Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/FPJFYvyzXbEavvZceGEpAmRa5eE.roa
File: FPJFYvyzXbEavvZceGEpAmRa5eE.roa (raw, json)
Hash identifier: KrHxHkJK94MeV09/oo41P41TLRUgYghpsKtbBPIW45s=
Subject key identifier: 14:F2:45:62:FC:B3:5D:B1:1A:BE:F6:5C:78:61:29:02:64:5A:E5:E1
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0199E77A0AA4C692B092AF7239B742CA4827
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/FPJFYvyzXbEavvZceGEpAmRa5eE.roa
Signing time: Wed 15 Oct 2025 10:45:58 +0000
ROA not before: Wed 15 Oct 2025 10:45:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202053
IP address blocks: 5.22.208.0/22 maxlen: 22
5.22.212.0/22 maxlen: 22
5.22.216.0/22 maxlen: 22
5.22.220.0/22 maxlen: 22
80.69.172.0/22 maxlen: 22
81.27.96.0/20 maxlen: 20
81.27.96.0/22 maxlen: 22
83.136.248.0/21 maxlen: 21
85.9.200.0/21 maxlen: 21
85.9.208.0/21 maxlen: 21
85.9.216.0/22 maxlen: 22
85.9.220.0/22 maxlen: 22
94.237.0.0/24 maxlen: 24
94.237.1.0/24 maxlen: 24
94.237.2.0/23 maxlen: 23
94.237.4.0/22 maxlen: 22
94.237.8.0/21 maxlen: 21
94.237.16.0/21 maxlen: 21
94.237.24.0/21 maxlen: 21
94.237.32.0/21 maxlen: 21
94.237.40.0/21 maxlen: 21
94.237.48.0/20 maxlen: 20
94.237.64.0/20 maxlen: 20
94.237.80.0/20 maxlen: 20
94.237.96.0/21 maxlen: 21
94.237.104.0/22 maxlen: 22
94.237.108.0/22 maxlen: 22
94.237.112.0/21 maxlen: 21
94.237.120.0/22 maxlen: 22
94.237.124.0/23 maxlen: 23
94.237.126.0/24 maxlen: 24
95.111.192.0/21 maxlen: 21
95.111.200.0/22 maxlen: 22
95.111.204.0/22 maxlen: 22
95.111.208.0/22 maxlen: 22
95.111.216.0/21 maxlen: 21
185.20.136.0/22 maxlen: 22
185.26.48.0/22 maxlen: 22
185.70.196.0/22 maxlen: 22
194.62.96.0/22 maxlen: 22
213.163.192.0/20 maxlen: 20
2a04:3540::/32 maxlen: 32
2a04:3541::/32 maxlen: 32
2a04:3541:8000::/34 maxlen: 34
2a04:3542::/32 maxlen: 32
2a04:3542:8000::/34 maxlen: 34
2a04:3543::/32 maxlen: 32
2a04:3544::/32 maxlen: 32
2a04:3544:8000::/34 maxlen: 34
2a04:3545::/32 maxlen: 32
2a04:3546::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:7a:0a:a4:c6:92:b0:92:af:72:39:b7:42:ca:48:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Oct 15 10:45:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14f24562fcb35db11abef65c78612902645ae5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:4f:d0:74:e4:63:5b:9d:dd:f2:59:d2:e1:
80:ef:26:eb:b7:21:78:0f:aa:01:15:c7:4e:00:ef:
da:d9:c5:42:fa:a8:b7:21:5b:09:c4:9b:29:45:ea:
c1:4d:19:27:24:3e:41:31:8c:3f:00:de:c4:2c:fe:
d5:3d:00:87:9e:e3:d0:85:d1:9d:c1:6d:92:00:4f:
15:ec:fa:91:ee:fd:8f:b8:9e:6c:20:c7:78:6e:d1:
c8:66:96:34:aa:49:23:44:49:a0:60:da:0d:a2:1d:
4c:30:84:58:21:35:6d:3e:d8:e3:12:9d:d7:00:8d:
a7:f3:1a:e2:68:7d:ee:8a:46:1f:1e:4e:80:c0:60:
f6:e3:6d:12:50:34:81:4c:e1:33:82:60:17:04:70:
91:b5:f2:55:16:44:36:b4:80:10:2f:0d:b9:af:43:
3f:0c:b2:14:32:b7:91:2c:a2:d3:f9:66:09:72:10:
d7:f0:80:25:1c:d6:eb:77:ad:1d:8b:eb:1c:fa:07:
db:4d:3b:c4:63:b5:2a:b1:7e:3e:65:57:d5:f3:ca:
46:fd:b7:c5:68:48:e9:3c:93:97:62:8b:43:3a:e1:
69:4b:ef:c6:5d:53:b3:a6:b9:7d:ea:c7:5a:5a:21:
