Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/FES_Ddrn1-Dv05kJ2PK6RSL3F3U.roa
File: FES_Ddrn1-Dv05kJ2PK6RSL3F3U.roa (raw, json)
Hash identifier: QmqcKA8GQhgFV5Rf15kElQFkLjDwA3xqc+UDlx53Syw=
Subject key identifier: 14:44:BF:0D:DA:E7:D7:E0:EF:D3:99:09:D8:F2:BA:45:22:F7:17:75
Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial: 019D2F4AB1B4A395543B9D3E248545D00BDE
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/FES_Ddrn1-Dv05kJ2PK6RSL3F3U.roa
Signing time: Fri 27 Mar 2026 12:35:17 +0000
ROA not before: Fri 27 Mar 2026 12:35:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204121
IP address blocks: 185.114.0.0/22 maxlen: 22
212.48.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:4a:b1:b4:a3:95:54:3b:9d:3e:24:85:45:d0:0b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Validity
Not Before: Mar 27 12:35:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1444bf0ddae7d7e0efd39909d8f2ba4522f71775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:c5:1b:f6:89:e9:bb:27:c5:a3:c7:da:fb:
5f:ca:69:c0:e2:9c:46:35:08:3b:5f:e4:98:ea:43:
5a:03:74:8c:fb:30:4a:c1:4f:48:11:91:16:13:30:
12:d3:09:33:92:f4:66:21:d8:7d:a5:8a:96:72:1d:
fd:48:f7:e0:0e:b8:be:92:35:87:3a:7d:38:a7:9c:
76:46:81:92:91:f5:28:b1:50:da:66:c8:c4:09:f3:
4a:13:a8:32:72:5c:fa:ea:ff:8b:5f:74:61:d7:3f:
9b:ff:e9:a0:a7:b9:a6:7b:6a:d0:00:68:a6:6b:d9:
3e:e9:d0:b7:29:9d:67:bd:fc:a6:23:37:ab:2a:89:
8d:d3:b4:53:d8:b7:01:66:77:1d:ee:91:27:24:17:
92:52:5c:a0:25:bc:93:dc:17:f7:af:42:af:7c:9a:
b6:b7:e7:12:5f:a4:aa:b3:f3:2b:97:fa:35:7f:61:
f9:8a:41:76:f0:3a:51:fd:a9:fb:76:4b:2c:3b:a9:
c4:e4:b3:86:ad:60:43:0d:cb:a7:d6:b9:e6:6c:90:
df:8e:e0:26:c2:fa:d1:b1:81:f8:b4:62:53:16:67:
b7:5c:f8:a6:38:4a:f0:7c:a7:2a:40:31:95:b1:89:
2c:83:a4:3d:65:d3:56:b7:da:b3:47:63:47:da:d8:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:BF:0D:DA:E7:D7:E0:EF:D3:99:09:D8:F2:BA:45:22:F7:17:75
X509v3 Authority Key Identifier:
keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/FES_Ddrn1-Dv05kJ2PK6RSL3F3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.0.0/22
212.48.184.0/22
Signature Algorithm: sha256WithRSAEncryption
93:4c:11:1d:74:b2:a5:fb:2a:41:17:37:5a:1f:e8:bf:19:b1:
5e:c4:83:23:31:49:f6:6f:78:c5:1e:7e:55:d6:75:3a:4a:e8:
0e:35:1b:9a:36:38:36:43:2b:82:c0:88:ea:63:bb:f5:06:37:
78:ff:3d:17:be:55:fd:5b:af:f9:a4:19:bc:16:86:1a:e9:c9:
7a:35:7d:a6:f4:77:ad:31:e4:09:5a:ec:90:f2:a6:96:4e:bc:
43:c1:65:79:df:a8:1e:0f:a5:0e:f1:4b:18:30:76:b8:99:87:
b0:98:e6:fe:8f:8b:da:aa:c5:6e:30:90:90:aa:45:33:da:6f:
64:90:73:7a:75:fa:29:ec:1b:60:93:aa:19:f1:1c:af:6f:3a:
59:7d:ab:54:79:94:1d:9a:ec:f1:91:e4:dd:b7:31:19:ce:9e:
39:e4:e4:61:47:45:7e:a3:c2:93:51:02:da:c9:fa:49:71:69:
8b:d8:65:fe:de:07:95:c1:7f:52:36:64:f0:97:66:d5:d7:e4:
f9:14:cd:e9:49:b0:dc:bd:e7:40:bf:f0:6f:42:de:4b:1e:40:
37:ba:9a:7a:c6:32:3d:67:b1:21:53:a9:14:6f:29:71:33:5d:
e4:cd:f8:50:75:2b:4f:d8:f6:2c:d0:3c:fc:63:4d:15:74:6b:
7b:f1:23:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:34 2026 by rpki-client