Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FCEFyz_r-iCedLVhCYEmDNpUERg.roa
File: FCEFyz_r-iCedLVhCYEmDNpUERg.roa (raw, json)
Hash identifier: 9F04KBFIcZJZEHPSQaaiZdVcjgQ8rOQWQ2knFtdsPl0=
Subject key identifier: 14:21:05:CB:3F:EB:FA:20:9E:74:B5:61:09:81:26:0C:DA:54:11:18
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F2FF4DC2B2BF639CA37DA81DD997A08F9
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FCEFyz_r-iCedLVhCYEmDNpUERg.roa
Signing time: Sun 05 Jul 2026 01:46:43 +0000
ROA not before: Sun 05 Jul 2026 01:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402252
IP address blocks: 200.165.20.0/24 maxlen: 24
200.181.84.0/24 maxlen: 24
201.24.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:f4:dc:2b:2b:f6:39:ca:37:da:81:dd:99:7a:08:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 5 01:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=142105cb3febfa209e74b5610981260cda541118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:4d:c7:39:d2:77:9e:53:43:a3:a1:26:e0:
42:57:a7:30:2c:2d:58:0b:0a:7d:67:9f:50:32:55:
b4:10:74:85:50:a9:1f:af:26:05:a4:42:8a:fb:50:
ae:6a:4b:a7:23:37:dd:0a:57:5c:81:a6:78:4f:30:
a2:98:30:79:48:67:52:9b:b3:3f:96:ee:58:f2:fd:
8a:16:5f:cc:f2:fb:79:d3:22:45:ea:50:1e:91:28:
48:aa:1e:d5:9b:03:61:ef:29:c7:35:24:af:2e:e7:
40:42:d0:1c:2c:0b:aa:7a:b4:b2:9e:15:56:69:20:
75:b8:7c:7f:0c:8e:76:d7:25:90:91:bf:b3:bc:6d:
60:e2:a4:2b:01:32:58:4f:9a:88:22:31:38:64:2d:
99:dd:0d:f1:ca:d7:63:bb:56:60:ff:fc:c4:e9:53:
de:cb:7f:b4:30:bc:a6:8c:2c:fa:76:1a:41:5e:85:
4c:f0:14:0c:62:ef:7a:f4:7f:4e:da:ad:14:0b:4b:
13:3f:23:ee:5b:b4:b9:c7:7f:88:3a:05:6c:81:38:
88:19:3a:2d:b7:30:50:9c:c5:c4:0a:aa:96:64:97:
45:3d:b6:f5:a9:c1:ae:b7:78:38:c2:3a:86:fb:fa:
f3:ed:02:46:81:1c:0d:17:3b:28:2d:2f:06:c1:54:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:21:05:CB:3F:EB:FA:20:9E:74:B5:61:09:81:26:0C:DA:54:11:18
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FCEFyz_r-iCedLVhCYEmDNpUERg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.165.20.0/24
200.181.84.0/24
201.24.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c6:99:61:45:bf:36:a6:18:8e:0e:5b:35:58:66:04:cf:72:
da:b2:a5:40:7f:e9:f6:54:db:80:59:09:25:cf:1f:a6:c4:8f:
97:1e:ad:4c:c2:22:cb:56:80:73:37:68:fb:20:57:3d:9d:d1:
9c:27:60:19:ad:74:d9:02:d1:13:c4:e6:d8:32:6e:ae:3c:42:
f7:c9:76:1a:40:ea:b0:3b:16:07:37:40:2f:78:6e:9c:ad:9a:
6e:49:2a:41:20:38:5b:88:3e:62:e1:f4:9c:4c:c6:03:ca:fb:
c3:37:10:dc:fc:53:09:dc:79:dc:70:94:a6:ea:fc:25:fb:6b:
f7:62:d8:c2:d3:66:19:80:77:cf:32:61:0b:3d:33:68:3b:e6:
ac:14:59:5f:f2:3d:14:97:ab:1f:23:7e:23:7f:b6:bd:be:bf:
ab:f4:f9:ba:a6:fc:f1:79:cf:21:e2:47:40:85:51:db:ed:c8:
47:e7:18:44:1d:32:34:cd:8d:9f:cf:c3:12:f9:b9:32:be:d8:
f4:64:3e:59:cb:a6:b1:33:ff:2f:ae:f8:d8:ab:82:3c:35:d1:
b6:c3:dd:3d:76:0b:da:1b:15:fe:a6:d4:d7:8e:a3:57:89:d6:
c7:c0:c2:d3:27:3c:d7:df:04:22:f6:21:cb:bc:ce:1b:bd:56:
35:46:d8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:57 2026 by rpki-client