Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/FbAKxqRl7b3MkUokRiA1JVNFWl0.roa
File: FbAKxqRl7b3MkUokRiA1JVNFWl0.roa (raw, json)
Hash identifier: LKX3SQX6NsbnTwa6NWn9h4EDhbC8QTDK/pl40mYXBaI=
Subject key identifier: 15:B0:0A:C6:A4:65:ED:BD:CC:91:4A:24:46:20:35:25:53:45:5A:5D
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 019CDD5DB151ADB53EFB554E28443DABEA55
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/FbAKxqRl7b3MkUokRiA1JVNFWl0.roa
Signing time: Wed 11 Mar 2026 14:47:10 +0000
ROA not before: Wed 11 Mar 2026 14:47:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205942
IP address blocks: 80.77.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:5d:b1:51:ad:b5:3e:fb:55:4e:28:44:3d:ab:ea:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Mar 11 14:47:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15b00ac6a465edbdcc914a244620352553455a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:da:e5:96:43:0d:72:1b:f5:c9:c2:aa:12:
38:ee:81:5c:01:7e:bf:ba:8c:84:97:0b:db:51:74:
57:e1:7c:38:e7:19:6b:52:2b:a0:d6:8a:56:e7:7d:
6a:b5:ec:b0:8f:dd:72:68:aa:53:41:5c:22:cf:c9:
b4:9e:ed:17:5c:34:2e:99:8d:e9:10:e4:93:9f:84:
ba:69:70:04:d6:af:26:12:03:cb:d2:75:76:14:5d:
5d:0b:f3:b3:e1:80:a4:0d:21:b5:7e:b4:32:f6:c6:
7f:79:09:c3:09:96:17:94:1f:9c:b8:b7:7f:7a:56:
80:09:81:66:f9:0a:1c:ac:dd:6c:cb:10:56:0d:78:
3f:a3:7c:b3:2a:21:e8:28:c3:26:7c:bc:7b:17:be:
18:f9:81:01:f0:f5:54:74:a6:a8:62:d7:26:3e:f3:
67:cc:08:20:ee:a9:1a:e8:fa:85:12:5f:d9:ad:a6:
8f:99:14:5a:cd:4b:e1:2f:a1:e6:0d:e4:46:04:26:
de:31:50:bd:39:87:46:6f:d9:34:6d:2b:10:e3:e9:
f6:67:db:46:92:9c:62:6c:c4:a0:81:00:2f:96:cb:
45:0a:ce:7f:22:ac:8f:98:e0:4f:ad:26:ba:00:99:
95:f0:61:f1:51:75:c8:52:22:81:9c:4d:e1:d2:a2:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B0:0A:C6:A4:65:ED:BD:CC:91:4A:24:46:20:35:25:53:45:5A:5D
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/FbAKxqRl7b3MkUokRiA1JVNFWl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:2b:1c:59:91:56:0f:4f:58:24:26:de:d0:df:81:ac:ad:6b:
3f:b0:5f:1f:b2:14:49:35:dd:30:eb:a2:78:05:51:a7:ab:54:
0f:23:fe:f1:a2:fa:3c:a0:ba:6d:14:7b:ee:5c:14:5d:00:b3:
ee:49:1d:e5:e3:87:6f:f7:c4:f1:c7:ba:08:0c:6c:cc:f8:59:
b4:63:87:fa:df:cb:ce:e7:42:44:31:51:37:b8:0c:fc:a9:c5:
96:34:e6:de:61:64:04:8f:cf:fe:af:df:48:9a:58:1c:84:0e:
71:5c:dd:14:82:1e:c8:28:67:15:26:c9:74:e4:4a:d1:bf:1b:
83:c3:93:1d:7f:67:5f:65:2f:75:ea:1c:e9:fd:c0:2f:fd:a6:
e3:ed:a8:c7:1a:45:db:f3:26:29:be:76:85:c2:3c:c1:57:35:
8c:2a:14:c1:d0:4c:55:94:dc:59:66:53:d3:2f:75:44:6f:45:
23:3c:32:b8:2a:c2:b8:f7:62:f1:35:02:5a:8c:ad:e2:7f:cf:
f8:ef:76:89:e4:65:4d:66:bd:f5:1e:48:02:45:8c:28:c7:cb:
27:ec:e3:f4:e5:38:fa:0f:74:2d:3a:73:05:d6:2f:08:89:da:
7a:a8:06:fd:d6:c3:08:20:5f:13:20:4f:fd:fd:09:1d:a4:13:
b1:a6:ce:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzdXbFRrbU++1VOKEQ9q+pVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0
MzE3MjUwHhcNMjYwMzExMTQ0NzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWIwMGFjNmE0NjVlZGJkY2M5MTRhMjQ0NjIwMzUyNTUzNDU1YTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSja5ZZDDXIb9cnCqhI47oFcAX6/
uoyElwvbUXRX4Xw45xlrUiug1opW531qteywj91yaKpTQVwiz8m0nu0XXDQumY3p
EOSTn4S6aXAE1q8mEgPL0nV2FF1dC/Oz4YCkDSG1frQy9sZ/eQnDCZYXlB+cuLd/
elaACYFm+QocrN1syxBWDXg/o3yzKiHoKMMmfLx7F74Y+YEB8PVUdKaoYtcmPvNn
zAgg7qka6PqFEl/ZraaPmRRazUvhL6HmDeRGBCbeMVC9OYdGb9k0bSsQ4+n2Z9tG
kpxibMSggQAvlstFCs5/IqyPmOBPrSa6AJmV8GHxUXXIUiKBnE3h0qIlEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBWwCsakZe29zJFKJEYgNSVTRVpdMB8GA1UdIwQY
MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt
ZjRjNWZjM2NhMmM0LzEvRmJBS3hxUmw3YjNNa1Vva1JpQTFKVk5GV2wwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0
LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUE2kMA0G
CSqGSIb3DQEBCwUAA4IBAQC2KxxZkVYPT1gkJt7Q34GsrWs/sF8fshRJNd0w66J4
BVGnq1QPI/7xovo8oLptFHvuXBRdALPuSR3l44dv98Txx7oIDGzM+Fm0Y4f638vO
50JEMVE3uAz8qcWWNObeYWQEj8/+r99ImlgchA5xXN0Ugh7IKGcVJsl05ErRvxuD
w5Mdf2dfZS916hzp/cAv/abj7ajHGkXb8yYpvnaFwjzBVzWMKhTB0ExVlNxZZlPT
L3VEb0UjPDK4KsK492LxNQJajK3if8/473aJ5GVNZr31HkgCRYwox8sn7OP05Tj6
D3QtOnMF1i8Iidp6qAb91sMIIF8TIE/9/QkdpBOxps4n
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:29 2026 by rpki-client