Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/fEhcoPDGYv0UuX-spOcNqAQrI0A.roa
File: fEhcoPDGYv0UuX-spOcNqAQrI0A.roa (raw, json)
Hash identifier: YmJc0uSmE2bn+XVx7NJoxAICM/Y9XwEziZVE5YGpAPA=
Subject key identifier: 7C:48:5C:A0:F0:C6:62:FD:14:B9:7F:AC:A4:E7:0D:A8:04:2B:23:40
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019EAAB4BB3FB1747C2821C02CA67B33E2A6
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/fEhcoPDGYv0UuX-spOcNqAQrI0A.roa
Signing time: Tue 09 Jun 2026 04:47:11 +0000
ROA not before: Tue 09 Jun 2026 04:47:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213727
IP address blocks: 178.239.150.0/24 maxlen: 24
178.239.156.0/24 maxlen: 24
178.239.157.0/24 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.34.0/24 maxlen: 24
185.26.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:aa:b4:bb:3f:b1:74:7c:28:21:c0:2c:a6:7b:33:e2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 9 04:47:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c485ca0f0c662fd14b97faca4e70da8042b2340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:28:87:1d:ab:a0:35:f4:af:95:50:28:02:
44:f4:36:66:9e:2d:4e:22:18:82:fd:1b:95:28:63:
8f:23:1a:93:be:c5:34:5e:7e:21:75:3e:52:3a:bc:
46:dc:41:fe:e4:78:92:7d:5f:cf:4e:a1:e6:d4:a3:
a0:02:fa:c7:73:81:4d:d1:e3:cb:63:48:d8:92:21:
7e:78:00:05:30:d2:1c:dd:5c:8b:b0:4c:52:c3:e7:
8d:f5:dc:3a:a4:5f:c7:22:b8:8f:43:b5:f1:19:e6:
43:15:47:c0:f2:2e:30:0f:49:f0:7e:ed:35:34:ee:
eb:a5:1e:be:17:4a:bd:43:84:bc:95:f2:74:2f:d6:
28:6e:2a:3f:11:c4:d4:9c:ef:74:f4:26:53:56:50:
7c:70:d0:56:14:df:02:7d:15:89:aa:78:7d:ec:ee:
72:84:c1:cf:2d:3f:aa:b2:d8:2c:2f:92:fd:5f:95:
a0:86:9a:2a:59:37:40:c9:39:dd:86:dc:7d:13:6b:
e0:c9:e6:c5:28:72:ab:c4:1a:69:5c:65:ca:79:6c:
d6:2b:22:60:8b:e3:6f:78:c2:0a:f0:e5:a9:40:15:
c3:0d:16:9e:09:76:c7:5f:b5:43:bb:2e:4d:61:40:
08:67:4b:6c:e2:a6:76:ab:d2:12:72:79:3c:34:e1:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:48:5C:A0:F0:C6:62:FD:14:B9:7F:AC:A4:E7:0D:A8:04:2B:23:40
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/fEhcoPDGYv0UuX-spOcNqAQrI0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.150.0/24
178.239.156.0/23
178.239.159.0/24
185.26.34.0/23
Signature Algorithm: sha256WithRSAEncryption
54:31:28:0f:f7:84:16:7d:9e:14:13:3c:c1:19:e1:7f:c5:20:
f7:69:e2:b3:67:c8:f0:12:c1:6b:a6:69:53:75:f3:d2:d7:ae:
6e:e1:3a:9e:7b:e0:88:d1:f5:4a:45:df:7f:dd:0e:19:99:66:
91:5b:f6:4b:11:9c:1b:9c:d1:c0:85:df:9b:ca:6b:7e:da:88:
6b:d4:51:e0:56:ca:9d:87:65:ee:e0:4a:78:fd:a5:9c:f3:f6:
12:cf:f0:d7:77:8e:bf:d6:cf:cc:4b:0c:0f:7f:c9:d4:13:73:
67:e0:1e:d8:8b:97:d4:f5:72:c7:b9:26:2c:75:84:97:08:b5:
07:e9:85:cb:48:34:22:1e:13:9e:2f:ee:9e:24:44:7a:16:0e:
13:a9:c0:da:59:17:db:3e:8e:63:d6:35:25:d6:ac:50:b1:87:
c3:5e:6e:41:96:28:9a:b1:8c:14:c7:34:72:bd:20:90:17:61:
60:1c:d5:db:1e:5b:7f:12:00:e5:6b:55:3a:f1:cc:a2:77:ed:
0a:5f:82:38:31:6c:e5:68:5b:c6:6f:41:07:5b:47:aa:cb:d3:
4e:00:e4:3c:e4:3b:f7:d2:de:88:f6:42:5d:bb:c5:bc:c0:1f:
be:60:e9:ed:b9:37:b2:79:eb:36:a1:7b:46:3e:b8:0a:4d:a7:
34:f3:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:06:23 2026 by rpki-client