Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/FEE0W1FvUWZY1yNTAUusq7fzBQA.roa
File: FEE0W1FvUWZY1yNTAUusq7fzBQA.roa (raw, json)
Hash identifier: Hd0jbgNDlWlFVrZYfQAqVLAGgeJbu+X/gxILT2NBZwY=
Subject key identifier: 14:41:34:5B:51:6F:51:66:58:D7:23:53:01:4B:AC:AB:B7:F3:05:00
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 019F09483B289F34EC6A707443747DD7B4B6
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/FEE0W1FvUWZY1yNTAUusq7fzBQA.roa
Signing time: Sat 27 Jun 2026 13:32:36 +0000
ROA not before: Sat 27 Jun 2026 13:32:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44789
IP address blocks: 31.24.184.0/21 maxlen: 21
45.10.92.0/23 maxlen: 23
45.10.94.0/23 maxlen: 23
92.63.240.0/20 maxlen: 20
185.143.200.0/23 maxlen: 23
185.143.202.0/23 maxlen: 23
2a00:9860::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:48:3b:28:9f:34:ec:6a:70:74:43:74:7d:d7:b4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Jun 27 13:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1441345b516f516658d72353014bacabb7f30500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:0a:bb:6f:6b:2c:60:67:5d:89:68:35:ba:
d9:48:a3:26:a0:ce:04:95:84:cc:a4:7a:88:d6:53:
42:86:5f:3f:5a:0e:36:f0:be:4c:91:4f:77:73:2d:
e7:30:a4:c5:83:be:e7:ea:7a:44:f4:46:2b:f3:94:
2b:15:4f:d8:90:1c:96:f8:e0:3e:92:26:60:93:42:
ad:3e:4c:0d:88:49:86:3d:cb:ad:6b:96:9c:64:a4:
d2:15:bb:3d:1c:b5:ee:f7:a7:a2:dc:f2:c4:52:d6:
09:f7:72:d2:31:8a:fa:b8:18:e7:37:fb:55:e4:4e:
c4:87:a0:e4:90:79:64:fc:1c:e7:5a:4a:fe:c4:89:
84:ee:5c:fc:a8:4c:9f:41:35:f0:2a:d7:02:f3:2f:
85:bb:af:e9:92:8f:d7:65:84:e1:47:23:53:63:9a:
60:38:a0:12:e9:d0:0f:55:46:5a:9a:0a:a5:51:1d:
eb:35:f3:bd:1e:26:14:cf:86:05:c3:43:fb:f6:09:
67:8e:f5:a8:bf:7b:16:4e:a6:f6:58:e3:c1:44:91:
02:df:cc:31:4f:46:a2:d2:8e:f9:9f:8c:32:3e:34:
4f:33:04:ae:ea:4f:3e:8e:f8:8c:ac:5e:ef:6b:8e:
b7:cb:35:0e:06:0a:54:d0:89:8f:a5:19:dc:0a:69:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:41:34:5B:51:6F:51:66:58:D7:23:53:01:4B:AC:AB:B7:F3:05:00
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/FEE0W1FvUWZY1yNTAUusq7fzBQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.184.0/21
45.10.92.0/22
92.63.240.0/20
185.143.200.0/22
IPv6:
2a00:9860::/37
Signature Algorithm: sha256WithRSAEncryption
d0:56:be:3b:de:ca:08:f0:ef:ca:03:ae:fa:62:75:4e:70:a3:
dc:73:fb:7b:df:e9:61:bb:1a:a6:d4:19:2c:34:9e:67:e6:77:
16:34:7b:9d:d0:3a:3e:c6:a4:1d:f6:2e:c3:d5:ed:c2:6a:0e:
ab:99:00:da:9e:e1:18:2d:7d:35:b7:d3:8f:1a:3b:0b:aa:02:
13:4d:b0:0a:07:25:ad:9e:30:02:c0:86:67:25:50:95:36:97:
d4:7f:b4:22:01:0e:b6:8c:89:c3:de:40:72:69:e6:90:44:03:
df:88:07:11:68:13:72:08:b4:ec:fd:68:62:6d:a6:21:68:27:
6e:4c:a7:16:77:cf:5e:20:87:14:a3:22:2a:5c:de:37:5c:c4:
09:93:e2:82:2d:6e:1c:62:68:26:58:37:03:7c:4f:0b:b6:39:
58:22:ea:2b:f0:5f:4c:07:08:ca:08:a5:e1:cd:ff:42:25:89:
f7:b0:4e:49:9f:b1:96:f5:1d:d6:a2:a7:f9:e5:ac:18:2f:fb:
be:99:58:81:ec:f5:ec:d9:65:93:86:90:d5:91:3b:91:57:22:
0e:f4:2f:c8:bb:d6:ec:13:da:a8:ec:34:de:53:df:1e:80:1f:
19:55:32:22:3c:a8:14:d8:5d:4b:30:42:64:b0:91:be:ec:1e:
63:93:99:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:01 2026 by rpki-client