Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FeCXKesrl_MnsgiIeBY02IeuIQY.roa
File: FeCXKesrl_MnsgiIeBY02IeuIQY.roa (raw, json)
Hash identifier: eszfHfXN0E/yGQHVa1PkKjgJGc1aByBH7LnEvc09QTo=
Subject key identifier: 15:E0:97:29:EB:2B:97:F3:27:B2:08:88:78:16:34:D8:87:AE:21:06
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0E948C56AFD6E4D2394B1AA5FF5D52323
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FeCXKesrl_MnsgiIeBY02IeuIQY.roa
Signing time: Mon 28 Sep 2026 18:30:55 +0000
ROA not before: Mon 28 Sep 2026 18:30:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 2.26.64.0/22 maxlen: 24
2.26.64.0/24 maxlen: 24
2.26.65.0/24 maxlen: 24
2.26.72.0/23 maxlen: 24
2.26.73.0/24 maxlen: 24
2.26.121.0/24 maxlen: 24
2.27.1.0/24 maxlen: 24
2.27.48.0/23 maxlen: 24
2.27.49.0/24 maxlen: 24
2.27.50.0/23 maxlen: 24
2.27.192.0/22 maxlen: 24
31.76.40.0/22 maxlen: 24
31.76.56.0/22 maxlen: 24
31.77.182.0/23 maxlen: 24
31.77.192.0/22 maxlen: 24
37.46.16.0/24 maxlen: 24
37.46.17.0/24 maxlen: 24
37.46.18.0/24 maxlen: 24
37.46.19.0/24 maxlen: 24
64.188.72.0/24 maxlen: 24
64.188.99.0/24 maxlen: 24
77.239.106.0/24 maxlen: 24
144.31.80.0/24 maxlen: 24
144.31.81.0/24 maxlen: 24
144.31.132.0/24 maxlen: 24
144.31.133.0/24 maxlen: 24
144.31.184.0/24 maxlen: 24
144.31.185.0/24 maxlen: 24
144.31.194.0/24 maxlen: 24
144.31.195.0/24 maxlen: 24
150.241.76.0/24 maxlen: 24
150.241.77.0/24 maxlen: 24
150.241.113.0/24 maxlen: 24
150.241.114.0/24 maxlen: 24
177.1.184.0/23 maxlen: 24
191.217.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 21:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:48:c5:6a:fd:6e:4d:23:94:b1:aa:5f:f5:d5:23:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 28 18:30:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15e09729eb2b97f327b20888781634d887ae2106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:01:6c:ff:bd:52:6e:69:43:56:8c:88:99:
f9:76:00:98:8c:82:e8:6c:af:44:ac:1c:eb:69:d5:
76:a4:35:44:77:2f:10:59:87:b1:72:a4:7f:a6:56:
a0:8a:b6:8c:dc:37:f0:8e:a4:37:e4:ce:a2:3c:d8:
1f:f4:f2:2d:36:e5:2e:79:d2:d6:96:0f:b8:c7:8d:
bc:8d:26:9d:e0:6a:1f:11:9a:ab:cc:62:10:91:69:
54:cd:ff:b4:0f:71:e6:03:80:0b:7d:cf:9f:50:ee:
88:dd:8b:19:d7:b5:67:19:a2:7e:3e:fd:f3:e5:bb:
7f:e5:78:43:5d:13:b7:df:57:e6:36:be:16:f3:b2:
46:e2:61:3f:fd:fc:93:04:a3:af:1d:6f:ee:dd:13:
ad:80:9d:5b:45:70:a5:2c:35:1e:21:68:6f:6e:1e:
6a:4b:95:ce:1a:69:5a:3f:40:2f:5a:ed:98:36:74:
e0:27:ee:72:e8:3d:49:da:35:0f:12:e8:8d:da:a0:
7f:c6:0c:b4:31:da:f9:9b:a0:ca:92:87:e0:6e:c5:
bc:b0:e9:82:89:6a:b0:7c:53:cd:01:0a:13:5f:57:
cc:ed:b0:06:36:22:10:18:1e:cc:73:16:e3:e9:dd:
af:14:35:74:3d:86:d6:8b:f3:05:b8:74:41:7c:ae:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E0:97:29:EB:2B:97:F3:27:B2:08:88:78:16:34:D8:87:AE:21:06
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FeCXKesrl_MnsgiIeBY02IeuIQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.64.0/22
2.26.72.0/23
2.26.121.0/24
2.27.1.0/24
2.27.48.0/22
2.27.192.0/22
31.76.40.0/22
31.76.56.0/22
31.77.182.0/23
31.77.192.0/22
37.46.16.0/22
64.188.72.0/24
64.188.99.0/24
77.239.106.0/24
144.31.80.0/23
144.31.132.0/23
144.31.184.0/23
144.31.194.0/23
150.241.76.0/23
150.241.113.0-150.241.114.255
177.1.184.0/23
191.217.228.0/23
Signature Algorithm: sha256WithRSAEncryption
50:ec:b9:8f:7e:62:ce:ef:c4:64:fb:61:77:9b:93:7b:77:6d:
fb:d2:e0:82:43:53:5e:fb:e9:06:6a:bf:0a:20:f3:14:64:06:
85:c9:2a:5e:69:cc:68:6f:2e:1f:db:69:3c:95:44:d7:42:e0:
79:16:36:e8:c6:fd:4d:19:63:cd:8d:de:ae:db:77:53:9c:80:
41:08:9e:41:b4:07:47:e4:da:42:46:5c:01:72:a2:02:fe:0b:
e5:e8:b2:74:7b:70:de:55:26:7f:f6:b3:a4:ac:da:9f:bc:79:
26:2c:af:7c:4d:cf:e1:5d:bf:42:68:a6:2c:a7:86:a7:ab:9d:
86:55:ed:9f:00:b7:46:3c:c0:61:5c:3f:88:e1:34:ec:30:d8:
7c:f0:9d:64:2f:7a:f3:16:80:a1:0e:d9:df:c8:cb:37:d3:4b:
94:0f:0e:1d:46:37:5f:16:bd:9b:e6:b6:52:bd:d1:0e:6e:20:
a5:31:d5:1d:76:f0:9b:c5:94:3c:57:f8:38:06:11:eb:5c:f2:
ee:f6:7f:b1:13:da:29:6a:a9:5b:97:2a:df:d8:29:7b:a4:8d:
91:e2:f7:52:79:4c:ba:e6:61:dc:7f:8c:e3:e1:c4:92:73:17:
c6:99:04:5d:bf:e1:a8:68:bc:df:d1:da:7e:b9:96:2a:e1:29:
64:73:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:13:59 2026 by rpki-client