Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/feIccegYQBZgxxkrzejnsPbihrw.roa
File: feIccegYQBZgxxkrzejnsPbihrw.roa (raw, json)
Hash identifier: bdfXa3IeMn4HW0ooX9v1o7vy2IuedtiP2HZA82oziuo=
Subject key identifier: 7D:E2:1C:71:E8:18:40:16:60:C7:19:2B:CD:E8:E7:B0:F6:E2:86:BC
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D8FE0C1F7683F6C12D39F9C5AB37
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/feIccegYQBZgxxkrzejnsPbihrw.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209728
IP address blocks: 193.34.235.0/24 maxlen: 24
193.168.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d8:fe:0c:1f:76:83:f6:c1:2d:39:f9:c5:ab:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7de21c71e818401660c7192bcde8e7b0f6e286bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:3b:f5:2b:e0:f4:94:e7:4f:d4:be:67:84:
b3:22:9e:c9:8f:1b:14:61:54:ed:b4:a9:01:2a:10:
77:16:73:1f:77:53:75:79:14:2d:7f:23:a3:1e:af:
32:95:68:18:8e:3a:2a:8e:1c:68:01:ed:92:e9:53:
8f:1a:ae:20:17:76:74:93:ce:29:00:53:76:d9:1e:
8e:fb:bd:91:72:8d:bc:4c:e2:b1:8e:d4:bc:c2:85:
f8:3c:a0:b2:c4:c9:6d:61:b4:1f:ff:3d:d1:66:fa:
df:18:26:11:c2:b6:d6:21:37:f9:7b:c3:66:85:e4:
15:6f:77:04:7c:ff:15:ab:ef:04:83:c7:09:67:70:
5e:0e:97:81:7d:51:f7:fc:33:d3:88:44:af:3e:ac:
13:93:f5:df:cc:02:b6:61:8c:0c:01:35:53:19:84:
0b:69:e5:f9:55:32:28:ee:a9:3c:d9:94:51:06:e6:
b6:0b:8c:8b:6e:f7:20:c1:ac:67:20:e6:4a:d2:37:
a2:ae:59:d7:88:a5:46:12:68:c9:7a:0c:d9:0c:04:
f8:83:30:7d:11:40:98:67:b4:aa:64:66:b9:b3:f1:
f7:6f:f1:ba:fa:4c:cf:e6:42:16:c7:92:7e:83:57:
3d:4d:9f:73:21:15:4e:18:42:09:36:51:65:47:54:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E2:1C:71:E8:18:40:16:60:C7:19:2B:CD:E8:E7:B0:F6:E2:86:BC
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/feIccegYQBZgxxkrzejnsPbihrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.235.0/24
193.168.225.0/24
Signature Algorithm: sha256WithRSAEncryption
96:86:c0:67:39:e5:d2:a5:5e:af:44:9e:7f:34:44:d8:b7:86:
07:27:13:3d:58:df:57:7f:6c:8c:79:e6:33:e3:80:a1:26:44:
0b:e1:42:39:ca:98:1d:e0:c1:7e:25:11:27:f2:34:e7:b5:a1:
b8:a2:d5:8c:83:17:4d:69:48:a3:e7:b4:9b:da:fb:51:19:e7:
55:4a:79:ea:94:64:19:00:39:20:df:ea:99:ca:2f:eb:6f:5c:
ef:48:0c:16:9e:17:9d:4e:c8:e3:0f:f2:77:cd:91:23:cf:53:
b8:52:7d:b2:01:41:6b:0a:45:20:23:78:28:43:67:fc:62:ff:
f9:19:da:9b:ed:86:25:f3:ae:ca:c3:89:9a:a0:b1:f2:53:1d:
43:19:51:da:95:37:b8:34:f2:89:92:e2:f5:fe:a8:ea:cc:84:
39:dd:9c:40:b2:be:7b:76:22:ca:af:9d:74:a9:f1:0a:60:5d:
53:94:c8:54:9d:c2:c7:8e:9c:a9:bc:74:d8:c4:f1:97:7f:26:
a2:8b:eb:ad:1a:fc:70:19:f7:28:6c:f1:b3:cb:07:74:f7:47:
75:78:39:ee:fe:cd:37:26:a8:7f:ed:9a:dd:e5:fa:12:0d:7a:
16:3a:51:de:cf:e1:3e:1e:24:9c:1a:14:44:bb:fe:36:b2:6b:
4a:9f:d6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:47 2026 by rpki-client