Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/FM7w_olBrH_vUX4wGp3g-PNziRc.roa
File: FM7w_olBrH_vUX4wGp3g-PNziRc.roa (raw, json)
Hash identifier: +qvXzAUtWEvi7iNYCoyqclf72yP41yfkRoQT154u9Z8=
Subject key identifier: 14:CE:F0:FE:89:41:AC:7F:EF:51:7E:30:1A:9D:E0:F8:F3:73:89:17
Certificate issuer: /CN=b44a022d32fbd5745186e9c282dacef29e46ffcd
Certificate serial: 019F236872F8878D6917B6157828D42EE33B
Authority key identifier: B4:4A:02:2D:32:FB:D5:74:51:86:E9:C2:82:DA:CE:F2:9E:46:FF:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEoCLTL71XRRhunCgtrO8p5G_80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/FM7w_olBrH_vUX4wGp3g-PNziRc.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29533
IP address blocks: 194.146.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEoCLTL71XRRhunCgtrO8p5G_80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:72:f8:87:8d:69:17:b6:15:78:28:d4:2e:e3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44a022d32fbd5745186e9c282dacef29e46ffcd
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14cef0fe8941ac7fef517e301a9de0f8f3738917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:0b:67:d9:f1:53:b2:9a:5f:1e:78:9f:70:
62:e8:c7:84:da:f8:50:e2:2e:fe:57:b1:e0:43:46:
36:c5:1d:1b:ea:c4:73:08:93:10:58:21:66:e3:84:
2b:d8:0b:ed:de:8b:88:fd:a3:e9:02:da:4a:2c:9e:
f9:37:81:ad:06:c4:aa:18:7a:91:07:9a:bc:cd:03:
61:b3:24:60:b7:a0:91:aa:f0:01:47:75:69:35:8a:
e6:30:35:b6:5e:6b:37:b3:1d:50:7b:75:47:01:d6:
f6:09:eb:b7:1c:fa:42:c1:c8:77:7d:23:c6:15:6d:
41:13:98:1e:a3:14:16:e6:03:e8:1e:44:17:c7:92:
74:98:6f:09:cc:33:c5:ce:75:fb:60:a1:96:5a:69:
50:d6:d3:69:7f:ce:ac:d8:f1:ae:0a:73:f3:a6:93:
d5:af:95:f4:01:99:e2:49:c0:aa:e3:2e:4d:43:2d:
0c:42:25:7a:6a:35:b9:53:cd:71:0e:ce:fd:24:ff:
3f:1e:65:42:67:c6:68:cb:3b:04:bd:71:f1:0d:f2:
a9:80:86:94:35:21:68:e8:29:f6:8f:86:61:8a:3b:
ec:05:8a:9b:af:ba:fa:63:e0:c5:aa:4c:a3:f3:34:
1c:fe:0a:62:3d:42:b9:09:b0:71:a8:bb:61:fc:a9:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CE:F0:FE:89:41:AC:7F:EF:51:7E:30:1A:9D:E0:F8:F3:73:89:17
X509v3 Authority Key Identifier:
keyid:B4:4A:02:2D:32:FB:D5:74:51:86:E9:C2:82:DA:CE:F2:9E:46:FF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEoCLTL71XRRhunCgtrO8p5G_80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/FM7w_olBrH_vUX4wGp3g-PNziRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.121.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:34:24:9d:9a:81:b0:87:3f:e9:9b:47:69:c7:65:ab:d1:c0:
5e:81:4b:28:4e:d7:56:2c:00:48:30:98:03:f4:5f:d4:e8:17:
9a:f8:28:36:9e:af:2a:bf:41:75:5b:0c:2d:9c:f8:25:d1:db:
78:55:1f:b1:8c:2b:00:51:5b:ff:62:82:dc:ee:73:c5:ad:88:
c8:7f:92:de:9c:82:3f:b0:77:bf:0e:5b:ac:1b:43:cc:f3:ae:
0b:d4:68:f9:0b:75:09:ce:3b:dc:85:e4:eb:ee:64:7d:87:0c:
c1:e1:74:fd:6f:d9:34:25:3d:3d:ee:29:a7:df:43:e5:52:bf:
0f:95:3f:4d:81:35:12:44:5a:56:45:15:68:ff:fd:9e:e5:ce:
aa:8d:7d:d1:f2:e7:f2:19:91:2e:80:eb:b9:ed:3d:9d:59:bc:
89:98:38:db:46:fc:7f:bc:56:c0:37:f3:cf:23:e8:4d:56:56:
73:ce:73:fa:c2:53:31:76:4b:76:66:31:b5:53:dc:b9:af:3c:
45:4e:42:95:1a:8f:0b:ae:4c:da:1d:2a:3d:2f:4d:e4:06:45:
a5:8e:a2:bf:f9:ed:75:ab:f2:60:cd:b6:33:7a:d6:6a:08:42:
60:21:2b:bf:b6:e5:73:19:b1:37:d7:93:c7:8b:90:42:9c:86:
e2:c6:8e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:40:28 2026 by rpki-client