Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/FEoCb1uLso1eMcNnqeUGMSiYYmk.roa
File: FEoCb1uLso1eMcNnqeUGMSiYYmk.roa (raw, json)
Hash identifier: 26Octt5FPf1NS0dc+QAphRfbrN5vSMqq/tDr6dMsThk=
Subject key identifier: 14:4A:02:6F:5B:8B:B2:8D:5E:31:C3:67:A9:E5:06:31:28:98:62:69
Certificate issuer: /CN=f2f7b9cbbb8952ac3f196e7cd0b8a4dba5de11c3
Certificate serial: 019A7CE988DF2969974BADD21E027AF9EA40
Authority key identifier: F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/FEoCb1uLso1eMcNnqeUGMSiYYmk.roa
Signing time: Thu 13 Nov 2025 11:11:10 +0000
ROA not before: Thu 13 Nov 2025 11:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 185.76.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7c:e9:88:df:29:69:97:4b:ad:d2:1e:02:7a:f9:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f7b9cbbb8952ac3f196e7cd0b8a4dba5de11c3
Validity
Not Before: Nov 13 11:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=144a026f5b8bb28d5e31c367a9e5063128986269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:01:15:04:98:48:08:87:9b:ac:29:c0:9b:46:
9c:27:b8:3f:8f:4c:64:d2:aa:7d:6a:27:7c:71:66:
9b:a7:56:58:4a:ae:d3:3d:6c:9d:45:5f:55:60:3e:
53:d8:2f:2c:17:0c:48:34:60:55:f9:f6:2f:c9:dc:
b3:64:d3:ac:a4:0c:e6:c5:f8:67:a6:94:29:5c:83:
8a:7f:e5:79:16:ba:5c:73:89:e4:f6:97:d4:02:ed:
ee:c7:c1:97:db:3d:84:1e:d0:65:68:0a:5d:4c:e9:
c9:55:b6:fa:7c:6e:78:5d:1a:b7:f6:15:34:b9:e3:
e8:2b:11:45:64:14:05:0f:de:db:53:26:e6:7f:f5:
6c:42:58:58:42:54:47:36:7c:af:ed:21:c3:b2:0f:
98:40:75:9a:a8:fe:e7:d5:14:2e:00:5c:82:8f:20:
69:f2:25:12:d6:bf:da:bb:d2:8c:8a:11:c8:41:e4:
fe:70:83:c8:ca:49:65:e1:dc:d9:77:fb:51:01:04:
71:e1:5a:97:59:65:20:38:c7:37:a9:92:f8:a4:09:
22:7d:60:cd:72:63:bc:ad:36:39:85:ab:48:c0:c4:
86:a7:e3:0d:2b:b2:26:f6:92:ba:c5:39:af:47:00:
c2:4c:f2:5c:d9:b7:92:a0:da:71:ac:f3:66:0d:06:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4A:02:6F:5B:8B:B2:8D:5E:31:C3:67:A9:E5:06:31:28:98:62:69
X509v3 Authority Key Identifier:
keyid:F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/FEoCb1uLso1eMcNnqeUGMSiYYmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.30.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:10:e2:e3:39:de:30:44:82:51:b1:f8:f9:a3:5c:2a:3b:f2:
0f:53:2c:c9:e0:16:a5:fb:0a:e4:84:a0:99:a8:5c:7f:0b:af:
7c:48:85:06:17:f3:5d:a9:3d:8f:50:a9:95:4d:99:56:57:07:
50:a1:ee:61:15:66:c5:de:f4:8b:89:f9:ee:37:8e:f7:b6:45:
e8:c2:d2:58:48:ac:58:cd:14:fc:b1:ef:ab:98:4d:6e:57:47:
25:0e:9c:1b:58:4c:7f:35:ed:82:2a:8b:f3:d1:3e:86:31:51:
0a:6a:49:60:90:22:e8:d1:b4:18:2d:13:d3:4d:07:90:4f:df:
53:32:4e:c8:44:da:77:2b:8d:1e:0d:1d:7d:b1:b2:5a:67:5a:
d4:67:db:7b:0a:eb:b3:e7:a4:cf:44:d9:21:f0:d0:c0:ac:97:
0d:f3:33:53:0d:dc:e8:bb:76:ac:97:31:c9:c5:4e:63:dd:4f:
b2:1e:2b:0e:00:1a:a8:41:1b:64:e4:06:26:4e:59:91:02:e8:
09:f3:f7:5f:f4:84:27:b7:4b:60:5f:a2:95:44:7e:ce:37:a5:
f0:3d:1d:74:ff:74:fa:ea:5e:ae:4c:b3:bf:02:56:52:fe:ec:
cc:8f:9c:db:20:e0:76:e1:71:d6:ad:4e:3a:10:96:f7:b4:be:
fe:fd:70:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZp86YjfKWmXS63SHgJ6+epAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZjdiOWNiYmI4OTUyYWMzZjE5NmU3Y2QwYjhhNGRiYTVk
ZTExYzMwHhcNMjUxMTEzMTExMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDRhMDI2ZjViOGJiMjhkNWUzMWMzNjdhOWU1MDYzMTI4OTg2MjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QEVBJhICIebrCnAm0acJ7g/j0xk
0qp9aid8cWabp1ZYSq7TPWydRV9VYD5T2C8sFwxINGBV+fYvydyzZNOspAzmxfhn
ppQpXIOKf+V5Frpcc4nk9pfUAu3ux8GX2z2EHtBlaApdTOnJVbb6fG54XRq39hU0
uePoKxFFZBQFD97bUybmf/VsQlhYQlRHNnyv7SHDsg+YQHWaqP7n1RQuAFyCjyBp
8iUS1r/au9KMihHIQeT+cIPIykll4dzZd/tRAQRx4VqXWWUgOMc3qZL4pAkifWDN
cmO8rTY5hatIwMSGp+MNK7Im9pK6xTmvRwDCTPJc2beSoNpxrPNmDQYtGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBRKAm9bi7KNXjHDZ6nlBjEomGJpMB8GA1UdIwQY
MBaAFPL3ucu7iVKsPxlufNC4pNul3hHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZlNXk3dUpVcXdfR1c1ODBMaWsyNlhlRWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My82NzE0ZTktMzQzNS00ZTllLWE1YWIt
ZWI1MTk0OWFmNDQ2LzEvRkVvQ2IxdUxzbzFlTWNObnFlVUdNU2lZWW1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My82NzE0ZTktMzQzNS00ZTllLWE1YWItZWI1MTk0OWFmNDQ2
LzEvOHZlNXk3dUpVcXdfR1c1ODBMaWsyNlhlRWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUweMA0G
CSqGSIb3DQEBCwUAA4IBAQA6EOLjOd4wRIJRsfj5o1wqO/IPUyzJ4Bal+wrkhKCZ
qFx/C698SIUGF/NdqT2PUKmVTZlWVwdQoe5hFWbF3vSLifnuN473tkXowtJYSKxY
zRT8se+rmE1uV0clDpwbWEx/Ne2CKovz0T6GMVEKaklgkCLo0bQYLRPTTQeQT99T
Mk7IRNp3K40eDR19sbJaZ1rUZ9t7Cuuz56TPRNkh8NDArJcN8zNTDdzou3aslzHJ
xU5j3U+yHisOABqoQRtk5AYmTlmRAugJ8/df9IQnt0tgX6KVRH7ON6XwPR10/3T6
6l6uTLO/AlZS/uzMj5zbIOB24XHWrU46EJb3tL7+/XBV
-----END CERTIFICATE-----
Generated at Mon Nov 17 23:50:23 2025 by rpki-client