Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/FbTqFwavX1V5ry-D-hE3prnfYdE.roa
File: FbTqFwavX1V5ry-D-hE3prnfYdE.roa (raw, json)
Hash identifier: cQafbxFF5nsSSLaewVTuIpYBzEd97VxONOF05tps7Pc=
Subject key identifier: 15:B4:EA:17:06:AF:5F:55:79:AF:2F:83:FA:11:37:A6:B9:DF:61:D1
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019DDDEB79A507CFA00EF369498B5EA6E3EB
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/FbTqFwavX1V5ry-D-hE3prnfYdE.roa
Signing time: Thu 30 Apr 2026 10:24:49 +0000
ROA not before: Thu 30 Apr 2026 10:24:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34879
IP address blocks: 195.208.64.0/20 maxlen: 24
195.209.64.0/24 maxlen: 24
195.209.65.0/24 maxlen: 24
195.209.66.0/24 maxlen: 24
195.209.67.0/24 maxlen: 24
195.209.68.0/24 maxlen: 24
195.209.69.0/24 maxlen: 24
195.209.70.0/24 maxlen: 24
195.209.71.0/24 maxlen: 24
195.209.72.0/23 maxlen: 24
195.209.74.0/24 maxlen: 24
195.209.75.0/24 maxlen: 24
195.209.76.0/24 maxlen: 24
195.209.77.0/24 maxlen: 24
195.209.78.0/24 maxlen: 24
195.209.79.0/24 maxlen: 24
195.209.80.0/24 maxlen: 24
195.209.81.0/24 maxlen: 24
195.209.82.0/24 maxlen: 24
195.209.83.0/24 maxlen: 24
195.209.84.0/24 maxlen: 24
195.209.85.0/24 maxlen: 24
195.209.86.0/24 maxlen: 24
195.209.87.0/24 maxlen: 24
195.209.88.0/21 maxlen: 24
195.209.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:eb:79:a5:07:cf:a0:0e:f3:69:49:8b:5e:a6:e3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Apr 30 10:24:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15b4ea1706af5f5579af2f83fa1137a6b9df61d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:9d:32:3b:cc:23:e6:d5:3d:d8:40:54:fc:
d5:68:9d:c6:d5:56:1f:8e:bd:0c:3a:85:e7:16:3a:
d5:ed:ac:ac:4f:7c:b7:6d:34:37:4a:a8:b4:9c:c3:
ff:ad:47:ee:eb:70:5a:d5:aa:ab:2c:d1:9d:10:27:
2b:45:e7:8c:ef:eb:d7:74:75:ea:12:43:ec:35:c4:
1c:75:db:32:57:30:54:a0:02:71:f5:de:4e:b1:9b:
06:56:f5:16:cd:19:94:c6:a0:0b:a5:e5:85:60:52:
5c:7c:04:c7:67:bb:6a:bb:61:d0:14:1e:57:65:14:
ba:27:0f:0d:48:1f:51:d6:ea:de:1b:71:e7:f9:ac:
51:ce:28:ad:4b:53:68:1e:24:3c:64:1f:f8:77:c6:
7b:3e:87:91:dd:fa:2e:28:8d:f8:64:dc:48:d7:43:
4d:d8:a0:ba:c9:32:3d:48:3e:1e:ca:14:37:03:23:
b6:58:26:5b:ef:01:f8:00:4b:ff:a1:b9:af:ba:fa:
24:f0:c6:a1:52:22:f3:f7:7b:b6:c9:4b:14:6b:4b:
ac:31:9a:03:67:7c:07:47:e1:35:e0:df:36:0b:3a:
cf:86:e3:c3:b2:6b:d0:65:98:52:db:dd:32:fd:a3:
4b:e6:92:56:87:56:22:eb:ff:c0:07:d5:ee:f5:05:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B4:EA:17:06:AF:5F:55:79:AF:2F:83:FA:11:37:A6:B9:DF:61:D1
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/FbTqFwavX1V5ry-D-hE3prnfYdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.64.0/20
195.209.64.0/19
195.209.192.0/20
Signature Algorithm: sha256WithRSAEncryption
15:07:09:0b:7c:d3:cc:ff:3c:6f:e7:2a:ea:9a:49:b3:da:74:
d6:0c:e7:1c:de:a6:25:04:97:76:45:4e:bd:60:af:59:d3:96:
81:4f:4d:b0:5b:7a:38:9d:a7:39:48:3b:73:a8:fb:a2:65:a3:
d9:55:e7:81:ce:1f:66:0b:5f:f6:2c:64:37:10:f2:4f:18:3b:
36:dc:c4:68:23:58:f4:20:1d:ad:32:98:5a:18:93:0e:cb:77:
3f:b5:fc:86:73:f1:ab:1b:b8:37:55:a3:75:55:74:93:ed:fe:
f0:83:a7:de:70:d5:6c:67:9e:fc:02:00:1d:e2:ec:9c:a4:39:
2b:54:ed:45:0e:2b:b6:95:4e:85:fd:04:b4:2c:e4:a4:ef:6e:
2b:3c:5e:08:65:f1:ab:89:1b:40:eb:71:17:34:42:41:87:29:
7a:e7:0f:ba:14:94:a7:e3:dd:45:ce:96:5b:36:fd:48:c4:87:
0a:c5:6b:3b:6a:f6:46:7e:1d:b7:ba:82:cf:99:a0:a6:7e:7e:
20:b7:ce:ab:73:fe:98:9a:28:f3:5b:51:01:8e:02:eb:a1:71:
25:56:b2:66:c0:a2:ae:b1:50:d7:98:72:12:43:9d:e8:40:9f:
9a:22:8d:57:55:d5:86:89:da:2e:42:cf:6f:49:96:ed:bb:3d:
89:31:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:21 2026 by rpki-client