Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/FXRcAjgkpmv9_04G_erJcj8FC0w.roa
File: FXRcAjgkpmv9_04G_erJcj8FC0w.roa (raw, json)
Hash identifier: DFFl0MC0xV/5V3CPD1Y6fro75hMfwfJ9cZDj7NfhDuk=
Subject key identifier: 15:74:5C:02:38:24:A6:6B:FD:FF:4E:06:FD:EA:C9:72:3F:05:0B:4C
Certificate issuer: /CN=dc7a7acc3727677c61f953a56db674222dd9dc58
Certificate serial: 019F236937E3E1F8EDA9509911DB46F0AD7C
Authority key identifier: DC:7A:7A:CC:37:27:67:7C:61:F9:53:A5:6D:B6:74:22:2D:D9:DC:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/FXRcAjgkpmv9_04G_erJcj8FC0w.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203175
IP address blocks: 185.137.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:37:e3:e1:f8:ed:a9:50:99:11:db:46:f0:ad:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7a7acc3727677c61f953a56db674222dd9dc58
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15745c023824a66bfdff4e06fdeac9723f050b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:57:0f:72:d8:f7:04:a6:41:08:db:e1:e4:
83:f8:be:c1:f7:ff:5e:df:df:cd:2f:bb:6b:81:03:
a6:be:79:4d:fe:c9:e1:95:00:5c:e8:68:e0:b4:e8:
01:56:bd:e4:04:f1:ec:04:ca:6d:1b:a3:6b:fc:ce:
10:87:f2:32:c1:b8:67:9a:14:88:ef:92:ab:6c:be:
76:c6:6a:8b:8c:78:9c:68:5d:fc:5e:c4:5e:96:17:
45:94:99:3b:d2:b2:ba:66:ea:fb:fd:11:fa:8e:e8:
96:3a:15:7b:42:5a:c2:e6:f0:03:d2:58:dd:9f:1c:
f8:b9:c2:9b:50:bc:ec:82:45:bb:47:97:13:ba:c1:
b6:57:39:61:87:1c:25:65:ec:e5:ab:03:f9:4d:f6:
fb:b0:79:23:74:b5:9f:87:68:bf:ea:29:ea:ec:8e:
c8:6a:d0:30:46:2e:2a:e0:19:51:d4:3a:7a:cd:3c:
ca:a2:67:4a:7b:bc:6e:b0:65:31:f0:a8:40:3f:15:
1d:29:9e:d0:9b:d8:ab:96:07:ba:2a:05:31:60:ac:
49:e5:32:9d:8e:e2:8e:4f:cb:a9:5c:a6:f2:6f:8a:
cb:ad:02:6e:ec:bf:2f:e6:59:b5:af:57:b8:cd:59:
d4:0e:86:06:0c:36:26:b4:2a:cd:21:30:b0:c9:3d:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:74:5C:02:38:24:A6:6B:FD:FF:4E:06:FD:EA:C9:72:3F:05:0B:4C
X509v3 Authority Key Identifier:
keyid:DC:7A:7A:CC:37:27:67:7C:61:F9:53:A5:6D:B6:74:22:2D:D9:DC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/FXRcAjgkpmv9_04G_erJcj8FC0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.29.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:79:8d:ae:80:20:c9:58:cd:21:9f:bc:ca:de:c7:33:30:55:
2f:d3:2e:b9:aa:5e:18:15:27:84:45:46:5e:70:0a:a5:9a:ba:
bd:c6:7b:aa:aa:55:e0:91:e7:b9:3a:6f:f1:98:1e:af:e5:5c:
cd:08:08:a4:26:8c:45:35:ff:6f:b4:5c:e1:a9:c0:2d:d8:14:
52:d2:0e:aa:28:b0:3e:b5:b5:a5:8d:a2:6a:fb:56:7b:ab:c4:
11:77:82:df:20:ac:e7:1c:73:af:03:09:28:b8:73:ff:ce:c0:
e6:5d:72:f2:98:64:f0:86:63:bd:b6:da:59:0e:4f:fe:81:85:
80:bb:c1:87:0a:c8:80:b7:79:e5:87:a4:d5:42:8b:1b:19:77:
2a:07:35:4b:6c:40:ea:62:67:db:6b:7f:28:8e:27:df:d6:70:
7e:df:3f:cd:2e:45:74:bf:9d:26:cb:be:7f:fd:b6:0d:80:8c:
7d:e3:44:0d:80:0c:b3:9b:d2:b4:68:1b:9d:16:8e:e4:61:17:
1a:6b:bd:a7:0d:b0:46:51:b1:f8:3a:33:c4:40:12:36:3b:8e:
b7:6c:7b:a2:ab:8a:37:92:53:d1:89:26:d2:8b:a8:7a:a2:da:
1f:85:c7:a1:98:45:fc:77:67:40:d5:ae:80:2e:7d:78:15:d8:
c9:ec:5e:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaTfj4fjtqVCZEdtG8K18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2E3YWNjMzcyNzY3N2M2MWY5NTNhNTZkYjY3NDIyMmRk
OWRjNTgwHhcNMjYwNzAyMTUxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTc0NWMwMjM4MjRhNjZiZmRmZjRlMDZmZGVhYzk3MjNmMDUwYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApopXD3LY9wSmQQjb4eSD+L7B9/9e
39/NL7trgQOmvnlN/snhlQBc6GjgtOgBVr3kBPHsBMptG6Nr/M4Qh/IywbhnmhSI
75KrbL52xmqLjHicaF38XsRelhdFlJk70rK6Zur7/RH6juiWOhV7QlrC5vAD0ljd
nxz4ucKbULzsgkW7R5cTusG2VzlhhxwlZezlqwP5Tfb7sHkjdLWfh2i/6inq7I7I
atAwRi4q4BlR1Dp6zTzKomdKe7xusGUx8KhAPxUdKZ7Qm9irlge6KgUxYKxJ5TKd
juKOT8upXKbyb4rLrQJu7L8v5lm1r1e4zVnUDoYGDDYmtCrNITCwyT07BwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBV0XAI4JKZr/f9OBv3qyXI/BQtMMB8GA1UdIwQY
MBaAFNx6esw3J2d8YflTpW22dCIt2dxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hwNnpEY25aM3hoLVZPbGJiWjBJaTNaM0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wY2RhNzQtYzliYi00ZDkyLTllNmYt
Mzg5OTc4MjFmZmNlLzEvRlhSY0FqZ2twbXY5XzA0R19lckpjajhGQzB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wY2RhNzQtYzliYi00ZDkyLTllNmYtMzg5OTc4MjFmZmNl
LzEvM0hwNnpEY25aM3hoLVZPbGJiWjBJaTNaM0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYkdMA0G
CSqGSIb3DQEBCwUAA4IBAQDSeY2ugCDJWM0hn7zK3sczMFUv0y65ql4YFSeERUZe
cAqlmrq9xnuqqlXgkee5Om/xmB6v5VzNCAikJoxFNf9vtFzhqcAt2BRS0g6qKLA+
tbWljaJq+1Z7q8QRd4LfIKznHHOvAwkouHP/zsDmXXLymGTwhmO9ttpZDk/+gYWA
u8GHCsiAt3nlh6TVQosbGXcqBzVLbEDqYmfba38ojiff1nB+3z/NLkV0v50my75/
/bYNgIx940QNgAyzm9K0aBudFo7kYRcaa72nDbBGUbH4OjPEQBI2O463bHuiq4o3
klPRiSbSi6h6otofhcehmEX8d2dA1a6ALn14FdjJ7F40
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:47 2026 by rpki-client