Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FsO1q4S0i0xaLO4891Pw9gOWeTE.roa
File: FsO1q4S0i0xaLO4891Pw9gOWeTE.roa (raw, json)
Hash identifier: UB1FgaUoRugLsBLE8fywxIRHxtuh4PDtnOLx0oGnA2c=
Subject key identifier: 16:C3:B5:AB:84:B4:8B:4C:5A:2C:EE:3C:F7:53:F0:F6:03:96:79:31
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1CEF996439BFC4524FF5BFB22C70EB7C6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FsO1q4S0i0xaLO4891Pw9gOWeTE.roa
Signing time: Thu 12 Nov 2026 08:57:05 +0000
ROA not before: Thu 12 Nov 2026 08:57:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218383
IP address blocks: 78.154.116.0/24 maxlen: 24
82.110.226.0/24 maxlen: 24
87.85.129.0/24 maxlen: 24
194.242.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:f9:96:43:9b:fc:45:24:ff:5b:fb:22:c7:0e:b7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 12 08:57:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16c3b5ab84b48b4c5a2cee3cf753f0f603967931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:7f:0c:01:74:c6:5a:c1:eb:dd:e4:04:19:
7e:3d:91:fc:7c:8b:33:1d:c1:47:b6:68:c5:ab:46:
d1:b8:ee:d4:d3:20:77:04:27:8c:18:8c:b5:dc:f3:
29:5a:34:70:87:7c:af:ea:b0:c7:23:ab:0f:d8:d5:
50:9f:f6:9f:8c:3d:60:62:4d:25:21:2b:53:e6:92:
58:1a:6f:37:36:47:53:03:f1:13:df:ca:d8:0a:96:
6b:c5:01:eb:bc:b6:0b:e4:9b:ae:f2:fe:81:b0:1d:
fa:6f:ae:ff:d5:ed:d3:b9:13:cc:e8:d7:19:2d:ff:
b0:77:db:50:55:a5:c1:ef:3d:af:2e:24:f9:3a:1c:
6b:8c:7b:91:fd:8a:b9:9b:95:d2:6b:47:cd:95:e9:
f4:c2:24:b4:aa:db:a5:a9:75:dc:bb:a8:f0:89:de:
62:e0:4a:5d:06:dc:bf:dd:06:20:75:74:0a:6c:bd:
c0:f1:b1:f4:5e:18:ee:bd:56:a7:bf:92:11:4e:a9:
48:b5:e1:9d:3f:6e:1d:11:43:3b:a2:b7:e7:14:57:
c3:b9:6d:fb:72:0b:bc:06:38:9a:08:9c:3e:63:6a:
d5:21:4d:78:7d:90:79:df:af:3e:35:b0:7b:e7:82:
20:e5:87:61:b5:4b:7a:f0:fa:d4:d0:af:42:8d:5c:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C3:B5:AB:84:B4:8B:4C:5A:2C:EE:3C:F7:53:F0:F6:03:96:79:31
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FsO1q4S0i0xaLO4891Pw9gOWeTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.116.0/24
82.110.226.0/24
87.85.129.0/24
194.242.132.0/24
Signature Algorithm: sha256WithRSAEncryption
72:7e:67:fb:c9:8c:86:50:0c:d7:2e:2d:d5:31:fd:0b:94:7b:
36:e7:eb:e3:1e:8e:70:9e:f0:f4:8b:22:20:70:f5:41:30:b3:
43:66:f3:ac:a4:6f:4c:2d:3e:a6:d2:e3:8a:4e:36:7b:ed:7e:
52:88:b3:36:9b:41:e1:e6:59:35:67:13:2b:4b:d6:0c:93:86:
31:92:18:f3:7c:9d:46:37:48:bf:74:1b:27:66:16:dc:85:71:
05:cc:7d:ed:f0:f8:6d:b3:32:97:4c:63:80:04:a2:8f:82:a6:
f2:1a:99:b9:f4:0b:d6:77:6c:ef:d3:17:d7:4a:3e:02:c5:c9:
05:dc:53:03:fc:b3:bc:43:24:80:56:6b:2b:60:2e:64:8f:58:
d5:cd:38:d7:96:f4:ff:f0:82:0a:84:dc:bc:4b:07:46:7c:2d:
c9:9f:9e:7d:5d:5d:b3:8a:22:0a:ec:dc:d7:b7:be:b6:a6:2b:
2d:da:89:f6:b5:61:9d:e0:f1:79:42:d8:8b:30:f7:9d:31:e0:
f4:c9:62:e7:7f:2f:1f:88:9e:eb:99:20:35:f3:c1:56:1a:71:
4f:bb:be:78:57:1f:57:84:17:2c:4a:8e:d2:14:77:95:ca:1e:
26:e5:16:3a:bb:e3:14:7c:d3:90:e7:b6:cc:a4:b1:98:47:7c:
d3:8b:9a:91
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaHO+ZZDm/xFJP9b+yLHDrfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMTEyMDg1NzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmMzYjVhYjg0YjQ4YjRjNWEyY2VlM2NmNzUzZjBmNjAzOTY3OTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufF/DAF0xlrB693kBBl+PZH8fIsz
HcFHtmjFq0bRuO7U0yB3BCeMGIy13PMpWjRwh3yv6rDHI6sP2NVQn/afjD1gYk0l
IStT5pJYGm83NkdTA/ET38rYCpZrxQHrvLYL5Juu8v6BsB36b67/1e3TuRPM6NcZ
Lf+wd9tQVaXB7z2vLiT5OhxrjHuR/Yq5m5XSa0fNlen0wiS0qtulqXXcu6jwid5i
4EpdBty/3QYgdXQKbL3A8bH0XhjuvVanv5IRTqlIteGdP24dEUM7orfnFFfDuW37
cgu8BjiaCJw+Y2rVIU14fZB5368+NbB754Ig5YdhtUt68PrU0K9CjVzzGwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBbDtauEtItMWizuPPdT8PYDlnkxMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvRnNPMXE0UzBpMHhhTE80ODkxUHc5Z09XZVRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATpp0AwQA
Um7iAwQAV1WBAwQAwvKEMA0GCSqGSIb3DQEBCwUAA4IBAQByfmf7yYyGUAzXLi3V
Mf0LlHs25+vjHo5wnvD0iyIgcPVBMLNDZvOspG9MLT6m0uOKTjZ77X5SiLM2m0Hh
5lk1ZxMrS9YMk4YxkhjzfJ1GN0i/dBsnZhbchXEFzH3t8PhtszKXTGOABKKPgqby
Gpm59AvWd2zv0xfXSj4CxckF3FMD/LO8QySAVmsrYC5kj1jVzTjXlvT/8IIKhNy8
SwdGfC3Jn559XV2ziiIK7NzXt762pist2on2tWGd4PF5QtiLMPedMeD0yWLnfy8f
iJ7rmSA188FWGnFPu754Vx9XhBcsSo7SFHeVyh4m5RY6u+MUfNOQ57bMpLGYR3zT
i5qR
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:57 2026 by rpki-client