Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/FEBHQfZJD4DZgP4YPTSmswwSGCE.roa
File: FEBHQfZJD4DZgP4YPTSmswwSGCE.roa (raw, json)
Hash identifier: HpP/u7/E+ANWSdIynxF6KqnYQKqhdPXceZq+vB6Jt8U=
Subject key identifier: 14:40:47:41:F6:49:0F:80:D9:80:FE:18:3D:34:A6:B3:0C:12:18:21
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A120BACC8E8BCE57B444464F5B1DC1FB3B
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/FEBHQfZJD4DZgP4YPTSmswwSGCE.roa
Signing time: Fri 09 Oct 2026 12:54:35 +0000
ROA not before: Fri 09 Oct 2026 12:54:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
91.200.14.0/24 maxlen: 24
91.200.15.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
95.81.76.0/24 maxlen: 24
95.81.114.0/24 maxlen: 24
95.81.115.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
95.81.124.0/24 maxlen: 24
95.81.125.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
104.128.128.0/24 maxlen: 24
104.128.129.0/24 maxlen: 24
109.69.60.0/24 maxlen: 24
132.243.26.0/24 maxlen: 24
157.228.140.0/24 maxlen: 24
157.228.141.0/24 maxlen: 24
157.228.144.0/24 maxlen: 24
157.228.145.0/24 maxlen: 24
157.228.186.0/24 maxlen: 24
185.37.195.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
2a06:ddc0::/29 maxlen: 29
2a0b:8040::/29 maxlen: 29
2a0b:d900::/29 maxlen: 29
2a0c:5d00:2001::/48 maxlen: 48
2a0c:5d00:2003::/48 maxlen: 48
2a0c:6980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:ba:cc:8e:8b:ce:57:b4:44:46:4f:5b:1d:c1:fb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Oct 9 12:54:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14404741f6490f80d980fe183d34a6b30c121821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:b1:9c:d0:ad:0b:97:7d:b2:b4:88:ad:ae:
3b:75:af:8f:cb:b1:43:47:2b:cf:56:e7:16:dc:da:
2a:95:07:69:7b:7b:67:d1:c6:84:00:a4:3a:30:d8:
4f:d0:84:4c:fe:50:c8:0a:64:7d:9c:ea:3c:21:7b:
06:67:56:ec:60:71:22:01:85:49:3a:33:47:b9:91:
5d:90:1c:09:51:50:94:5b:55:ff:89:9c:fc:9d:9f:
24:ac:72:94:54:ec:98:7e:41:87:7d:07:3c:b9:99:
06:a5:bf:b5:bb:64:a5:0a:49:74:8e:27:0e:46:29:
52:00:1a:d0:31:21:a6:d8:2a:50:c0:6b:b9:1d:16:
ee:0e:41:f9:0b:86:77:ab:91:24:fb:a6:16:48:e5:
9d:4a:7e:44:58:40:70:46:b4:9b:4c:67:c9:a2:4a:
e0:8e:d5:d6:9f:79:3e:51:a1:53:76:8a:0b:d7:18:
0d:66:bb:75:cf:fb:29:c0:65:ed:be:83:7c:1b:80:
e4:e3:2c:ae:6a:47:23:44:cc:76:e8:cd:72:40:86:
d9:25:e3:c2:d7:f5:ef:0c:63:04:c2:67:39:9a:b0:
8a:8d:cf:60:51:94:70:88:a1:25:b1:98:83:e9:4e:
f6:d9:5f:43:3c:52:d8:37:ed:e8:45:9e:d6:68:0d:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:40:47:41:F6:49:0F:80:D9:80:FE:18:3D:34:A6:B3:0C:12:18:21
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/FEBHQfZJD4DZgP4YPTSmswwSGCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
91.200.14.0/23
92.62.119.0/24
94.232.248.0/24
95.81.76.0/24
95.81.114.0/23
95.81.123.0-95.81.125.255
103.82.103.0/24
104.128.128.0/23
109.69.60.0/24
132.243.26.0/24
157.228.140.0/23
157.228.144.0/23
157.228.186.0/24
185.37.195.0/24
185.87.48.0/22
185.117.152.0/22
IPv6:
2a06:ddc0::/29
2a0b:8040::/29
2a0b:d900::/29
2a0c:5d00:2001::/48
2a0c:5d00:2003::/48
2a0c:6980::/29
Signature Algorithm: sha256WithRSAEncryption
75:ae:00:83:82:54:d3:15:75:4c:39:9c:30:49:97:c7:37:11:
35:a4:2a:a3:41:7f:ef:24:64:04:64:cc:5a:e2:de:54:e9:4d:
b9:d4:46:5b:f6:1c:52:41:ec:9c:ba:17:17:1c:e1:d3:e6:e4:
e3:ef:08:9f:a2:e3:92:ae:71:a2:c6:81:90:57:88:ef:58:4b:
9d:4e:4c:db:e8:81:97:46:f0:eb:e7:52:ad:27:2a:a0:bf:41:
50:1f:99:31:aa:5b:8e:d8:70:c3:bf:7f:77:53:65:ef:d0:04:
e0:de:2d:7f:5d:cc:c1:f2:2f:06:59:f6:e8:10:43:e2:17:2f:
3a:c9:60:3a:ea:82:74:b8:56:3e:b9:fd:27:f5:fc:d4:4d:90:
b3:8d:67:ae:be:ee:71:a5:57:3b:0d:eb:64:31:d8:0d:97:59:
54:2a:06:f9:25:e1:e4:bf:17:25:7e:db:a2:46:00:e9:37:99:
e9:9a:06:ff:10:a9:a7:89:b9:31:2c:b0:b0:61:e0:cb:df:81:
b1:bf:4e:26:ad:ed:f9:6f:cb:0c:7e:40:46:26:40:71:a7:e0:
e6:bb:7a:65:12:b4:a0:a9:67:e7:9f:73:49:da:2e:a6:bd:99:
6b:4a:54:5f:34:6c:83:61:e5:0c:e6:4c:52:fb:6f:db:aa:97:
12:df:05:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:49:24 2026 by rpki-client