Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/FLDisamNsDJXm_1lT92yfeRj3fw.roa
File: FLDisamNsDJXm_1lT92yfeRj3fw.roa (raw, json)
Hash identifier: WM25J4c59hU5SI4kz6OM2HoWYEmKXTDdKjYCSlG2JzI=
Subject key identifier: 14:B0:E2:B1:A9:8D:B0:32:57:9B:FD:65:4F:DD:B2:7D:E4:63:DD:FC
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F236910519DE4CE877C51A0AE2186411C
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/FLDisamNsDJXm_1lT92yfeRj3fw.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202131
IP address blocks: 185.52.172.0/23 maxlen: 32
2a04:c740::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:10:51:9d:e4:ce:87:7c:51:a0:ae:21:86:41:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14b0e2b1a98db032579bfd654fddb27de463ddfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:f1:e2:42:6e:ab:12:cf:d7:da:21:9f:33:
40:c1:b0:ab:d4:eb:07:12:e0:5f:11:87:0c:f6:41:
07:23:14:5f:99:6e:5b:c3:64:d6:51:74:c5:f0:f4:
e1:77:45:17:d8:88:4c:a7:0e:73:0b:15:bb:e6:09:
08:a5:4c:92:d6:91:03:71:60:19:a6:59:5f:14:55:
6e:d2:d8:8a:7e:89:17:5c:1b:83:e8:a1:0d:32:ff:
14:d4:0f:56:d3:2a:ee:ee:68:da:07:47:9a:06:43:
f3:39:41:6a:53:22:b8:56:99:ab:ee:2b:15:b3:40:
26:71:5f:94:d6:58:b1:71:a2:ae:d4:c1:55:1e:c6:
52:e8:00:ae:a6:a5:19:99:bb:7a:08:96:5f:ec:0a:
6b:57:ab:c7:4e:63:83:91:c8:e3:fb:47:30:11:46:
3e:bd:1f:a8:1c:1c:8d:90:0d:f0:b6:c7:5a:35:db:
f7:4f:29:13:27:14:ed:1f:04:13:27:93:0e:bf:3c:
5e:e9:03:0d:c8:dc:72:47:3a:a8:0d:06:75:92:aa:
01:6e:e4:a2:a2:33:c8:36:e6:ac:5e:54:da:26:3d:
a6:be:41:8d:9f:77:9f:04:a9:c8:f8:92:ef:c3:49:
bf:5b:32:d5:07:d6:1d:6a:20:8b:24:24:99:6d:9a:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B0:E2:B1:A9:8D:B0:32:57:9B:FD:65:4F:DD:B2:7D:E4:63:DD:FC
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/FLDisamNsDJXm_1lT92yfeRj3fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.172.0/23
IPv6:
2a04:c740::/29
Signature Algorithm: sha256WithRSAEncryption
3d:43:73:5a:f5:24:0b:bc:6b:d0:6d:e6:6b:cb:e8:9a:e0:1d:
d9:e2:11:45:18:c0:d2:b1:02:b8:cb:dc:e4:b9:c5:96:45:75:
a1:3a:d5:9c:ed:38:65:30:f4:61:93:6e:d0:5c:63:7f:35:01:
a1:13:08:2d:28:92:01:f6:cf:1f:b3:d0:d6:7b:d0:b2:02:7d:
f7:34:bf:f8:04:36:50:fb:c3:a1:b7:bb:29:63:b5:77:47:05:
06:71:d1:21:c2:ce:3e:51:33:38:78:70:00:69:f7:0e:43:67:
8e:1f:95:95:45:3b:d8:90:e5:ff:2b:9b:62:df:93:df:d4:a2:
47:be:59:99:cd:be:d2:15:3e:61:45:eb:9d:1e:28:5b:0f:dc:
fa:2d:14:d8:4f:34:6a:9c:19:15:30:b3:eb:ec:2e:81:7f:e8:
99:ef:f5:5c:b0:4a:fe:c4:99:57:4b:d2:15:99:5f:29:20:fa:
15:ee:92:a5:42:55:43:9e:9b:74:a4:c3:cf:82:72:5e:6b:b0:
d6:b9:62:0f:7a:4a:41:14:31:6b:bc:4e:33:0f:50:db:a3:41:
74:f4:a0:5e:15:8f:75:e1:9f:96:d6:ce:f6:be:db:67:58:e2:
ea:94:eb:13:cf:9d:da:2d:18:f3:a3:e6:0d:9f:b3:ed:59:bd:
5b:e1:e7:ff
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaRBRneTOh3xRoK4hhkEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YWVlY2E4YWZmMDk5YjJiYWUwNTc4MWRjYThkZDkwMjdm
MGRhMmIwHhcNMjYwNzAyMTUxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGIwZTJiMWE5OGRiMDMyNTc5YmZkNjU0ZmRkYjI3ZGU0NjNkZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+rx4kJuqxLP19ohnzNAwbCr1OsH
EuBfEYcM9kEHIxRfmW5bw2TWUXTF8PThd0UX2IhMpw5zCxW75gkIpUyS1pEDcWAZ
pllfFFVu0tiKfokXXBuD6KENMv8U1A9W0yru7mjaB0eaBkPzOUFqUyK4Vpmr7isV
s0AmcV+U1lixcaKu1MFVHsZS6ACupqUZmbt6CJZf7AprV6vHTmODkcjj+0cwEUY+
vR+oHByNkA3wtsdaNdv3TykTJxTtHwQTJ5MOvzxe6QMNyNxyRzqoDQZ1kqoBbuSi
ojPINuasXlTaJj2mvkGNn3efBKnI+JLvw0m/WzLVB9YdaiCLJCSZbZqKeQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBSw4rGpjbAyV5v9ZU/dsn3kY938MB8GA1UdIwQY
MBaAFCmu7Kiv8JmyuuBXgdyo3ZAn8NorMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It
ZDFhYmY0ZWUzMmNiLzEvRkxEaXNhbU5zREpYbV8xbFQ5MnlmZVJqM2Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi
LzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuTSsMA0E
AgACMAcDBQMqBMdAMA0GCSqGSIb3DQEBCwUAA4IBAQA9Q3Na9SQLvGvQbeZry+ia
4B3Z4hFFGMDSsQK4y9zkucWWRXWhOtWc7ThlMPRhk27QXGN/NQGhEwgtKJIB9s8f
s9DWe9CyAn33NL/4BDZQ+8Oht7spY7V3RwUGcdEhws4+UTM4eHAAafcOQ2eOH5WV
RTvYkOX/K5ti35Pf1KJHvlmZzb7SFT5hReudHihbD9z6LRTYTzRqnBkVMLPr7C6B
f+iZ7/VcsEr+xJlXS9IVmV8pIPoV7pKlQlVDnpt0pMPPgnJea7DWuWIPekpBFDFr
vE4zD1Dbo0F09KBeFY914Z+W1s72vttnWOLqlOsTz53aLRjzo+YNn7PtWb1b4ef/
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:57:56 2026 by rpki-client