Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/1-fuglrAi6PQ5ivtrfStjNtKEoes.roa
File: 1-fuglrAi6PQ5ivtrfStjNtKEoes.roa (raw, json)
Hash identifier: P5TiNU6tF8bAARMsYX9bFYdQUCBBuZPzhn4Ig2XqumU=
Subject key identifier: F9:FB:A0:96:B0:22:E8:F4:39:8A:FB:6B:7D:2B:63:36:D2:84:A1:EB
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A0B8DE8A6A14E700EC3FD3E5CD2C8B02B1
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/1-fuglrAi6PQ5ivtrfStjNtKEoes.roa
Signing time: Sat 19 Sep 2026 08:53:07 +0000
ROA not before: Sat 19 Sep 2026 08:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 87.58.200.0/24 maxlen: 24
87.58.203.0/24 maxlen: 24
150.237.68.0/24 maxlen: 24
150.237.69.0/24 maxlen: 24
150.237.70.0/24 maxlen: 24
150.237.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:de:8a:6a:14:e7:00:ec:3f:d3:e5:cd:2c:8b:02:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Sep 19 08:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9fba096b022e8f4398afb6b7d2b6336d284a1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:d6:9c:0a:75:87:dc:4e:c7:e3:4c:e6:fa:
a8:f1:57:cc:c1:4a:62:ff:79:38:e4:cf:b0:2d:a2:
b8:54:cd:0c:b3:6a:94:eb:9c:f1:da:19:94:72:ac:
3d:11:14:a5:66:53:7a:06:12:48:9c:5b:35:84:67:
54:5f:02:f4:43:40:43:7a:09:26:10:88:0a:f4:4f:
6b:ff:4d:b7:6a:47:d5:28:36:c2:e3:64:8e:fb:ba:
d2:67:b2:10:b1:f7:cb:0f:a2:7b:6d:40:d5:0f:58:
00:8b:29:2f:0c:89:bd:af:6a:cf:ce:3f:a4:15:32:
2c:1a:f3:f9:a5:2e:30:98:e0:c2:96:44:2c:f9:c5:
c7:71:1c:61:97:53:85:fa:fc:c1:1c:fb:36:0a:23:
32:fc:b9:4b:2f:5f:d6:7a:36:fe:f4:b6:c3:5e:67:
fc:cc:71:94:40:a7:76:4e:4a:12:43:56:e4:d6:0c:
6e:0d:85:9e:e1:30:e7:98:ac:c9:d5:03:54:d5:d2:
62:8f:fd:64:a8:6f:14:24:f4:96:a8:08:3e:2d:88:
24:63:a9:3d:a1:52:7a:54:03:78:d7:af:d2:71:89:
d1:3b:18:de:05:79:8d:dd:1d:ad:02:b9:94:e9:7e:
19:1f:72:3a:6a:b8:79:83:84:c1:9c:67:d3:2c:6d:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:A0:96:B0:22:E8:F4:39:8A:FB:6B:7D:2B:63:36:D2:84:A1:EB
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/1-fuglrAi6PQ5ivtrfStjNtKEoes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.200.0/24
87.58.203.0/24
150.237.68.0/22
Signature Algorithm: sha256WithRSAEncryption
02:9a:9c:80:17:b5:c2:77:e7:89:5f:3b:3a:f5:d7:70:13:00:
11:91:6e:22:57:12:6d:36:5f:69:86:75:82:01:4a:15:9b:c8:
ed:40:46:4a:66:b1:ac:f8:2c:c6:80:83:d7:1d:6d:18:ec:78:
56:55:fa:65:2d:a0:06:77:b6:6f:2c:cd:6a:91:04:f7:1a:70:
db:3f:02:f6:5f:73:66:ec:4f:74:15:cd:3a:17:05:19:40:50:
51:7c:08:b0:0a:08:40:ba:a4:2f:81:1b:59:6f:a4:db:10:fa:
e5:f6:9d:62:b3:cb:9e:9b:49:06:b4:25:fb:cb:44:fa:ef:ab:
d7:cf:ad:98:45:0f:2a:2e:d7:51:d8:09:b8:91:56:62:f0:db:
aa:b6:9e:c1:d0:5c:36:b6:08:bd:be:83:11:9a:9f:6f:cd:29:
f7:75:63:85:58:cc:94:cd:b2:8c:ec:b2:c1:5c:2b:52:07:3e:
d5:71:7b:96:b8:03:07:92:cd:fa:3d:68:5f:ec:4a:f7:2e:86:
28:f8:55:c2:32:8b:54:a5:e1:18:46:6d:39:fb:73:a8:be:25:
a2:ec:d6:85:70:94:14:6c:68:68:8e:f7:d7:71:e5:2c:ed:a3:
6c:a6:18:21:19:07:51:70:da:35:50:e0:b6:3e:67:83:6a:c4:
99:12:67:c4
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAaC43opqFOcA7D/T5c0siwKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYwOTE5MDg1MzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWZiYTA5NmIwMjJlOGY0Mzk4YWZiNmI3ZDJiNjMzNmQyODRhMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6zWnAp1h9xOx+NM5vqo8VfMwUpi
/3k45M+wLaK4VM0Ms2qU65zx2hmUcqw9ERSlZlN6BhJInFs1hGdUXwL0Q0BDegkm
EIgK9E9r/023akfVKDbC42SO+7rSZ7IQsffLD6J7bUDVD1gAiykvDIm9r2rPzj+k
FTIsGvP5pS4wmODClkQs+cXHcRxhl1OF+vzBHPs2CiMy/LlLL1/Wejb+9LbDXmf8
zHGUQKd2TkoSQ1bk1gxuDYWe4TDnmKzJ1QNU1dJij/1kqG8UJPSWqAg+LYgkY6k9
oVJ6VAN416/ScYnROxjeBXmN3R2tArmU6X4ZH3I6arh5g4TBnGfTLG0z5QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPn7oJawIuj0OYr7a30rYzbShKHrMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvMS1mdWdsckFpNlBRNWl2dHJmU3RqTnRLRW9lcy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZmIvNDc0ZjI3LWIyODYtNDZmMC1hZTQ1LTEzMmZmYzhiZGU0
Ni8xL0RUVllWR29zVkx2WUVxR1NLS3FZNEhqVHFtZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFc6yAME
AFc6ywMEApbtRDANBgkqhkiG9w0BAQsFAAOCAQEAApqcgBe1wnfniV87OvXXcBMA
EZFuIlcSbTZfaYZ1ggFKFZvI7UBGSmaxrPgsxoCD1x1tGOx4VlX6ZS2gBne2byzN
apEE9xpw2z8C9l9zZuxPdBXNOhcFGUBQUXwIsAoIQLqkL4EbWW+k2xD65fadYrPL
nptJBrQl+8tE+u+r18+tmEUPKi7XUdgJuJFWYvDbqraewdBcNrYIvb6DEZqfb80p
93VjhVjMlM2yjOyywVwrUgc+1XF7lrgDB5LN+j1oX+xK9y6GKPhVwjKLVKXhGEZt
OftzqL4louzWhXCUFGxoaI7313HlLO2jbKYYIRkHUXDaNVDgtj5ng2rEmRJnxA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:49:38 2026 by rpki-client