.0/24 maxlen: 24
185.190.16.0/24 maxlen: 24
185.190.19.0/24 maxlen: 24
195.18.8.0/24 maxlen: 24
2a14:10c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:af:fd:e9:b5:1d:e3:da:9f:2a:43:e7:bd:f0:72:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Jul 21 12:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15c5efebfe88061c3780e26177ea08ccdd0c7530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:25:7e:19:fc:3c:5f:ba:76:26:23:8a:7f:
a5:cb:fa:61:a8:e5:6f:ca:31:bb:bf:2c:a9:3d:a3:
93:4c:b2:5d:af:9d:c2:32:94:90:37:31:bd:53:1f:
bb:7d:0c:15:b3:2e:19:65:e8:6a:5d:46:65:44:0a:
9e:18:44:c7:23:be:de:87:95:cd:bd:83:b7:61:f9:
8c:ad:f1:14:fa:cc:d6:61:4f:69:0e:8f:ed:9a:56:
20:43:c2:ec:12:f6:02:24:00:d5:41:e2:e6:31:cc:
4b:59:66:6c:47:38:87:7f:7f:58:c1:e2:5b:1d:2c:
b5:3c:78:24:12:50:3e:63:c0:46:6a:aa:66:f5:5d:
6f:5d:57:1a:7b:43:75:be:95:c1:2d:1f:10:0b:0f:
84:5e:8a:1c:04:c1:95:df:94:27:26:ef:53:9d:8c:
4b:56:31:01:ae:ab:53:df:28:70:69:ef:31:62:13:
d7:20:68:20:69:9c:59:38:14:18:f2:f9:65:99:ba:
d9:3c:65:06:47:fc:fd:35:ea:1e:cb:46:21:51:b9:
d1:d6:52:dc:c4:6f:b4:d7:71:4a:68:be:8a:bc:b5:
43:7c:d7:bd:55:b5:63:95:1c:9f:a8:29:a9:0a:73:
24:77:43:b9:98:ac:10:ba:bd:cc:53:0c:0a:37:a1:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C5:EF:EB:FE:88:06:1C:37:80:E2:61:77:EA:08:CC:DD:0C:75:30
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/FcXv6_6IBhw3gOJhd-oIzN0MdTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.240.0/23
185.190.16.0/24
185.190.19.0/24
195.18.8.0/24
IPv6:
2a14:10c0::/29
Signature Algorithm: sha256WithRSAEncryption
43:c0:8f:e0:2a:15:e5:65:00:95:bf:b9:01:d3:b8:bb:c0:6f:
bd:38:88:5c:32:46:9e:f2:03:4f:ab:7c:61:78:52:e4:b0:b6:
de:9c:f3:7b:93:e6:cd:5d:dd:cc:bc:a5:cb:c4:86:77:68:cc:
02:63:bc:e3:86:cc:00:c1:6b:fa:90:24:7d:09:42:b6:0f:c9:
89:9c:8c:55:e0:1a:73:5d:aa:b8:67:b1:26:f0:2b:f2:5d:fe:
0a:ab:23:81:96:8d:6d:fd:e4:32:c8:16:47:23:c6:2c:63:15:
aa:2d:b7:ab:ff:ad:df:36:29:d0:30:ed:e7:85:81:5a:df:4c:
e4:af:64:0a:49:55:4f:c0:f7:60:26:f1:d4:c2:ff:0b:1f:3e:
5b:46:37:80:9d:f1:97:3c:a1:6c:bb:a5:91:45:30:38:84:56:
9f:57:b7:11:ba:59:e8:c9:a3:c9:c7:81:9d:f3:bf:82:0a:30:
3d:fd:9f:10:f6:50:4a:b9:87:3b:44:72:c9:74:ac:a2:05:2d:
5f:88:63:bf:ae:a4:87:a4:5a:19:02:4c:c3:a9:b6:a4:16:79:
3b:2f:40:09:4e:45:29:de:c0:d8:0e:82:ec:8c:b7:a0:19:2b:
9c:6c:c0:e6:c9:8f:19:07:65:13:be:33:fe:8f:2a:4f:1a:86:
28:11:7e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:46 2026 by rpki-client