Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FeBW50ye2IL8k6qCyeQic-MKPuc.roa
File: FeBW50ye2IL8k6qCyeQic-MKPuc.roa (raw, json)
Hash identifier: JzN2s8aFH5dKR1DhTqH2lGYbvywbCCGc+JHJka3nYd4=
Subject key identifier: 15:E0:56:E7:4C:9E:D8:82:FC:93:AA:82:C9:E4:22:73:E3:0A:3E:E7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FB6C69A5CEB552021CDE8F9FF3E105A9C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FeBW50ye2IL8k6qCyeQic-MKPuc.roa
Signing time: Fri 31 Jul 2026 06:04:56 +0000
ROA not before: Fri 31 Jul 2026 06:04:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199639
IP address blocks: 194.48.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 06:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b6:c6:9a:5c:eb:55:20:21:cd:e8:f9:ff:3e:10:5a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 31 06:04:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15e056e74c9ed882fc93aa82c9e42273e30a3ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:11:8d:1b:ac:30:4e:52:0f:7d:73:ed:c8:8d:
ea:f7:5d:92:bc:bb:16:98:ee:36:26:37:d4:d7:00:
87:92:7f:b7:7d:ee:7f:4b:0c:ce:c7:27:13:75:4d:
a9:95:5f:12:66:91:cf:1f:66:6d:a7:e7:45:37:b0:
57:15:dd:01:3a:fa:b3:a0:7b:f5:a3:dd:f8:cd:b6:
60:c2:f6:19:0f:21:68:e3:a8:68:f3:bd:da:ff:e4:
9b:58:d7:0f:5a:43:2a:7b:7c:f3:82:b8:64:99:66:
63:37:e7:3d:22:eb:08:7b:2d:5b:97:a7:d5:e6:c3:
38:ba:80:4c:b5:6f:d1:41:12:6d:7b:f0:d7:d8:c3:
97:87:0d:10:8d:02:71:ca:c3:b0:95:77:16:3d:26:
78:be:50:51:b8:d2:59:31:f7:66:89:1c:e1:9f:49:
36:c2:bf:79:cf:b3:cc:19:d9:90:9a:fe:ff:4d:55:
c5:79:f9:7e:83:d2:b8:fe:95:b9:76:31:49:37:ea:
2d:41:08:82:d4:b4:80:0f:69:59:4b:5a:b3:69:64:
46:51:84:db:45:fe:83:ee:6e:79:79:f4:89:23:fb:
2f:65:b0:8f:06:6d:ed:e5:1b:d3:79:87:37:83:15:
79:71:4d:1a:62:14:82:c7:5d:36:ab:ab:94:69:ae:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E0:56:E7:4C:9E:D8:82:FC:93:AA:82:C9:E4:22:73:E3:0A:3E:E7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FeBW50ye2IL8k6qCyeQic-MKPuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
36:19:e5:c7:ea:d9:f7:0a:86:ee:e9:00:0a:c7:0e:d1:7d:a9:
45:ea:cc:ad:29:66:67:d7:76:04:d3:75:49:03:65:7f:bb:36:
5e:a3:0d:00:90:34:6b:2f:bf:1f:3b:08:f4:0a:09:75:e0:ad:
60:94:a9:91:fa:2b:05:33:92:b0:8b:1e:3c:74:e6:57:30:af:
73:28:60:59:c1:1a:41:f1:30:27:06:47:8c:97:b8:61:61:22:
5b:01:de:da:42:49:44:42:d4:50:84:be:4d:67:4f:58:61:42:
93:5f:2d:9d:f4:54:b1:e1:4e:bc:cb:36:43:01:d5:22:19:54:
23:cd:0b:9c:08:9b:5e:b3:03:a2:f9:dc:2a:26:74:25:e5:23:
06:10:4e:54:ce:6b:3d:53:9b:bc:db:1f:84:61:3a:47:af:2c:
0b:d3:67:aa:09:6f:8b:bf:eb:99:87:c3:e5:5c:e5:f1:0e:3b:
e9:c7:12:fd:df:73:2c:3b:5a:ca:8b:c4:65:56:16:c0:62:79:
85:7a:f1:fc:4c:15:cf:92:b0:ec:9e:b9:f3:2d:59:f0:f3:b0:
8d:41:8b:fd:c3:20:1f:b8:59:56:24:23:e0:9b:1f:41:ee:d6:
fd:72:59:d5:0d:9d:29:68:ec:58:df:72:8a:99:4b:54:e5:1a:
8e:e4:3c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 11:31:41 2026 by rpki-client