Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/FC-j2DCq34hCFuPalVqFP_Va_c4.roa
File: FC-j2DCq34hCFuPalVqFP_Va_c4.roa (raw, json)
Hash identifier: jfYCQqEdA0WNXwP1ahEI1VJ/4GR5skI19EQziW64bRA=
Subject key identifier: 14:2F:A3:D8:30:AA:DF:88:42:16:E3:DA:95:5A:85:3F:F5:5A:FD:CE
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 019F67A3A9383021FFC4CA2B3B42E9E5B4C1
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/FC-j2DCq34hCFuPalVqFP_Va_c4.roa
Signing time: Wed 15 Jul 2026 21:16:46 +0000
ROA not before: Wed 15 Jul 2026 21:16:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216054
IP address blocks: 193.84.255.0/24 maxlen: 24
2a14:4f80::/29 maxlen: 39
2a14:4f80:400::/38 maxlen: 38
2a14:4f80:800::/38 maxlen: 38
2a14:4f85::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:a3:a9:38:30:21:ff:c4:ca:2b:3b:42:e9:e5:b4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Jul 15 21:16:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=142fa3d830aadf884216e3da955a853ff55afdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:01:32:c5:ae:8e:32:da:93:ae:c2:e3:92:
69:d0:9a:ff:02:dc:70:14:79:25:89:62:a3:7e:1b:
af:56:c5:04:41:dc:8f:99:ec:7b:a4:ed:ae:07:81:
59:5a:ea:36:bb:ae:84:b1:d9:27:58:01:ff:e6:17:
b0:cf:c4:12:cd:f3:65:a1:b9:22:c9:dc:8d:63:73:
cc:45:9d:6e:7b:bd:f7:da:c1:20:90:86:31:4e:49:
6a:bf:8c:15:bf:d8:db:bd:09:27:27:0b:04:39:c3:
c5:2f:a5:36:2d:da:df:9c:df:ac:ad:b4:36:5b:e9:
5a:b7:73:ef:ae:d9:6f:71:9c:36:67:c4:a6:7f:c2:
12:df:42:15:d6:ab:ec:da:ea:cb:5a:ad:b9:47:63:
c5:d6:02:2a:cb:13:56:30:dd:75:97:82:95:5a:96:
cc:51:bd:ec:26:ae:4f:89:ca:5d:90:45:48:51:e5:
b7:1b:c3:ac:2f:02:6c:c0:e8:9d:39:cf:47:3d:32:
f6:fd:f7:94:5a:74:70:43:d0:52:f7:d0:25:e7:0d:
c7:c6:c6:25:c7:fb:99:5a:a0:8f:a4:b4:4d:18:ce:
de:48:b3:3b:01:c5:1a:bb:74:82:a4:1c:97:bf:d9:
95:34:c9:2c:d4:b0:bb:12:70:fb:ac:f7:90:0a:19:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2F:A3:D8:30:AA:DF:88:42:16:E3:DA:95:5A:85:3F:F5:5A:FD:CE
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/FC-j2DCq34hCFuPalVqFP_Va_c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.255.0/24
IPv6:
2a14:4f80::/29
Signature Algorithm: sha256WithRSAEncryption
14:4f:74:fc:21:bf:9b:9f:00:db:96:e0:b0:98:e5:32:19:c6:
8d:54:f1:9d:45:33:55:8a:af:dd:ec:e7:f1:81:52:c3:ec:81:
d4:b1:8b:5e:d2:fb:7a:56:b4:4b:ae:3a:5f:82:a3:29:3b:67:
49:4f:9c:ee:ec:b7:28:14:a9:ad:3c:ee:8b:e4:a3:08:bc:0b:
9f:84:45:e2:49:f0:00:be:88:09:43:d3:fd:f7:b9:cb:cc:b7:
2c:82:17:d6:1f:cb:17:cd:0a:ec:f3:70:86:6b:00:0a:1e:23:
fb:a7:d6:e4:67:7e:b6:b0:88:54:2a:53:08:a2:fe:a3:e4:29:
08:22:18:b7:e3:f7:e7:12:b9:a4:62:ed:35:64:68:ef:a5:f3:
91:b5:ca:03:72:69:90:60:8e:da:6c:b4:fb:a3:c8:3e:f4:3a:
3b:9e:29:27:e9:90:9a:37:5b:58:ab:3c:ca:7d:9d:1d:2c:57:
15:2f:1f:ff:45:67:96:0f:54:5e:48:d7:95:2d:13:54:85:ef:
e0:2f:3d:86:a3:d7:40:90:92:b4:2a:a6:42:80:25:92:26:e9:
28:39:13:35:60:38:2b:77:a4:e6:94:01:e5:bb:03:0a:3b:c1:
a6:7f:3b:af:82:fb:35:9b:b8:1b:88:2f:7c:34:a7:c3:33:24:
8e:03:08:f9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ9no6k4MCH/xMorO0Lp5bTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDA4NzVjZDAwNTFkMGMwOTI1YWNhMDQxMDM0ZTc4NDBh
Njc3MGIwHhcNMjYwNzE1MjExNjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDJmYTNkODMwYWFkZjg4NDIxNmUzZGE5NTVhODUzZmY1NWFmZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjUBMsWujjLak67C45Jp0Jr/Atxw
FHkliWKjfhuvVsUEQdyPmex7pO2uB4FZWuo2u66EsdknWAH/5hewz8QSzfNlobki
ydyNY3PMRZ1ue7332sEgkIYxTklqv4wVv9jbvQknJwsEOcPFL6U2LdrfnN+srbQ2
W+lat3PvrtlvcZw2Z8Smf8IS30IV1qvs2urLWq25R2PF1gIqyxNWMN11l4KVWpbM
Ub3sJq5PicpdkEVIUeW3G8OsLwJswOidOc9HPTL2/feUWnRwQ9BS99Al5w3HxsYl
x/uZWqCPpLRNGM7eSLM7AcUau3SCpByXv9mVNMks1LC7EnD7rPeQChnJ9QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBQvo9gwqt+IQhbj2pVahT/1Wv3OMB8GA1UdIwQY
MBaAFB/Qh1zQBR0MCSWsoEEDTnhApncLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMt
ZTA4MDJmNDc0NDQ0LzEvRkMtajJEQ3EzNGhDRnVQYWxWcUZQX1ZhX2M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMtZTA4MDJmNDc0NDQ0
LzEvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwVT/MA0E
AgACMAcDBQMqFE+AMA0GCSqGSIb3DQEBCwUAA4IBAQAUT3T8Ib+bnwDbluCwmOUy
GcaNVPGdRTNViq/d7OfxgVLD7IHUsYte0vt6VrRLrjpfgqMpO2dJT5zu7LcoFKmt
PO6L5KMIvAufhEXiSfAAvogJQ9P997nLzLcsghfWH8sXzQrs83CGawAKHiP7p9bk
Z362sIhUKlMIov6j5CkIIhi34/fnErmkYu01ZGjvpfORtcoDcmmQYI7abLT7o8g+
9Do7nikn6ZCaN1tYqzzKfZ0dLFcVLx//RWeWD1ReSNeVLRNUhe/gLz2Go9dAkJK0
KqZCgCWSJukoORM1YDgrd6TmlAHluwMKO8Gmfzuvgvs1m7gbiC98NKfDMySOAwj5
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:26 2026 by rpki-client