Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FEgitMsD2EDD7Q0C4HQ8NCbOYDA.roa
File: FEgitMsD2EDD7Q0C4HQ8NCbOYDA.roa (raw, json)
Hash identifier: SLOWjcUWvcITM0bXN9zkBtv4Nc8aNmoe0jbE040TNas=
Subject key identifier: 14:48:22:B4:CB:03:D8:40:C3:ED:0D:02:E0:74:3C:34:26:CE:60:30
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019DD8A1679DFF3C73B5090486E83C87BDB5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FEgitMsD2EDD7Q0C4HQ8NCbOYDA.roa
Signing time: Wed 29 Apr 2026 09:45:49 +0000
ROA not before: Wed 29 Apr 2026 09:45:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210448
IP address blocks: 194.102.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:a1:67:9d:ff:3c:73:b5:09:04:86:e8:3c:87:bd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 29 09:45:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=144822b4cb03d840c3ed0d02e0743c3426ce6030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:5e:69:77:b9:60:9e:44:e8:1c:1a:3f:59:
03:fb:89:95:91:e8:8f:95:43:92:9e:8e:f1:88:1b:
0d:8a:03:78:da:7f:c6:74:9f:d1:9f:d9:ae:eb:00:
58:fc:0d:81:6b:e2:ae:64:9e:81:2b:6a:05:49:33:
52:f1:3a:b8:31:54:87:3f:dd:96:d1:60:d6:d3:1d:
a1:64:11:55:51:8c:7e:8d:6a:76:cd:f6:e2:0d:13:
e3:d3:28:ed:e3:5c:53:96:86:62:ba:21:62:b6:bc:
ee:f0:9c:34:82:ed:32:6f:43:10:bd:c5:ed:2e:6e:
f8:93:a3:c5:ae:90:1d:6f:e8:36:ca:f1:d4:53:6f:
f7:67:85:9a:f3:48:fa:51:f1:e7:80:e2:1b:95:c8:
b5:41:4a:39:cf:36:92:a5:86:25:3d:57:4b:e5:4f:
da:ea:63:65:4a:2d:ac:6d:39:58:33:b7:52:52:23:
d5:eb:a3:f5:3d:91:f1:13:03:2e:94:11:df:4e:13:
57:e8:1b:ed:d3:bd:ee:27:02:bf:84:25:2e:7a:d4:
a1:6f:2f:c8:17:9e:da:60:21:12:2e:a9:30:3d:aa:
b5:04:1e:67:66:63:2a:42:55:3b:bb:53:04:42:af:
c1:7f:5d:e3:ca:6e:26:b0:fa:5e:84:67:d2:9a:22:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:48:22:B4:CB:03:D8:40:C3:ED:0D:02:E0:74:3C:34:26:CE:60:30
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FEgitMsD2EDD7Q0C4HQ8NCbOYDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.66.0/24
Signature Algorithm: sha256WithRSAEncryption
be:21:c2:ea:83:fd:0b:7e:16:ee:43:c3:3e:9a:e9:94:dd:4f:
7c:ff:a6:da:15:6a:d0:c2:74:94:17:dd:ef:b0:5e:f7:5d:18:
f3:a7:4c:de:67:00:8c:c5:bc:81:13:57:b6:c2:9c:a5:08:62:
4c:1f:93:2a:46:fd:39:d0:ed:1b:15:e7:ef:8f:6b:19:43:0c:
e8:4a:d0:2b:79:2f:ae:9b:be:ab:6c:42:ff:84:54:a9:8d:6a:
db:f8:9d:17:3e:60:b0:6d:6a:10:bf:77:db:da:31:2e:d4:d7:
c2:c2:b9:72:f1:45:83:7b:ab:c8:2f:b1:3e:fa:56:78:a6:09:
3a:e4:81:7c:41:3e:cc:4c:d7:23:ed:ea:c4:ed:3a:ae:da:c9:
6e:7c:2b:3c:2b:f8:fd:a5:80:7b:ed:31:ea:1e:7b:c4:c9:e1:
d6:6b:73:ad:b9:ad:32:a6:46:44:2f:c9:a5:12:eb:e0:e6:5a:
e9:76:72:7b:9a:47:d8:de:d3:18:b5:54:23:13:1d:03:d8:93:
88:8d:79:5f:5e:03:ce:54:c2:73:d2:5a:b5:27:83:ef:cc:e3:
91:85:49:5d:4b:0a:da:62:92:8f:73:3a:ce:56:8b:c7:23:88:
4c:63:50:76:77:a2:91:ba:80:85:2d:11:3a:c4:46:d1:bf:54:
63:a8:63:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:22 2026 by rpki-client