Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/FVXRWNR-iJL-3loUoELW_rYeLro.roa
File: FVXRWNR-iJL-3loUoELW_rYeLro.roa (raw, json)
Hash identifier: TIUcHOXHQtg3/7DVOraIMU6MrdF6s65vvoAgjd0Qq7U=
Subject key identifier: 15:55:D1:58:D4:7E:88:92:FE:DE:5A:14:A0:42:D6:FE:B6:1E:2E:BA
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019F73ACD446B267E60B82983D67A031055C
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/FVXRWNR-iJL-3loUoELW_rYeLro.roa
Signing time: Sat 18 Jul 2026 05:22:14 +0000
ROA not before: Sat 18 Jul 2026 05:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61173
IP address blocks: 5.182.44.0/24 maxlen: 24
5.182.45.0/24 maxlen: 24
5.182.46.0/24 maxlen: 24
45.159.112.0/24 maxlen: 24
45.159.113.0/24 maxlen: 24
45.159.114.0/24 maxlen: 24
45.159.115.0/24 maxlen: 24
62.3.42.0/24 maxlen: 24
85.208.252.0/24 maxlen: 24
85.208.253.0/24 maxlen: 24
85.208.254.0/24 maxlen: 24
85.208.255.0/24 maxlen: 24
185.4.28.0/24 maxlen: 24
185.4.29.0/24 maxlen: 24
185.4.30.0/24 maxlen: 24
185.4.31.0/24 maxlen: 24
185.50.37.0/24 maxlen: 24
185.50.38.0/24 maxlen: 24
185.50.39.0/24 maxlen: 24
185.116.160.0/24 maxlen: 24
185.116.161.0/24 maxlen: 24
185.116.162.0/24 maxlen: 24
185.116.163.0/24 maxlen: 24
185.213.164.0/24 maxlen: 24
185.213.165.0/24 maxlen: 24
185.213.166.0/24 maxlen: 24
185.213.167.0/24 maxlen: 24
185.255.88.0/24 maxlen: 24
185.255.89.0/24 maxlen: 24
185.255.90.0/24 maxlen: 24
185.255.91.0/24 maxlen: 24
193.141.64.0/24 maxlen: 24
193.141.65.0/24 maxlen: 24
193.141.126.0/24 maxlen: 24
193.141.127.0/24 maxlen: 24
2a05:ab80::/48 maxlen: 48
2a05:ab80:1::/48 maxlen: 48
2a05:ab80:3::/48 maxlen: 48
2a05:ab80:4::/48 maxlen: 48
2a05:ab80:100::/48 maxlen: 48
2a05:ab80:200::/48 maxlen: 48
2a05:ab80:300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:73:ac:d4:46:b2:67:e6:0b:82:98:3d:67:a0:31:05:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Jul 18 05:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1555d158d47e8892fede5a14a042d6feb61e2eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a5:78:5e:7d:c5:2c:fb:48:3f:62:73:5b:4f:
5d:4a:01:7c:6f:83:7b:cb:5b:c3:c6:cf:a0:86:d6:
ad:76:dc:4c:63:0a:54:52:d1:42:d1:3f:67:4f:29:
15:40:fa:3f:ef:b1:2a:8d:86:48:75:a3:2e:24:ce:
66:4d:5a:21:35:96:88:0e:bb:d3:2e:18:4e:55:45:
3e:f6:6e:96:59:24:41:70:81:7e:d6:2a:c6:3d:8c:
c7:28:aa:c0:69:1b:6c:f2:8a:6f:b1:99:f3:7f:4a:
7d:6e:45:82:1d:0a:36:5e:99:fb:3a:b9:da:d4:6c:
ff:48:51:38:2f:a9:61:c2:07:49:f6:8c:ff:49:54:
09:e8:19:ad:d6:14:a0:35:f2:0d:be:f0:85:a2:ad:
86:dc:70:d8:e8:ac:2e:b1:5a:a5:28:74:18:b4:2e:
10:4b:4d:9e:22:8f:69:08:95:30:4f:f6:d2:cb:a6:
d1:f2:18:67:41:c8:60:ba:d7:03:cf:65:a8:88:c4:
fa:c6:a0:57:e0:77:a4:a7:18:c2:00:3a:8c:a5:29:
bd:be:f8:cb:f4:f4:31:1a:4d:97:62:b9:e0:a5:dd:
32:92:02:eb:c7:fc:dc:91:aa:c1:20:e6:10:a1:7f:
bf:fe:5a:0c:70:2b:21:94:93:1b:fc:b7:1c:04:75:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:55:D1:58:D4:7E:88:92:FE:DE:5A:14:A0:42:D6:FE:B6:1E:2E:BA
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/FVXRWNR-iJL-3loUoELW_rYeLro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.44.0-5.182.46.255
45.159.112.0/22
62.3.42.0/24
85.208.252.0/22
185.4.28.0/22
185.50.37.0-185.50.39.255
185.116.160.0/22
185.213.164.0/22
185.255.88.0/22
193.141.64.0/23
193.141.126.0/23
IPv6:
2a05:ab80::/47
2a05:ab80:3::-2a05:ab80:4:ffff:ffff:ffff:ffff:ffff
2a05:ab80:100::/48
2a05:ab80:200::/48
2a05:ab80:300::/48
Signature Algorithm: sha256WithRSAEncryption
2e:4f:9f:e8:e0:0d:10:b1:0b:95:20:dd:08:92:c7:c1:f7:2d:
90:30:65:6c:40:eb:21:98:53:1c:5a:ad:ff:ee:be:57:bc:c5:
3f:ad:f0:74:86:f3:86:69:5d:ab:53:f7:d4:4f:a5:8e:8e:11:
af:a8:67:5e:ff:5d:35:1d:cc:b0:35:0e:46:54:0a:34:97:b4:
dc:6e:6e:1a:ba:5e:b4:a4:97:86:27:15:f4:d3:09:7a:ff:e4:
b8:35:0a:13:c5:c1:ea:4a:83:1d:81:f1:6c:de:aa:91:8c:fc:
2d:ed:1b:fc:c0:44:6f:51:ef:3c:ee:cb:7a:7e:e0:d8:52:4e:
9b:8a:20:2d:0f:01:a1:02:fd:1d:7b:dc:65:11:39:f4:23:61:
24:77:4d:1d:e2:4d:3b:24:ab:6c:89:f6:c9:fb:8c:aa:86:54:
65:8d:eb:b5:2f:fb:0b:6a:95:08:14:ac:a6:00:9f:e5:c8:cf:
54:d9:e3:f5:c3:64:13:0a:68:34:51:c1:88:ae:69:67:42:b3:
43:5a:52:7e:de:b8:a6:02:23:b7:50:14:c6:f1:3d:58:2b:da:
b9:05:aa:69:33:80:12:c4:13:ab:50:60:a7:fb:9e:08:56:3a:
09:d5:dd:74:63:1a:c7:5f:2b:6a:f3:53:8f:d7:53:2c:79:f2:
34:8c:51:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:02 2026 by rpki-client