Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/kFDNW44d_7Y4nLWRebCtLLXEjdQ.roa
File: kFDNW44d_7Y4nLWRebCtLLXEjdQ.roa (raw, json)
Hash identifier: bCPIj8cG45wwAeAIHiqwRoRyy3+ozH6X7Enj6EEemPk=
Subject key identifier: 90:50:CD:5B:8E:1D:FF:B6:38:9C:B5:91:79:B0:AD:2C:B5:C4:8D:D4
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019DE3E2914DFAB29EBDA1AFD350575B90A3
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/kFDNW44d_7Y4nLWRebCtLLXEjdQ.roa
Signing time: Fri 01 May 2026 14:12:49 +0000
ROA not before: Fri 01 May 2026 14:12:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214192
IP address blocks: 185.215.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e3:e2:91:4d:fa:b2:9e:bd:a1:af:d3:50:57:5b:90:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 1 14:12:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9050cd5b8e1dffb6389cb59179b0ad2cb5c48dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:1d:8f:a3:31:fc:66:6f:82:6b:23:fa:5c:
19:ea:cb:29:0c:d8:9d:12:e7:4e:95:d4:4f:61:cc:
b1:1b:a0:a3:fa:66:24:1a:6e:cb:6f:36:3a:3c:34:
a3:34:8b:fd:70:17:28:06:29:fa:89:9f:5a:91:9c:
cd:64:54:cf:26:ae:53:83:97:c7:b9:9a:cc:80:12:
83:78:90:c2:2f:39:bb:8e:15:fd:c1:b3:5b:b7:dd:
ee:b6:10:d8:00:7c:db:e8:1e:4d:e2:f8:e9:02:89:
73:47:c8:a2:d0:a1:81:74:d4:99:14:09:cc:c6:59:
07:75:7e:ac:f0:ed:5c:d1:17:4d:14:7e:78:7f:bb:
5c:94:70:a6:25:ff:85:f5:d1:95:f8:e5:63:69:19:
0a:ca:6f:4a:f1:0d:6a:b9:12:e5:7c:11:27:ec:40:
25:f0:83:ed:b7:f2:24:81:46:b1:c5:41:c7:a4:50:
01:af:b4:6c:3b:70:85:90:9a:4a:6c:be:f7:bb:e9:
a1:04:a9:84:fe:3d:c3:a8:0b:e2:83:db:1b:26:9d:
21:34:d3:03:83:b9:ee:fd:b8:30:5b:e4:3d:7f:d6:
d8:e5:26:2f:82:4b:ae:4e:b3:df:86:97:92:5d:eb:
00:4c:ee:f0:bc:c7:16:dd:0b:1a:e4:9b:21:f7:0a:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:50:CD:5B:8E:1D:FF:B6:38:9C:B5:91:79:B0:AD:2C:B5:C4:8D:D4
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/kFDNW44d_7Y4nLWRebCtLLXEjdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.229.0/24
Signature Algorithm: sha256WithRSAEncryption
28:7b:4a:95:ad:9f:9f:75:98:5d:36:a8:3c:0e:5f:bf:b6:25:
de:19:b2:ec:51:63:eb:89:72:56:41:9f:ae:6c:35:de:5a:bb:
fc:07:e0:fe:c0:7f:60:5e:aa:3e:aa:a3:45:0b:96:f1:00:9c:
91:e3:ac:87:e2:63:c7:6d:a4:37:69:e2:1a:82:f4:f1:fa:9d:
4c:c0:35:f3:7e:d4:f2:a8:1f:ef:44:6f:22:d6:e6:d2:99:80:
3b:36:04:19:c6:98:3e:66:ee:2b:09:d4:1c:3e:9a:d6:5b:92:
52:3c:db:ed:1e:70:d6:a7:01:de:3a:c9:c4:71:dd:d2:14:de:
02:3d:bc:9f:73:cd:a0:9d:2e:c7:89:10:0a:f9:03:22:4f:45:
b0:21:ca:c3:8e:3f:ae:2f:31:bf:47:51:42:53:37:34:42:76:
de:b3:a6:d8:9d:78:a2:27:03:a9:b4:a1:e4:92:38:e1:8a:9a:
42:57:ba:89:cc:2f:a3:43:19:7a:17:80:be:6d:cd:4b:91:e9:
40:4f:61:06:b0:14:14:f4:3e:de:0b:0a:67:34:a1:65:12:84:
cf:ca:d9:36:2c:2f:c8:b4:ce:0b:4a:a9:a8:ad:16:a5:48:16:
56:d1:8b:fe:b3:3e:c6:91:fd:43:8e:41:f1:7d:d2:20:1c:a2:
47:d3:fc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:42 2026 by rpki-client