Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/_MJAcicymoNzDFYrN1ABbaDOmig.roa
File: _MJAcicymoNzDFYrN1ABbaDOmig.roa (raw, json)
Hash identifier: t92C0XjQQTU7PVrgpoVSk3RSmKTbNYZs6AqGWGG6l7M=
Subject key identifier: FC:C2:40:72:27:32:9A:83:73:0C:56:2B:37:50:01:6D:A0:CE:9A:28
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 01A1D3DAFA0A34569E4ECFA1DD490AF38161
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/_MJAcicymoNzDFYrN1ABbaDOmig.roa
Signing time: Fri 13 Nov 2026 07:41:45 +0000
ROA not before: Fri 13 Nov 2026 07:41:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 23.90.128.0/18 maxlen: 24
89.127.20.0/24 maxlen: 24
89.127.21.0/24 maxlen: 24
94.154.120.0/24 maxlen: 24
104.166.128.0/18 maxlen: 24
185.207.112.0/22 maxlen: 24
192.169.96.0/19 maxlen: 24
192.169.104.0/22 maxlen: 24
193.118.32.0/19 maxlen: 24
193.118.96.0/19 maxlen: 19
193.118.97.0/24 maxlen: 24
193.118.98.0/24 maxlen: 24
193.118.99.0/24 maxlen: 24
193.118.100.0/24 maxlen: 24
199.182.232.0/21 maxlen: 24
2a0b:21c0::/29 maxlen: 48
2a0b:21c1:602d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d3:da:fa:0a:34:56:9e:4e:cf:a1:dd:49:0a:f3:81:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Nov 13 07:41:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcc2407227329a83730c562b3750016da0ce9a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:23:78:34:a4:77:e6:5e:d1:42:26:d4:9d:8b:
d2:7b:8e:81:0e:ef:8d:fb:aa:af:d1:c8:b4:69:94:
55:a9:37:ec:9d:3e:37:a1:d8:0f:21:63:39:ae:cc:
dd:16:d4:e8:f2:da:08:ff:48:b1:3d:23:2c:17:f9:
f0:ab:3f:4a:89:6e:3d:e8:92:a0:35:6d:3d:e8:39:
69:eb:c0:25:5f:05:1d:b9:72:a1:50:69:cd:06:94:
eb:5f:42:35:54:fb:a8:81:fa:f5:6b:d0:41:b3:68:
c1:d5:4a:2a:07:8d:20:95:fa:c3:29:0c:dc:02:26:
c9:af:f1:8b:43:c7:cb:c3:5d:80:c4:76:cd:b6:41:
76:11:c4:5e:01:30:26:7d:dd:03:95:08:ae:17:17:
a5:d9:81:67:3a:2a:45:4d:15:2f:4d:c0:e1:0e:43:
74:52:31:47:d5:2a:87:92:49:e9:79:c3:41:18:2f:
96:18:a8:02:3c:3f:79:da:d9:3b:4d:4e:d1:47:98:
7e:70:de:a8:1e:4b:c2:e1:4b:ed:c0:b4:da:de:06:
f9:be:43:fc:8a:2e:68:2c:f5:ed:9f:88:19:0a:f8:
3f:52:c8:5c:f9:44:ad:9b:89:36:ff:fe:9a:cc:3a:
e5:ff:e6:3c:0f:62:d8:ff:c1:28:eb:34:26:12:0c:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C2:40:72:27:32:9A:83:73:0C:56:2B:37:50:01:6D:A0:CE:9A:28
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/_MJAcicymoNzDFYrN1ABbaDOmig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.90.128.0/18
89.127.20.0/23
94.154.120.0/24
104.166.128.0/18
