Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/FZO46jZZywFStxztAoIWiKo3_rI.roa
File: FZO46jZZywFStxztAoIWiKo3_rI.roa (raw, json)
Hash identifier: uRBlHT/tovWzmUNfTfDAIOM6+07YhHrBTka3lpjHcp8=
Subject key identifier: 15:93:B8:EA:36:59:CB:01:52:B7:1C:ED:02:82:16:88:AA:37:FE:B2
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01A0CDA6E68D9538210F4383FF712D62C472
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/FZO46jZZywFStxztAoIWiKo3_rI.roa
Signing time: Wed 23 Sep 2026 09:44:22 +0000
ROA not before: Wed 23 Sep 2026 09:44:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208392
IP address blocks: 109.120.145.0/24 maxlen: 24
109.120.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:a6:e6:8d:95:38:21:0f:43:83:ff:71:2d:62:c4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Sep 23 09:44:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1593b8ea3659cb0152b71ced02821688aa37feb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:59:d0:27:df:40:ad:dd:d7:72:dd:3b:b5:
13:62:ba:4e:b4:61:62:6d:56:29:72:ef:c1:a4:91:
b7:5d:fd:5c:a6:42:35:ae:f4:2c:8c:fc:77:04:34:
0a:c7:26:1c:02:6a:f0:8a:a0:69:82:38:03:33:91:
e1:42:23:5a:7d:65:80:b4:94:a7:a6:8d:c3:e7:19:
e3:62:00:9e:48:98:ea:3c:05:34:9e:42:66:bb:90:
0c:9c:a6:68:53:f7:fe:20:ce:40:f9:df:da:a9:5e:
29:b1:38:d9:76:f0:41:79:10:2b:9b:75:77:e8:84:
18:42:a3:34:92:d0:2f:dd:fe:89:c7:67:af:f2:f3:
cd:d1:57:0d:d6:6f:75:94:9c:7b:f7:a0:7f:ad:5c:
fb:66:9d:42:84:2c:b9:92:88:42:65:76:32:56:72:
f1:a8:7c:6b:59:b6:9a:ac:19:38:f1:a5:db:58:d4:
5e:57:70:a0:43:d5:09:a8:d5:2c:1a:ed:46:50:8b:
05:57:2b:15:57:4f:af:7d:61:44:f3:4d:c7:09:25:
71:e8:92:bb:d0:c4:52:45:e5:8f:1b:09:93:d4:fc:
a2:b6:49:e4:bd:61:86:b1:3f:2f:64:64:84:47:b9:
2b:2a:14:8d:08:e1:2b:f2:bb:59:36:bf:b0:f6:f3:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:93:B8:EA:36:59:CB:01:52:B7:1C:ED:02:82:16:88:AA:37:FE:B2
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/FZO46jZZywFStxztAoIWiKo3_rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.145.0-109.120.146.255
Signature Algorithm: sha256WithRSAEncryption
0a:30:29:f8:42:39:bf:c7:0e:d3:c3:fb:92:24:e4:d1:91:7b:
2d:76:57:04:3d:fd:d1:1c:ce:2c:ca:03:f7:b7:fa:c4:92:50:
d9:1e:d7:f0:4a:65:43:4f:04:5c:eb:24:12:a7:8a:65:5b:51:
cc:d2:86:48:c5:54:7e:3b:fb:a1:8e:5b:ab:6e:0e:91:71:cf:
12:95:13:34:0c:f0:1b:8d:fc:04:26:2e:f4:4f:0e:c8:b2:f3:
9f:9b:1b:95:93:8a:0d:f0:49:9f:ec:67:c5:bb:4d:a6:e2:aa:
b8:ac:44:6f:60:8e:1c:f6:ad:0b:05:05:e6:e9:d3:8b:7e:66:
e0:1c:55:11:9e:1f:48:f2:02:77:0d:d3:f5:b9:99:ac:f7:8a:
47:0c:24:a4:57:18:97:b5:ff:7c:cb:a4:5c:9d:25:30:05:68:
dc:c6:e1:45:90:b9:5c:43:35:d0:fc:a0:bc:ca:38:91:a1:2d:
53:f0:12:50:b4:8c:6d:c4:11:fe:4d:e4:73:6b:a9:b1:ba:2c:
e1:e8:46:24:64:54:39:ee:15:98:50:d3:66:d3:cf:b5:9d:b4:
33:f0:94:54:4c:dc:16:e0:6f:44:5d:9c:cd:a4:ca:a2:85:a8:
91:c0:c9:1a:7e:a5:32:b6:7c:4e:d4:ce:77:81:03:13:a9:3a:
7e:d5:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:03:41 2026 by rpki-client