Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/FSiFrTEBo5yHj-xc5IzGwLaQKOc.roa
File: FSiFrTEBo5yHj-xc5IzGwLaQKOc.roa (raw, json)
Hash identifier: 7x+tFQrBrb4c9ke8+5n+wVlnMy0/ZCI2sKbfllBvypU=
Subject key identifier: 15:28:85:AD:31:01:A3:9C:87:8F:EC:5C:E4:8C:C6:C0:B6:90:28:E7
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 01A1DD9AD254A905D85E9FFB45F26A28A70C
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/FSiFrTEBo5yHj-xc5IzGwLaQKOc.roa
Signing time: Sun 15 Nov 2026 05:07:53 +0000
ROA not before: Sun 15 Nov 2026 05:07:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207003
IP address blocks: 142.228.52.0/24 maxlen: 24
142.228.53.0/24 maxlen: 24
142.228.54.0/24 maxlen: 24
185.188.30.0/24 maxlen: 24
185.218.192.0/22 maxlen: 22
185.218.192.0/23 maxlen: 23
185.218.192.0/24 maxlen: 24
185.218.193.0/24 maxlen: 24
185.218.194.0/24 maxlen: 24
185.218.195.0/24 maxlen: 24
193.163.5.0/24 maxlen: 24
2a0b:a700::/29 maxlen: 29
2a0b:dbc0::/29 maxlen: 29
2a10:f2c0::/29 maxlen: 29
2a10:f2c0:1751::/48 maxlen: 48
2a10:f2c0:a001::/48 maxlen: 48
2a10:f2c0:a002::/48 maxlen: 48
2a10:f2c0:a003::/48 maxlen: 48
2a10:f2c0:a004::/48 maxlen: 48
2a10:f2c1::/32 maxlen: 32
2a10:f2c2::/32 maxlen: 32
2a10:f2c3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:9a:d2:54:a9:05:d8:5e:9f:fb:45:f2:6a:28:a7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Nov 15 05:07:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=152885ad3101a39c878fec5ce48cc6c0b69028e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:c8:d2:6f:0d:e5:51:d6:d5:79:24:c6:31:
fb:3d:86:6e:8d:96:f7:a9:97:ab:93:d9:8e:df:13:
c7:a3:d6:2a:56:cb:97:dd:eb:1d:23:f3:1d:7c:c8:
ad:dc:65:7c:47:34:a2:f6:63:41:2d:cf:f5:46:70:
c2:b6:26:46:f4:41:71:d4:42:c1:64:b0:44:15:6a:
74:ab:b0:c5:e8:06:39:48:b3:22:10:b3:41:91:f4:
c5:93:2b:ec:a7:d2:b1:4e:1d:e7:71:30:a6:08:5d:
fe:95:d5:2b:51:87:58:da:ac:28:a2:99:a2:c3:c1:
df:d4:05:d0:33:ab:47:63:c8:a6:fd:28:09:28:77:
95:da:23:ff:21:a1:79:46:c2:3f:ab:5e:81:71:d2:
67:04:20:28:f1:e4:ec:be:99:65:c0:28:1a:a9:0b:
7b:7f:a6:46:71:6f:cc:92:d8:a9:e9:ab:ac:ed:76:
18:1e:c7:87:45:65:68:4a:ac:50:9f:52:98:9b:8c:
9f:96:32:a8:88:d7:65:8e:ba:87:e2:9d:85:0f:27:
02:14:ed:27:39:95:55:25:02:47:d4:54:df:a7:a9:
90:99:20:c2:90:7b:2a:d0:02:26:31:94:38:8b:91:
66:72:3a:0a:5f:af:25:9c:a3:22:ab:30:f2:14:a1:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:28:85:AD:31:01:A3:9C:87:8F:EC:5C:E4:8C:C6:C0:B6:90:28:E7
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/FSiFrTEBo5yHj-xc5IzGwLaQKOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.52.0-142.228.54.255
185.188.30.0/24
185.218.192.0/22
193.163.5.0/24
IPv6:
2a0b:a700::/29
2a0b:dbc0::/29
2a10:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
00:35:6b:87:a7:aa:67:61:38:ad:64:14:0c:55:d2:69:d3:49:
c8:f2:77:95:ae:fa:76:e0:eb:8f:62:6e:e0:9f:c6:ca:93:9c:
56:18:b4:1f:4b:74:29:61:bb:35:c8:4b:c6:99:6a:d5:de:dd:
d6:b0:a3:91:6e:cf:2a:03:da:80:bd:b2:67:ef:87:67:a4:dc:
40:2e:cb:47:a3:16:fc:24:60:12:a7:fc:14:10:b1:64:28:94:
cf:32:4f:13:38:7b:17:f8:88:26:11:02:3c:ff:0e:fb:63:f5:
39:d8:02:cc:c0:31:67:4d:74:5e:1b:e6:ce:6a:23:5e:59:f5:
32:60:bc:62:47:96:f5:dc:3d:1d:e4:ee:a4:47:86:9e:2b:e4:
9b:46:1d:44:2a:2d:ee:21:77:bc:ae:4a:ef:0a:a8:8b:7a:e0:
47:44:44:e7:5a:6a:8f:01:35:00:51:95:c7:3c:f4:eb:91:b3:
50:6f:80:68:b8:98:7f:0f:d7:2d:cb:c0:4e:c3:08:03:9f:cc:
f1:d1:2d:df:31:59:05:1e:d7:14:0a:f9:07:a4:2d:2f:c0:55:
0a:56:ef:eb:4f:32:88:68:6e:cc:4f:dc:76:34:08:3a:52:ff:
1b:e0:14:8d:ff:c6:fc:ef:0d:fe:46:26:73:32:e2:ad:b9:a1:
ae:98:af:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:15 2026 by rpki-client