Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/FEZcGILq0RJkqpR3v0nAOFFCrfU.roa
File: FEZcGILq0RJkqpR3v0nAOFFCrfU.roa (raw, json)
Hash identifier: E1Ip63mxX4LJOavcsggcPzPHjg1eKYsarcFaMSWGofA=
Subject key identifier: 14:46:5C:18:82:EA:D1:12:64:AA:94:77:BF:49:C0:38:51:42:AD:F5
Certificate issuer: /CN=5420cc313d6913848e00e1ff5782e394c1f60159
Certificate serial: 019CAF37F8A8E3096FA1E1F3634E920F0E83
Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/FEZcGILq0RJkqpR3v0nAOFFCrfU.roa
Signing time: Mon 02 Mar 2026 15:43:26 +0000
ROA not before: Mon 02 Mar 2026 15:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 185.136.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:37:f8:a8:e3:09:6f:a1:e1:f3:63:4e:92:0f:0e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159
Validity
Not Before: Mar 2 15:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14465c1882ead11264aa9477bf49c0385142adf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:48:83:32:7b:b9:bc:df:7e:a5:39:74:26:0b:
8c:6f:97:49:78:42:77:d3:e5:c3:1f:95:65:de:2b:
a9:2f:d8:71:33:9b:a6:39:46:5e:af:0c:e7:72:e6:
75:a8:13:60:4a:36:a6:6e:52:fb:17:cd:25:60:57:
01:b5:4f:d0:e2:06:cb:81:33:25:6a:4d:7f:ae:00:
46:68:ad:ae:a3:aa:02:8e:2e:72:7a:dc:4b:50:15:
b5:7c:58:25:83:75:d9:a9:94:1e:18:a6:e2:db:d2:
6c:f9:14:0a:b0:5d:89:b2:e5:3d:5c:34:6a:e5:41:
40:68:ef:28:70:b3:64:74:71:d7:c3:93:73:35:d2:
46:dd:f4:ec:6c:42:a4:0b:69:a7:c0:c1:33:ce:81:
a8:c1:73:9a:3e:a2:15:0e:ab:75:d9:91:6b:76:07:
08:5a:1e:2e:f8:66:e9:4e:16:7a:fa:2d:c2:a6:8f:
d7:9a:7e:fe:94:bd:01:30:9f:2d:cd:18:dc:f9:4d:
40:80:9d:f3:a3:ee:59:6c:01:83:b4:28:7c:35:9a:
b0:59:fc:29:79:df:96:2f:20:4e:b7:35:11:9e:ac:
9c:6a:71:29:d0:a9:e9:d2:82:22:f7:44:4f:bb:80:
25:f7:89:32:80:74:fd:3d:5c:b2:72:ba:13:f9:da:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:46:5C:18:82:EA:D1:12:64:AA:94:77:BF:49:C0:38:51:42:AD:F5
X509v3 Authority Key Identifier:
keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/FEZcGILq0RJkqpR3v0nAOFFCrfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.243.0/24
Signature Algorithm: sha256WithRSAEncryption
03:2e:49:d5:82:9e:96:1f:21:e9:cd:29:80:8b:43:75:0c:7d:
9d:86:a5:94:ff:f9:40:1d:db:89:be:f5:69:c8:db:31:6d:28:
71:4d:90:73:ba:c0:43:3c:94:8e:9e:41:5a:14:b2:44:e3:d2:
a2:d1:48:73:78:75:8e:49:40:33:e7:71:57:1d:74:b1:ae:b0:
53:0f:d4:cd:ce:cb:8e:a5:46:d7:9e:ba:7b:46:6a:cd:7e:08:
6d:9a:51:d2:2e:98:95:78:fb:14:3a:00:74:08:31:c4:23:6a:
01:fe:5a:5a:13:9d:e7:cf:cc:57:36:12:eb:b0:14:ab:58:71:
a9:76:32:65:1a:a3:20:6a:31:32:1a:ec:b4:98:4f:87:62:c0:
39:da:2e:a9:01:db:c1:7d:67:89:53:86:44:cf:41:ec:43:cf:
86:5d:c3:0e:a4:71:39:4b:ae:00:b0:43:9b:8d:16:c9:91:5d:
6d:cd:5c:3f:e9:e6:de:89:12:28:8e:ed:24:a7:d1:22:19:56:
41:01:68:50:a0:79:30:4e:a1:d4:c1:18:2f:8e:1a:fc:a9:8a:
88:98:48:5e:2b:69:d3:e6:0e:69:9a:54:12:b4:7a:c5:5e:59:
e5:7b:44:4c:cb:cb:bb:23:a5:be:b4:b6:ec:95:ce:1d:c1:40:
4d:46:2a:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyvN/io4wlvoeHzY06SDw6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MjBjYzMxM2Q2OTEzODQ4ZTAwZTFmZjU3ODJlMzk0YzFm
NjAxNTkwHhcNMjYwMzAyMTU0MzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDQ2NWMxODgyZWFkMTEyNjRhYTk0NzdiZjQ5YzAzODUxNDJhZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EiDMnu5vN9+pTl0JguMb5dJeEJ3
0+XDH5Vl3iupL9hxM5umOUZerwzncuZ1qBNgSjamblL7F80lYFcBtU/Q4gbLgTMl
ak1/rgBGaK2uo6oCji5yetxLUBW1fFglg3XZqZQeGKbi29Js+RQKsF2JsuU9XDRq
5UFAaO8ocLNkdHHXw5NzNdJG3fTsbEKkC2mnwMEzzoGowXOaPqIVDqt12ZFrdgcI
Wh4u+GbpThZ6+i3Cpo/Xmn7+lL0BMJ8tzRjc+U1AgJ3zo+5ZbAGDtCh8NZqwWfwp
ed+WLyBOtzURnqycanEp0Knp0oIi90RPu4Al94kygHT9PVyycroT+drW7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBRGXBiC6tESZKqUd79JwDhRQq31MB8GA1UdIwQY
MBaAFFQgzDE9aROEjgDh/1eC45TB9gFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYt
ZjBkNWE5YmU3YzJiLzEvRkVaY0dJTHEwUkprcXBSM3YwbkFPRkZDcmZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYtZjBkNWE5YmU3YzJi
LzEvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYjzMA0G
CSqGSIb3DQEBCwUAA4IBAQADLknVgp6WHyHpzSmAi0N1DH2dhqWU//lAHduJvvVp
yNsxbShxTZBzusBDPJSOnkFaFLJE49Ki0UhzeHWOSUAz53FXHXSxrrBTD9TNzsuO
pUbXnrp7RmrNfghtmlHSLpiVePsUOgB0CDHEI2oB/lpaE53nz8xXNhLrsBSrWHGp
djJlGqMgajEyGuy0mE+HYsA52i6pAdvBfWeJU4ZEz0HsQ8+GXcMOpHE5S64AsEOb
jRbJkV1tzVw/6ebeiRIoju0kp9EiGVZBAWhQoHkwTqHUwRgvjhr8qYqImEheK2nT
5g5pmlQStHrFXlnle0RMy8u7I6W+tLbslc4dwUBNRip4
-----END CERTIFICATE-----
Generated at Thu Mar 12 19:04:14 2026 by rpki-client