Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/fECGl5m9a298-w16DgtX4n1DH54.roa
File: fECGl5m9a298-w16DgtX4n1DH54.roa (raw, json)
Hash identifier: TfrAnyAJp/tVFrms+CEKKrdUp5DsxoN8mEoQwJkSNDg=
Subject key identifier: 7C:40:86:97:99:BD:6B:6F:7C:FB:0D:7A:0E:0B:57:E2:7D:43:1F:9E
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 01A03E6872FFD5FBFF628B75851325D762DA
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/fECGl5m9a298-w16DgtX4n1DH54.roa
Signing time: Wed 26 Aug 2026 14:10:27 +0000
ROA not before: Wed 26 Aug 2026 14:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62201
IP address blocks: 185.149.200.0/22 maxlen: 24
2a07:6a00::/29 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:68:72:ff:d5:fb:ff:62:8b:75:85:13:25:d7:62:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Aug 26 14:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c40869799bd6b6f7cfb0d7a0e0b57e27d431f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:e6:04:bd:f9:da:be:7c:d0:49:00:7d:e2:
68:e7:1c:f6:2c:fa:53:5b:70:96:21:97:e6:bf:2c:
43:0c:cf:c7:a2:d7:7e:17:6c:10:3a:70:e8:a0:09:
12:b7:4c:f5:1e:27:66:8b:63:f9:ad:47:65:af:d9:
40:14:54:ec:8e:ae:1f:76:4b:8c:4c:4e:89:f7:82:
67:d9:81:3c:ad:ab:63:0d:57:9a:0b:39:b3:6e:1e:
c3:cd:53:32:80:90:38:1a:38:73:5d:87:18:2b:aa:
64:c5:47:76:00:d5:ba:23:40:50:9a:f4:fc:28:ef:
5c:e3:28:04:71:31:9a:38:3a:7c:35:ae:02:7a:e4:
03:0f:0e:5d:24:5f:a4:34:ff:d9:6c:5e:87:65:8f:
35:87:ba:d5:f0:ef:d8:c5:4b:58:8c:17:61:54:df:
45:c4:5a:d5:e7:df:8a:04:52:44:89:0f:e1:40:12:
31:17:a5:16:1c:99:e2:52:a5:6f:bc:4e:a5:69:00:
cf:ac:ec:4c:1a:eb:1a:bd:b5:4d:98:32:34:e5:6e:
af:28:60:80:fd:a2:ec:00:8e:ca:21:e6:5c:87:dc:
c7:0a:51:6d:da:62:f9:2a:75:8a:96:9f:1d:e2:d9:
13:bd:9f:d7:94:65:ed:cb:4f:80:c4:05:49:4b:80:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:40:86:97:99:BD:6B:6F:7C:FB:0D:7A:0E:0B:57:E2:7D:43:1F:9E
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/fECGl5m9a298-w16DgtX4n1DH54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.200.0/22
IPv6:
2a07:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
1d:45:85:4d:fe:40:99:46:b9:00:e0:2f:a7:15:f0:88:96:a4:
51:7e:80:76:36:1f:2b:ac:b4:66:da:0b:36:0b:5b:e8:f6:c4:
4a:82:4e:87:bb:ab:0c:3e:03:96:d3:7f:01:c3:f8:97:b6:c1:
b2:d0:8b:d0:e7:69:f1:a9:ca:9f:8e:20:e9:5e:cd:b2:11:cb:
5b:a3:80:61:6c:56:e9:37:44:0e:d6:ee:b3:5b:b0:44:c5:a2:
d4:9e:3c:47:24:f6:fc:0b:86:06:a5:21:43:bc:0e:ed:60:7d:
8d:72:e0:4c:f0:b8:f5:54:ce:9f:d1:5c:8b:e4:c1:b3:60:8c:
7e:5c:03:c7:99:f2:6e:87:36:8c:1a:70:f2:a2:a7:74:f6:f2:
66:07:cc:c4:a0:51:ef:ff:6f:64:8a:15:78:ba:fd:21:84:30:
16:a6:b5:c7:59:9c:87:a9:9b:af:40:c4:f2:f4:d0:d4:b8:41:
b9:64:a2:f4:5b:50:c1:e1:51:97:d4:23:0e:b4:51:41:a7:52:
c4:ba:14:14:cb:21:82:7d:1d:0c:7d:53:68:5c:58:76:aa:7a:
40:93:47:cc:3a:78:16:d0:d2:3b:b8:de:88:18:c5:35:a9:dc:
81:13:8e:6a:c9:7e:41:8b:b4:45:e4:74:4b:40:ab:ab:f6:1f:
2b:f9:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 11:35:45 2026 by rpki-client