Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/FCEMG4588BkT89tcMGmpEUtzwqA.roa
File: FCEMG4588BkT89tcMGmpEUtzwqA.roa (raw, json)
Hash identifier: 8XfXqRf++gMKVOxH1vqMVYxcy9AG7D908C8cdzKIn68=
Subject key identifier: 14:21:0C:1B:8E:7C:F0:19:13:F3:DB:5C:30:69:A9:11:4B:73:C2:A0
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A1775D46084DABA79E6C7A2CD205C06E65
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/FCEMG4588BkT89tcMGmpEUtzwqA.roa
Signing time: Mon 26 Oct 2026 08:39:23 +0000
ROA not before: Mon 26 Oct 2026 08:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 194.38.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:5d:46:08:4d:ab:a7:9e:6c:7a:2c:d2:05:c0:6e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 26 08:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14210c1b8e7cf01913f3db5c3069a9114b73c2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:57:47:0d:2b:b6:f8:00:a0:1e:5e:8b:c5:
68:95:5c:25:b9:ab:7d:70:6e:e5:79:55:e9:77:87:
f0:97:0e:22:96:c9:a0:31:7b:a9:25:a0:49:ee:aa:
ea:5b:10:30:24:60:a1:42:b8:a7:6b:2c:0c:d7:00:
a3:95:81:17:9f:c6:33:1a:7b:3d:05:f9:07:5e:36:
55:8b:09:36:0e:a8:64:62:47:a7:ec:67:6b:4b:e1:
18:4c:22:42:00:22:4c:72:fd:45:e6:f2:8a:c5:9b:
64:6f:af:9d:e1:44:27:b3:f6:78:82:f0:cc:03:56:
2a:91:2b:14:76:65:c1:64:e3:7d:b5:e3:79:fb:89:
ca:36:74:a9:2b:62:03:a9:a1:77:e7:02:17:7d:db:
47:15:b2:a5:01:49:be:77:b7:13:b9:61:bb:83:d8:
18:44:f3:cf:47:32:39:8c:00:f3:40:07:04:2e:ac:
f4:87:a4:71:14:e5:6c:7a:81:54:a4:e3:e3:09:5c:
e9:aa:a1:01:75:c8:2c:67:31:0e:91:11:22:be:fe:
17:d5:27:e2:73:12:fe:76:f7:59:d3:d8:19:ca:fd:
c0:b7:6a:3a:08:1d:05:84:67:26:a0:c0:b9:6c:cb:
6d:59:aa:f7:e9:d3:73:3b:4b:ec:19:47:0c:dd:38:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:21:0C:1B:8E:7C:F0:19:13:F3:DB:5C:30:69:A9:11:4B:73:C2:A0
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/FCEMG4588BkT89tcMGmpEUtzwqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.51.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4d:b4:c7:99:d8:2d:5b:b5:ec:bc:bb:d5:26:ec:91:44:b6:
71:f5:bc:b5:45:23:ca:90:d5:3d:cc:24:d3:e2:f2:40:8d:15:
04:e1:ec:aa:ae:73:03:ac:1a:2c:3f:0a:fd:0a:56:67:d8:69:
19:38:bb:24:04:8e:18:f1:21:d9:52:98:dc:ba:46:3a:e8:96:
9d:bf:1d:f4:2b:da:e9:5d:34:5e:13:e1:3a:09:1f:72:51:ea:
c0:ea:30:6c:48:d3:0f:10:7a:ef:67:de:15:35:36:08:4e:43:
92:a6:c9:3b:1c:61:52:8f:be:93:91:e3:29:79:2e:dd:8a:9d:
2b:91:32:e7:8a:a0:8b:ac:4f:db:41:25:33:31:fb:35:35:e1:
62:14:6a:2a:16:a6:c4:0d:5f:f6:f3:a5:26:76:19:a6:b5:f0:
d3:a0:46:40:4b:a6:65:3c:65:a1:81:ed:24:d1:16:68:46:c0:
5c:c3:2a:8f:1a:ef:fd:d6:84:c8:b1:7f:d7:4c:e1:f1:60:3f:
9c:25:07:d0:ba:ed:3e:13:17:f0:67:7b:22:97:9d:a5:f1:13:
b6:e5:4a:fa:03:bc:2c:1b:d3:00:31:c6:89:6d:f5:66:0b:57:
9b:e6:f0:ce:36:65:f5:1d:a6:bd:64:31:82:35:fd:0b:2a:d9:
c7:d5:83:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:20:03 2026 by rpki-client