Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/fdcUPEAFVByeSkOzLhk0ArJoQkw.roa
File: fdcUPEAFVByeSkOzLhk0ArJoQkw.roa (raw, json)
Hash identifier: rHln5/yrMAHXobfsyoJHEIc2WxuOuH5MOCln5AKCui4=
Subject key identifier: 7D:D7:14:3C:40:05:54:1C:9E:4A:43:B3:2E:19:34:02:B2:68:42:4C
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 019E169FDFC3699ACF430D98BBD7F0E46ECF
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/fdcUPEAFVByeSkOzLhk0ArJoQkw.roa
Signing time: Mon 11 May 2026 10:40:36 +0000
ROA not before: Mon 11 May 2026 10:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30823
IP address blocks: 5.249.160.0/24 maxlen: 24
5.249.161.0/24 maxlen: 24
5.249.162.0/24 maxlen: 24
5.249.163.0/24 maxlen: 24
5.249.164.0/24 maxlen: 24
5.249.165.0/24 maxlen: 24
45.141.36.0/24 maxlen: 24
45.141.37.0/24 maxlen: 24
45.146.252.0/24 maxlen: 24
45.146.253.0/24 maxlen: 24
45.146.254.0/24 maxlen: 24
45.146.255.0/24 maxlen: 24
88.214.56.0/24 maxlen: 24
88.214.57.0/24 maxlen: 24
88.214.58.0/24 maxlen: 24
88.214.59.0/24 maxlen: 24
92.42.44.0/22 maxlen: 22
92.42.44.0/24 maxlen: 24
92.42.45.0/24 maxlen: 24
92.42.46.0/24 maxlen: 24
92.42.47.0/24 maxlen: 24
134.255.216.0/24 maxlen: 24
134.255.217.0/24 maxlen: 24
134.255.218.0/24 maxlen: 24
134.255.219.0/24 maxlen: 24
134.255.231.0/24 maxlen: 24
134.255.232.0/24 maxlen: 24
134.255.233.0/24 maxlen: 24
134.255.234.0/24 maxlen: 24
147.189.168.0/24 maxlen: 24
147.189.169.0/24 maxlen: 24
147.189.170.0/24 maxlen: 24
147.189.171.0/24 maxlen: 24
147.189.172.0/24 maxlen: 24
147.189.173.0/24 maxlen: 24
147.189.174.0/24 maxlen: 24
147.189.175.0/24 maxlen: 24
185.223.28.0/24 maxlen: 24
185.223.29.0/24 maxlen: 24
185.223.30.0/24 maxlen: 24
185.223.31.0/24 maxlen: 24
185.239.236.0/24 maxlen: 24
185.239.237.0/24 maxlen: 24
185.239.238.0/24 maxlen: 24
185.239.239.0/24 maxlen: 24
185.249.197.0/24 maxlen: 24
185.249.198.0/24 maxlen: 24
185.249.199.0/24 maxlen: 24
193.23.126.0/24 maxlen: 24
193.23.127.0/24 maxlen: 24
193.23.160.0/24 maxlen: 24
193.23.161.0/24 maxlen: 24
193.34.69.0/24 maxlen: 24
193.203.238.0/24 maxlen: 24
194.156.88.0/24 maxlen: 24
194.156.90.0/24 maxlen: 24
194.156.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:9f:df:c3:69:9a:cf:43:0d:98:bb:d7:f0:e4:6e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: May 11 10:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dd7143c4005541c9e4a43b32e193402b268424c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:59:54:07:93:4b:eb:1e:2d:62:b1:37:21:
94:f9:82:10:59:33:06:17:1e:32:d5:3b:60:1f:12:
60:7b:41:0d:b9:4e:8b:c4:d5:86:c0:1f:28:6e:fb:
b0:b0:a5:dc:6a:ed:c2:28:58:e4:d2:0a:a2:d6:22:
c7:b2:d7:fc:84:4d:74:ef:07:3c:ed:39:40:f8:02:
d9:d6:63:11:68:18:a9:db:2b:23:ef:00:ae:a3:07:
41:12:f8:c5:c6:80:1d:00:aa:a0:2d:11:42:c7:36:
9d:93:05:66:7a:69:74:64:64:dc:3f:13:89:98:10:
0e:c5:33:8d:79:6b:18:05:24:07:c9:00:d7:4e:e3:
f5:5c:15:cc:0a:23:6a:1c:7b:93:62:2a:c8:69:9c:
41:a4:f2:d0:97:e4:a6:ad:85:b8:b9:4d:fc:13:9a:
b0:f9:c7:f2:a9:2c:00:1c:ad:c5:62:79:f1:e2:15:
fc:a9:7e:45:0f:fe:32:2b:d4:14:ed:e1:4a:7e:69:
66:95:a6:7c:aa:c7:79:48:56:95:ea:f0:ba:35:62:
c3:0a:c2:05:57:32:e2:5c:31:0f:db:91:f7:23:19:
4b:e4:aa:c3:89:30:82:61:ce:37:b0:a2:28:e3:7f:
02:1d:14:60:c6:0c:fe:39:e1:3f:ca:ea:79:ad:de:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D7:14:3C:40:05:54:1C:9E:4A:43:B3:2E:19:34:02:B2:68:42:4C
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/fdcUPEAFVByeSkOzLhk0ArJoQkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.160.0-5.249.165.255
45.141.36.0/23
45.146.252.0/22
88.214.56.0/22
92.42.44.0/22
134.255.216.0/22
134.255.231.0-134.255.234.255
147.189.168.0/21
185.223.28.0/22
185.239.236.0/22
185.249.197.0-185.249.199.255
193.23.126.0/23
193.23.160.0/23
193.34.69.0/24
193.203.238.0/24
194.156.88.0/24
194.156.90.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:e3:85:db:9f:c8:b0:07:45:0e:1f:86:79:7a:81:37:65:2f:
ce:27:c0:2f:45:23:04:68:f9:1d:22:8d:da:c3:8b:94:ff:78:
1b:66:72:7b:15:b3:f8:32:d4:5f:6f:ea:da:2c:22:0d:e4:7b:
e7:b3:ea:22:6a:f4:44:a5:34:46:ff:9e:7a:ea:c9:5f:db:8f:
cf:a3:4d:54:98:88:96:97:a1:81:97:f1:73:03:53:54:d7:e2:
75:19:0f:b2:fd:d0:05:e1:b8:41:ed:58:85:55:f7:1a:70:3d:
30:c3:d1:17:c6:1b:6e:46:f0:b3:3a:f7:f6:f6:0e:a5:a5:ca:
d0:6f:37:27:ad:f8:44:e8:13:94:f4:02:cd:b0:95:97:f1:8d:
84:1f:db:b2:09:aa:1f:0a:ba:dc:5e:5e:ed:5a:82:4d:c1:6b:
3d:a2:31:06:9d:81:5c:21:e0:22:f8:31:a0:68:9e:07:13:7b:
bd:7b:80:e0:bc:7c:28:12:bd:d5:49:8a:e0:2d:de:05:dd:37:
82:2c:87:17:bb:7a:fb:f1:86:ef:13:0d:a2:6c:23:83:3d:c3:
7a:df:38:f8:ff:c3:f3:a2:0a:ef:6e:7f:ec:26:35:c6:98:e0:
63:b5:d7:88:cf:4b:62:22:10:00:38:94:10:81:0b:9d:a6:f1:
dc:00:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:35 2026 by rpki-client