185.207.112.0/22
192.169.96.0/19
193.118.32.0/19
193.118.96.0/19
199.182.232.0/21
IPv6:
2a0b:21c0::/29
Signature Algorithm: sha256WithRSAEncryption
51:de:88:b1:a2:1c:e1:18:1b:e7:f9:f9:43:e4:fa:eb:17:b9:
a6:0b:87:0c:95:70:24:09:e3:be:60:6c:4c:e4:b2:bb:c6:99:
e3:0a:e3:ef:25:f5:ab:39:63:31:10:a4:1e:e2:2b:5c:b5:2a:
54:07:6e:e4:06:eb:a8:ef:f3:81:61:ea:a4:dc:c1:c2:c5:05:
95:ed:a7:22:06:f0:07:59:cc:f8:a9:53:83:51:5d:3a:09:16:
c9:5e:89:4b:fa:9c:de:f9:c7:57:4a:0d:2d:8d:96:a7:92:50:
d0:8c:a0:00:0b:96:d5:53:39:e4:9b:a3:34:e2:09:c5:15:e3:
94:13:22:f4:f8:e1:a9:2f:30:83:4c:45:7e:c8:85:32:57:cf:
1b:7d:d4:98:3c:8c:b7:60:14:aa:95:96:a0:e3:ef:a3:85:ce:
2f:43:21:46:39:d1:a2:25:bc:7d:b6:ee:b0:c2:47:6f:bb:fc:
d7:a8:66:ba:a3:b6:a0:83:a9:6f:4c:96:a6:bf:48:39:5c:eb:
3c:2a:e3:34:6d:2c:62:b1:ef:44:0a:a1:1a:4b:b4:85:ea:34:
e2:a5:9f:f4:e6:b3:d2:6b:e4:a5:94:27:03:12:1c:c8:f1:78:
46:b3:3f:60:51:bf:70:db:3d:3c:af:21:1c:35:13:da:a3:9f:
08:1a:c9:7b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAaHT2voKNFaeTs+h3UkK84FhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy
YjNhZWMwHhcNMjYxMTEzMDc0MTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2MyNDA3MjI3MzI5YTgzNzMwYzU2MmIzNzUwMDE2ZGEwY2U5YTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iN4NKR35l7RQibUnYvSe46BDu+N
+6qv0ci0aZRVqTfsnT43odgPIWM5rszdFtTo8toI/0ixPSMsF/nwqz9KiW496JKg
NW096Dlp68AlXwUduXKhUGnNBpTrX0I1VPuogfr1a9BBs2jB1UoqB40glfrDKQzc
AibJr/GLQ8fLw12AxHbNtkF2EcReATAmfd0DlQiuFxel2YFnOipFTRUvTcDhDkN0
UjFH1SqHkknpecNBGC+WGKgCPD952tk7TU7RR5h+cN6oHkvC4UvtwLTa3gb5vkP8
ii5oLPXtn4gZCvg/Ushc+UStm4k2//6azDrl/+Y8D2LY/8Eo6zQmEgytpwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFPzCQHInMpqDcwxWKzdQAW2gzpooMB8GA1UdIwQY
MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt
ZTdkYWVjMTk0YTY5LzEvX01KQWNpY3ltb056REZZck4xQUJiYURPbWlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5
LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQGF1qAAwQB
WX8UAwQAXpp4AwQGaKaAAwQCuc9wAwQFwKlgAwQFwXYgAwQFwXZgAwQDx7boMA0E
AgACMAcDBQMqCyHAMA0GCSqGSIb3DQEBCwUAA4IBAQBR3oixohzhGBvn+flD5Prr
F7mmC4cMlXAkCeO+YGxM5LK7xpnjCuPvJfWrOWMxEKQe4itctSpUB27kBuuo7/OB
Yeqk3MHCxQWV7aciBvAHWcz4qVODUV06CRbJXolL+pze+cdXSg0tjZanklDQjKAA
C5bVUznkm6M04gnFFeOUEyL0+OGpLzCDTEV+yIUyV88bfdSYPIy3YBSqlZag4++j
hc4vQyFGOdGiJbx9tu6wwkdvu/zXqGa6o7agg6lvTJamv0g5XOs8KuM0bSxise9E
CqEaS7SF6jTipZ/05rPSa+SllCcDEhzI8XhGsz9gUb9w2z08ryEcNRPao58IGsl7
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:02:46 2026 by rpki-client