Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/FtMZg51tUzPpWWTljAx452AUEnY.roa
File: FtMZg51tUzPpWWTljAx452AUEnY.roa (raw, json)
Hash identifier: Azl4uTerLwkA4yzzvMhJnM0N39SV857Tn7tfTMmNZBM=
Subject key identifier: 16:D3:19:83:9D:6D:53:33:E9:59:64:E5:8C:0C:78:E7:60:14:12:76
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019DDE452F800D91E4127111B97D443EC835
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/FtMZg51tUzPpWWTljAx452AUEnY.roa
Signing time: Thu 30 Apr 2026 12:02:49 +0000
ROA not before: Thu 30 Apr 2026 12:02:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41965
IP address blocks: 77.95.188.0/22 maxlen: 22
185.78.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:45:2f:80:0d:91:e4:12:71:11:b9:7d:44:3e:c8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Apr 30 12:02:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16d319839d6d5333e95964e58c0c78e760141276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:ad:c4:de:76:38:9d:fe:62:1a:25:03:9d:
ee:6d:c4:3c:f3:37:b7:1c:ea:3a:4b:ee:b1:51:7c:
35:0e:70:27:42:9d:b8:9b:c5:80:9c:49:2a:0c:fd:
da:37:55:cc:66:a4:25:26:6b:c2:17:43:f5:97:c7:
82:04:a5:09:78:c2:27:f2:f2:0b:88:20:a3:ea:4a:
f5:90:7e:82:03:77:5c:be:9d:88:5f:0f:9e:d1:2f:
35:98:a9:88:13:94:8b:25:75:41:9d:e1:9f:03:68:
09:0b:05:cf:25:6f:f2:fb:19:e0:84:01:c5:69:8d:
88:3a:b4:7b:5a:9b:a8:42:78:b7:fc:59:72:15:94:
44:ec:80:f1:6e:77:f1:77:15:71:5c:a2:03:27:99:
1f:2a:b8:7d:f2:2a:b1:97:23:31:ce:c6:b0:dc:52:
d4:46:8b:c6:32:f5:6f:4d:ca:b2:4b:76:b9:fe:b4:
96:e9:47:a5:bf:b2:5d:32:90:4b:4e:63:87:0a:81:
a8:1e:02:18:23:9c:08:28:21:09:50:2f:96:6a:08:
d3:6a:4c:71:ef:ba:71:dc:40:dd:90:17:16:12:7a:
ae:ae:2f:6e:22:6d:ae:41:82:e4:76:08:37:66:86:
68:5c:c8:26:a5:84:56:ef:c2:46:8b:0f:0c:a1:51:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D3:19:83:9D:6D:53:33:E9:59:64:E5:8C:0C:78:E7:60:14:12:76
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/FtMZg51tUzPpWWTljAx452AUEnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.188.0/22
185.78.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:aa:32:1a:b4:5a:9b:34:7a:be:91:31:50:7b:f1:04:60:c2:
dc:26:c1:89:93:5e:6d:54:0f:9f:de:ae:0e:25:84:4e:e9:eb:
81:ea:76:88:e2:85:3f:04:e9:5a:04:90:42:c8:4d:8d:93:3a:
46:bf:1b:c0:20:95:58:b8:75:3f:55:ef:4c:9c:ca:2f:41:80:
c0:8d:53:e1:9a:2e:0d:50:0c:86:be:65:ea:a0:8f:0f:0a:b6:
39:c0:09:d8:ef:6c:0c:22:43:93:b3:97:f8:bb:17:69:84:46:
50:6c:8f:16:da:07:80:bb:d9:95:ea:d1:fb:84:df:f6:40:b7:
1a:03:9f:d0:b2:e3:02:a9:5b:f3:9a:f6:82:a7:37:e6:f0:a6:
a9:78:ef:26:86:d8:8d:61:8d:7d:3a:4f:80:83:b6:67:24:24:
bd:0f:84:c6:a4:f1:cb:c6:22:43:36:0c:2b:70:ba:f2:e5:e9:
9f:51:e2:4c:2c:38:54:cc:bb:e7:ee:2b:7f:1f:62:55:67:3b:
05:a1:37:30:58:d2:05:d9:39:5b:3d:15:48:b3:b4:60:b2:ad:
ba:92:38:07:46:de:88:7b:a5:26:c1:63:b4:c5:0e:59:5a:89:
fe:79:49:cd:9c:a0:52:a4:b6:c9:9f:b0:34:ba:86:b9:18:07:
10:ae:82:0e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3eRS+ADZHkEnERuX1EPsg1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh
ZTMyOGUwHhcNMjYwNDMwMTIwMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmQzMTk4MzlkNmQ1MzMzZTk1OTY0ZTU4YzBjNzhlNzYwMTQxMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY2txN52OJ3+YholA53ubcQ88ze3
HOo6S+6xUXw1DnAnQp24m8WAnEkqDP3aN1XMZqQlJmvCF0P1l8eCBKUJeMIn8vIL
iCCj6kr1kH6CA3dcvp2IXw+e0S81mKmIE5SLJXVBneGfA2gJCwXPJW/y+xnghAHF
aY2IOrR7WpuoQni3/FlyFZRE7IDxbnfxdxVxXKIDJ5kfKrh98iqxlyMxzsaw3FLU
RovGMvVvTcqyS3a5/rSW6Uelv7JdMpBLTmOHCoGoHgIYI5wIKCEJUC+WagjTakxx
77px3EDdkBcWEnquri9uIm2uQYLkdgg3ZoZoXMgmpYRW78JGiw8MoVGlEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBbTGYOdbVMz6Vlk5YwMeOdgFBJ2MB8GA1UdIwQY
MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt
MzViYTI2N2RlZDNiLzEvRnRNWmc1MXRVelBwV1dUbGpBeDQ1MkFVRW5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi
LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTV+8AwQA
uU6QMA0GCSqGSIb3DQEBCwUAA4IBAQChqjIatFqbNHq+kTFQe/EEYMLcJsGJk15t
VA+f3q4OJYRO6euB6naI4oU/BOlaBJBCyE2NkzpGvxvAIJVYuHU/Ve9MnMovQYDA
jVPhmi4NUAyGvmXqoI8PCrY5wAnY72wMIkOTs5f4uxdphEZQbI8W2geAu9mV6tH7
hN/2QLcaA5/QsuMCqVvzmvaCpzfm8KapeO8mhtiNYY19Ok+Ag7ZnJCS9D4TGpPHL
xiJDNgwrcLry5emfUeJMLDhUzLvn7it/H2JVZzsFoTcwWNIF2TlbPRVIs7Rgsq26
kjgHRt6Ie6UmwWO0xQ5ZWon+eUnNnKBSpLbJn7A0uoa5GAcQroIO
-----END CERTIFICATE-----
Generated at Wed May 13 07:46:35 2026 by rpki-client