Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fmUhdByfPr9ITtWMZCWsH2u_Dc4.roa
File: fmUhdByfPr9ITtWMZCWsH2u_Dc4.roa (raw, json)
Hash identifier: 1FjWPqNHQ51HVd0LwMhTSA1QXSMjUi4QjBgTW3kVJbk=
Subject key identifier: 7E:65:21:74:1C:9F:3E:BF:48:4E:D5:8C:64:25:AC:1F:6B:BF:0D:CE
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019F5A75E80DA61EE50A75A0C7F69DBCBFD9
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fmUhdByfPr9ITtWMZCWsH2u_Dc4.roa
Signing time: Mon 13 Jul 2026 07:51:44 +0000
ROA not before: Mon 13 Jul 2026 07:51:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12846
IP address blocks: 90.188.0.0/20 maxlen: 23
90.188.0.0/23 maxlen: 23
90.188.16.0/20 maxlen: 20
194.150.146.0/24 maxlen: 24
212.94.101.0/24 maxlen: 24
212.94.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:75:e8:0d:a6:1e:e5:0a:75:a0:c7:f6:9d:bc:bf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jul 13 07:51:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e6521741c9f3ebf484ed58c6425ac1f6bbf0dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:66:6e:23:28:a1:26:4c:21:2c:4b:cf:62:
fe:5b:29:a1:3f:62:ef:9b:48:09:b3:5b:95:c9:d9:
97:e8:03:33:3c:8c:ae:e5:e4:e3:93:6c:c2:55:59:
25:0e:59:53:d7:37:73:15:e0:c8:8b:b1:30:8c:fa:
69:b4:e0:bd:64:e4:d5:1a:9f:1e:a5:05:74:18:9e:
5a:57:46:d0:f5:11:db:fd:d6:88:f8:4e:13:14:c3:
96:de:21:c5:fb:ab:60:fe:45:e3:62:8e:2d:9f:de:
4b:f4:a6:14:8e:d6:6e:a7:4e:36:8c:b0:10:de:66:
d4:37:c4:7c:31:1b:64:18:f7:1a:15:22:57:f4:2e:
2a:9a:55:9d:4d:58:28:5b:e1:a0:9d:4a:11:ff:c2:
cd:1a:a6:ad:b9:15:2e:2d:9f:2c:f0:b0:4b:b1:3b:
24:d2:5f:eb:5f:ff:46:e4:70:a2:7e:00:c4:23:b3:
c6:04:45:4c:fb:8d:1d:c2:59:4c:32:ed:9f:fe:bb:
bb:6b:e2:30:5f:d2:67:5b:d7:c5:ff:da:52:ee:c5:
3e:c0:41:e1:d0:5d:1a:e0:7f:8f:1b:79:04:db:60:
cd:20:54:cb:b9:7d:ce:17:e7:c2:91:ea:fa:3a:81:
c9:dc:a1:08:88:38:ee:87:8f:7d:e7:d5:7f:5c:5a:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:65:21:74:1C:9F:3E:BF:48:4E:D5:8C:64:25:AC:1F:6B:BF:0D:CE
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fmUhdByfPr9ITtWMZCWsH2u_Dc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.188.0.0/19
194.150.146.0/24
212.94.101.0/24
212.94.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:7b:d6:de:0c:50:ef:a8:2c:ba:d8:ad:11:47:90:1f:c0:e6:
ca:a0:a3:bf:0d:76:86:b1:84:98:4a:cd:7a:0f:7e:f4:ef:80:
bd:f0:fb:8f:e1:80:52:52:e9:db:7d:a1:69:1d:e5:1c:09:20:
8d:35:f4:93:30:10:6e:a7:d2:56:f2:83:9a:2e:2b:b6:35:11:
a3:7e:e7:aa:27:e7:28:b3:22:d0:9d:38:e2:f7:88:c5:3e:a8:
82:78:c4:a2:6f:70:7a:b5:88:fc:c2:03:d2:8c:03:f8:8e:1b:
27:3b:df:c4:7c:87:a0:59:43:e2:ac:9b:3b:a7:1d:3e:58:48:
40:98:cf:f9:a0:ed:60:6a:26:0e:ab:44:4e:9a:ca:1b:2f:fb:
14:1a:f5:52:f2:ad:86:da:f5:94:89:0c:9b:ed:2b:9e:16:15:
00:ed:bc:9f:6b:34:4a:d8:ac:87:8e:a3:b0:5f:ae:56:72:57:
3f:91:19:c1:52:ab:f8:92:16:9e:ac:b8:af:a7:09:c4:ea:f7:
2f:10:9f:dd:21:c6:d7:81:2e:a2:bf:3c:7c:87:53:80:40:00:
9a:05:3d:7f:c1:da:47:00:7a:0e:82:5e:61:ce:5b:a2:91:61:
e7:2a:70:67:f4:ac:61:e7:3b:ab:93:94:d8:49:14:5b:27:22:
f8:78:92:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:35 2026 by rpki-client