Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/feAMaZHQTHeoU0Lb8jRfd7824to.roa
File: feAMaZHQTHeoU0Lb8jRfd7824to.roa (raw, json)
Hash identifier: uISsJrkCt+zimaauIuuvhKkRi6KnETGWgc1AuiKhePU=
Subject key identifier: 7D:E0:0C:69:91:D0:4C:77:A8:53:42:DB:F2:34:5F:77:BF:36:E2:DA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F14B904E4219EF7F02339368B87FAD25A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/feAMaZHQTHeoU0Lb8jRfd7824to.roa
Signing time: Mon 29 Jun 2026 18:51:37 +0000
ROA not before: Mon 29 Jun 2026 18:51:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 2.26.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:b9:04:e4:21:9e:f7:f0:23:39:36:8b:87:fa:d2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 29 18:51:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7de00c6991d04c77a85342dbf2345f77bf36e2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:48:17:51:51:4c:63:92:8e:b7:3e:9e:f8:f4:
6d:69:01:b6:38:20:83:05:31:a6:0f:85:16:b1:2d:
e7:c1:c9:7c:37:d5:78:d6:31:af:3c:60:07:cc:ee:
8f:c6:c2:36:e3:5f:f1:5f:cf:15:0e:4d:c4:ec:8e:
b7:51:18:8b:e6:e4:1d:f7:94:83:ce:41:b5:9d:14:
f1:a1:8f:1c:ac:49:5f:8a:6f:b0:de:d0:ec:f7:32:
eb:4c:8f:7e:fd:6c:25:31:c0:85:03:b8:e3:fe:3f:
ea:dd:be:53:3a:df:32:8a:67:1f:ff:bb:f2:ab:69:
0a:d2:d6:82:85:28:62:8f:c1:c3:53:7a:cf:e1:55:
13:c1:f8:e2:c9:e5:80:35:f5:46:4f:04:e7:90:48:
c9:e6:83:f7:f8:2c:dd:6d:d5:fb:48:87:3a:69:e8:
87:ce:b0:54:e4:a9:f6:85:ed:b1:d6:27:ff:6d:f1:
2e:bd:f7:7c:8f:cb:06:58:29:87:d7:5c:2d:d0:1c:
90:62:64:be:70:cf:c6:ce:5f:7b:40:b8:78:f0:5c:
e0:ea:ac:e6:67:f1:35:ba:79:52:e8:33:3b:27:63:
5d:dc:5b:e7:3d:e0:8a:d6:a1:31:a0:68:8c:2d:c0:
54:7e:30:1f:f2:50:19:f2:6f:36:19:64:e3:81:95:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E0:0C:69:91:D0:4C:77:A8:53:42:DB:F2:34:5F:77:BF:36:E2:DA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/feAMaZHQTHeoU0Lb8jRfd7824to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.189.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ef:4b:f6:65:05:ae:03:d8:ac:90:1a:ac:b5:a8:4b:52:6f:
b8:8f:53:a7:99:96:62:00:40:76:0a:ea:fc:d6:88:1f:10:03:
6c:75:ae:dd:36:02:5b:b1:76:25:db:46:1e:a2:40:fb:7e:f9:
f2:3d:81:fd:77:23:6a:dd:75:43:f0:88:84:fb:2f:2a:f0:ab:
50:e6:1f:06:35:95:24:04:0f:0c:e0:0e:45:3d:50:f2:95:98:
fd:07:83:a2:cf:e8:b8:2f:71:85:98:31:91:e8:81:72:11:cf:
aa:4d:d9:9c:cf:0b:62:b6:49:b2:58:b0:73:7f:36:92:a4:69:
b7:9d:99:a1:48:23:b5:5a:06:c4:9d:d7:85:01:44:a7:88:ed:
44:b7:40:fd:02:cb:bd:ac:bf:30:95:7e:ad:4a:dd:96:b3:33:
20:5d:4a:6b:fc:0b:bc:90:d1:2f:a6:c3:60:ba:bd:45:92:67:
bb:8f:fd:c0:d3:46:0e:b6:17:be:1b:ee:8a:9e:36:d9:dc:bd:
fd:2f:b2:82:bf:90:af:0d:50:ad:8b:c7:08:6e:ad:f8:aa:06:
70:b6:c1:6c:ff:29:ea:46:89:05:61:fe:82:e4:7f:ee:47:e0:
7f:cf:b3:4e:17:ad:ab:48:1d:2f:31:60:aa:b8:32:8f:62:49:
ad:d9:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 19:56:26 2026 by rpki-client