07:52:f1:ea:87:c1:c8:97:a7:79:e1:1f:bf:32:15:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F2:45:62:FC:B3:5D:B1:1A:BE:F6:5C:78:61:29:02:64:5A:E5:E1
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/FPJFYvyzXbEavvZceGEpAmRa5eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.208.0/20
80.69.172.0/22
81.27.96.0/20
83.136.248.0/21
85.9.200.0-85.9.223.255
94.237.0.0-94.237.126.255
95.111.192.0-95.111.211.255
95.111.216.0/21
185.20.136.0/22
185.26.48.0/22
185.70.196.0/22
194.62.96.0/22
213.163.192.0/20
IPv6:
2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
77:3d:da:67:82:d0:97:80:cc:e6:8e:02:d1:0a:ac:69:b3:3e:
9b:66:35:0d:d9:25:33:43:57:fe:e7:da:f5:00:7a:48:97:dc:
2f:fb:8b:f4:c7:7f:41:9e:1c:99:18:ee:1c:11:7c:6d:8d:dc:
20:d8:29:9c:04:dc:e0:42:9a:30:5d:53:ba:3d:78:ce:97:cd:
78:61:1d:89:64:22:6a:41:76:d5:fe:81:f8:b5:51:13:0b:40:
06:bb:51:0e:14:c4:54:a0:a0:bc:66:01:40:48:09:f6:a7:75:
3c:33:da:b7:8a:c0:c9:34:5a:5f:cf:5a:29:ea:04:7f:c7:a5:
9d:f3:de:68:c8:4b:b2:87:1d:f3:64:06:d9:b7:db:ac:65:d8:
6a:a8:09:9d:c9:2c:99:97:5b:a9:70:b4:9c:f7:f3:1c:e5:74:
88:32:7b:87:6a:a1:90:1f:9d:4f:06:3d:c9:2f:98:94:4e:5a:
08:c5:b8:2a:50:f2:cf:e5:4f:aa:84:0f:eb:8c:9d:d7:51:36:
d5:d9:9b:7b:ad:3d:2b:ca:20:f0:33:9f:c5:7b:df:82:99:63:
32:6f:91:ed:ee:6f:d0:43:69:0c:e2:a9:ee:4b:15:87:67:cf:
00:0f:c3:32:25:dc:c1:cb:30:1a:82:03:a6:3e:6d:19:99:c0:
78:46:dd:52
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZnnegqkxpKwkq9yObdCykgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy
MGZhYjUwHhcNMjUxMDE1MTA0NTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGYyNDU2MmZjYjM1ZGIxMWFiZWY2NWM3ODYxMjkwMjY0NWFlNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHxP0HTkY1ud3fJZ0uGA7ybrtyF4
D6oBFcdOAO/a2cVC+qi3IVsJxJspRerBTRknJD5BMYw/AN7ELP7VPQCHnuPQhdGd
wW2SAE8V7PqR7v2PuJ5sIMd4btHIZpY0qkkjREmgYNoNoh1MMIRYITVtPtjjEp3X
AI2n8xriaH3uikYfHk6AwGD2420SUDSBTOEzgmAXBHCRtfJVFkQ2tIAQLw25r0M/
DLIUMreRLKLT+WYJchDX8IAlHNbrd60di+sc+gfbTTvEY7UqsX4+ZVfV88pG/bfF
aEjpPJOXYotDOuFpS+/GXVOzprl96sdaWiEHUvHqh8HIl6d54R+/MhURvwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFBTyRWL8s12xGr72XHhhKQJkWuXhMB8GA1UdIwQY
MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt
OWNkNjhmMjIxZTIxLzEvRlBKRll2eXpYYkVhdnZaY2VHRXBBbVJhNWVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx
LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTBrBAIAATBlAwQEBRbQ
AwQCUEWsAwQEURtgAwQDU4j4MAwDBANVCcgDBAVVCcAwCwMDAF7tAwQAXu1+MAwD
BAZfb8ADBAJfb9ADBANfb9gDBAK5FIgDBAK5GjADBAK5RsQDBALCPmADBATVo8Aw
FgQCAAIwEDAOAwUGKgQ1QAMFACoENUYwDQYJKoZIhvcNAQELBQADggEBAHc92meC
0JeAzOaOAtEKrGmzPptmNQ3ZJTNDV/7n2vUAekiX3C/7i/THf0GeHJkY7hwRfG2N
3CDYKZwE3OBCmjBdU7o9eM6XzXhhHYlkImpBdtX+gfi1URMLQAa7UQ4UxFSgoLxm
AUBICfandTwz2reKwMk0Wl/PWinqBH/HpZ3z3mjIS7KHHfNkBtm326xl2GqoCZ3J
LJmXW6lwtJz38xzldIgye4dqoZAfnU8GPckvmJROWgjFuCpQ8s/lT6qED+uMnddR
NtXZm3utPSvKIPAzn8V734KZYzJvke3ub9BDaQziqe5LFYdnzwAPwzIl3MHLMBqC
A6Y+bRmZwHhG3VI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:12 2025 by rpki-client