Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/feJBFtuSedKYx8hKJbRGExQNMM4.roa
File: feJBFtuSedKYx8hKJbRGExQNMM4.roa (raw, json)
Hash identifier: s2bPD/pJAa8e5cSBOBrIAruOgYwmVNs+Z/xZevCP9W4=
Subject key identifier: 7D:E2:41:16:DB:92:79:D2:98:C7:C8:4A:25:B4:46:13:14:0D:30:CE
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019D143CEB12D90DA4B18D8D127DBB676327
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/feJBFtuSedKYx8hKJbRGExQNMM4.roa
Signing time: Sun 22 Mar 2026 06:30:29 +0000
ROA not before: Sun 22 Mar 2026 06:30:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48040
IP address blocks: 31.172.65.0/24 maxlen: 24
81.85.79.0/24 maxlen: 24
162.248.163.0/24 maxlen: 24
185.21.11.0/24 maxlen: 24
194.154.25.0/24 maxlen: 24
194.154.31.0/24 maxlen: 24
199.68.198.0/24 maxlen: 24
199.68.199.0/24 maxlen: 24
2a02:6b40:800e::/48 maxlen: 48
2a02:6b40:800f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:14:3c:eb:12:d9:0d:a4:b1:8d:8d:12:7d:bb:67:63:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Mar 22 06:30:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7de24116db9279d298c7c84a25b44613140d30ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:fe:f8:b5:89:2a:b2:f4:0b:ad:f2:fb:ad:
c3:d6:b8:42:3e:eb:c1:fe:9d:27:c2:dc:77:60:e2:
b7:85:06:9c:ca:75:22:66:0e:4a:21:78:41:f9:2e:
82:50:1b:50:5e:73:b5:85:0e:18:5d:09:81:05:5b:
bb:db:26:cc:a0:52:84:52:e0:36:77:ab:0f:d5:9c:
06:c2:3d:5f:17:f9:cc:ea:71:f8:5b:f3:28:50:c0:
c8:c1:97:09:38:8a:03:16:22:ed:e3:dc:6c:06:20:
86:dc:8d:09:e2:8c:db:cc:8e:27:68:8a:a6:ef:a4:
c3:29:e6:89:07:5e:e6:0f:09:a0:1f:6c:c3:f8:41:
8d:c0:89:d8:0a:13:fa:ba:59:5d:01:1e:89:4b:8c:
73:72:be:e6:e0:ae:a2:85:e8:b7:bb:a9:fc:8b:d7:
76:1f:f8:4b:74:f2:dd:7e:21:42:7c:4a:92:91:69:
e6:48:c1:7f:cf:29:a5:44:d0:00:fb:de:3f:f6:44:
7f:c7:b3:19:9f:b6:ae:0d:9d:2c:9b:b9:a6:2f:70:
1f:6c:fa:9c:bf:4b:23:1a:3a:57:d6:2c:33:b2:1a:
13:3e:c7:d7:bb:7e:7e:00:e5:a6:d3:23:9b:4c:55:
19:26:83:88:9b:15:2a:05:2e:af:5d:c7:88:43:28:
d6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E2:41:16:DB:92:79:D2:98:C7:C8:4A:25:B4:46:13:14:0D:30:CE
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/feJBFtuSedKYx8hKJbRGExQNMM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.65.0/24
81.85.79.0/24
162.248.163.0/24
185.21.11.0/24
194.154.25.0/24
194.154.31.0/24
199.68.198.0/23
IPv6:
2a02:6b40:800e::/47
Signature Algorithm: sha256WithRSAEncryption
5b:6c:70:e9:ce:81:60:b6:89:7e:db:98:7f:f4:37:bf:75:b1:
ee:ac:ea:1a:1e:13:0f:3d:e1:c1:45:8b:ab:14:38:80:e6:9b:
d6:1a:33:92:84:46:5a:e7:84:8d:7c:90:40:a6:e9:8a:a8:24:
f7:7b:b2:6b:51:0e:1e:13:01:af:81:9d:50:b4:fa:29:86:a8:
56:23:3e:19:96:53:b3:e6:5f:f0:9b:aa:57:92:9d:8b:46:f9:
aa:6b:b0:63:07:e7:e8:22:6a:ce:4d:bc:4e:ea:b1:22:52:19:
f4:7a:3c:d7:17:e8:37:35:25:88:b4:c7:3b:82:7e:1b:1b:89:
20:eb:bb:c3:79:b6:45:37:f4:99:be:a1:f5:c0:65:d5:32:91:
9d:da:3f:ef:ab:de:5c:c4:03:89:e2:8e:b6:ef:94:1e:61:09:
23:a1:1b:40:bd:54:24:73:b1:54:8a:7e:c7:ea:70:b8:f1:b3:
e5:98:03:9d:66:14:46:f2:00:7e:e7:e1:2b:64:74:40:d5:a6:
0e:d7:84:28:84:42:c5:ca:95:6f:20:f5:dd:44:e1:9b:b2:6e:
de:a5:e3:ef:62:73:d8:d5:d2:2a:e3:f9:e2:0a:7b:77:15:b5:
0a:db:af:80:9d:65:95:47:aa:13:4b:2d:fd:bd:cb:d0:9a:f6:
32:8e:31:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:13:33 2026 by rpki-client