Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/feOS-NSXyT14F93YRqwDSS5ppnU.roa
File: feOS-NSXyT14F93YRqwDSS5ppnU.roa (raw, json)
Hash identifier: mmXrFJVPwBaXxjyLaqbDugz/JL+KAtHJ2pARkWIwW/I=
Subject key identifier: 7D:E3:92:F8:D4:97:C9:3D:78:17:DD:D8:46:AC:03:49:2E:69:A6:75
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A0C8BAE755E9FE0BD1C8C7198241BAC28E
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/feOS-NSXyT14F93YRqwDSS5ppnU.roa
Signing time: Tue 22 Sep 2026 10:48:07 +0000
ROA not before: Tue 22 Sep 2026 10:48:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.207.0/24 maxlen: 24
194.143.209.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.200.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.0.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.6.0/24 maxlen: 24
213.220.7.0/24 maxlen: 24
213.220.11.0/24 maxlen: 24
213.220.14.0/24 maxlen: 24
213.220.18.0/24 maxlen: 24
213.220.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:ba:e7:55:e9:fe:0b:d1:c8:c7:19:82:41:ba:c2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Sep 22 10:48:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7de392f8d497c93d7817ddd846ac03492e69a675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:eb:95:57:b5:73:ec:e0:95:05:f8:e0:93:
50:a1:ab:93:7c:65:82:d1:3d:e6:4c:e4:25:8d:fb:
13:89:87:5a:27:48:39:14:d0:5a:a7:62:b1:d8:6c:
1b:ed:c4:52:c3:a5:42:86:43:a6:fb:b7:c8:96:3f:
cb:d4:03:20:61:5a:87:4d:4e:e9:fb:ee:25:f4:59:
0a:8e:2d:41:e0:2d:ce:24:47:d8:5b:d3:3c:83:31:
6f:4c:b7:79:a0:8d:6b:07:cb:15:8c:93:9d:42:42:
50:44:f9:5f:1e:fb:f3:4f:85:de:a0:da:55:f0:f7:
7b:01:3c:fc:38:90:69:05:a5:d4:c1:48:bf:73:2c:
55:a1:2d:96:9b:ab:98:e5:3f:6b:3f:b9:9e:ca:90:
17:bf:63:9b:eb:71:ac:4c:1f:68:f9:32:b4:6f:fd:
44:1a:ae:c7:3e:81:ea:a6:e5:9c:85:ee:ee:bf:ac:
a8:50:f3:f7:3c:0f:1c:c7:de:42:98:3d:ef:47:8e:
e3:7d:b0:e7:39:d0:5b:79:c7:38:03:56:9c:39:83:
2d:7b:3b:49:56:89:f4:c1:79:7d:17:58:36:46:34:
08:5b:42:8a:28:1e:1d:b0:82:62:05:78:10:91:81:
f0:bf:c6:c6:95:ee:1c:a0:93:4c:e0:0c:84:1c:f0:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E3:92:F8:D4:97:C9:3D:78:17:DD:D8:46:AC:03:49:2E:69:A6:75
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/feOS-NSXyT14F93YRqwDSS5ppnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.205.0/24
194.143.207.0/24
194.143.209.0/24
194.143.218.0/24
194.143.221.0-194.143.223.255
195.114.192.0/24
195.114.195.0-195.114.198.255
195.114.200.0/24
195.114.202.0/23
195.114.205.0/24
213.220.0.0/24
213.220.2.0/24
213.220.4.0/24
213.220.6.0/23
213.220.11.0/24
213.220.14.0/24
213.220.18.0/24
213.220.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:0b:1b:25:2e:a2:4e:2d:81:91:f0:6a:d5:77:6e:b0:17:04:
55:34:3b:36:d9:09:6d:b6:6b:02:ba:9c:49:c0:82:f6:fe:52:
fe:06:19:2e:d0:7c:0b:a4:ef:b7:7c:10:dd:6d:6a:51:f5:6e:
83:d8:08:15:60:42:6e:c9:9d:d1:4b:96:55:78:ae:1e:8c:1f:
b2:46:08:4f:99:12:a6:8c:5d:c5:2c:a4:22:88:63:a9:89:2b:
c8:d0:37:50:f2:2a:8c:47:aa:bc:f7:f8:b3:cd:b9:91:45:06:
22:13:ca:58:b1:f3:c9:26:f3:bf:82:e3:62:c6:61:78:5d:3d:
5e:b9:5a:44:de:2e:9b:29:cd:f0:ef:c0:67:d5:68:7e:9f:60:
bd:85:98:58:cb:ee:0b:fd:de:15:0a:a5:af:b9:02:57:06:8b:
0f:93:b8:ca:21:ad:ff:f6:ac:f1:ea:c9:90:16:4b:2d:e9:ab:
71:91:27:4c:72:96:c3:1f:9a:c0:d7:ed:0d:7f:55:3e:0a:18:
4d:32:f7:78:d6:61:7a:f5:9a:df:77:b3:c1:ad:55:53:80:a2:
56:16:39:01:da:f1:73:59:d6:81:4d:30:69:23:ec:be:29:f6:
0b:b1:f4:5e:e3:4c:85:28:0b:0b:90:f5:a6:7c:fe:38:6e:d5:
90:75:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:35:49 2026 by rpki-client