Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/Fe9Xj78mLtBv56f9jO8i3r-s8qM.roa
File: Fe9Xj78mLtBv56f9jO8i3r-s8qM.roa (raw, json)
Hash identifier: wNTnsyJdnh8/6vp2voiL35CQyX5QiogzfMfKCFUPFDM=
Subject key identifier: 15:EF:57:8F:BF:26:2E:D0:6F:E7:A7:FD:8C:EF:22:DE:BF:AC:F2:A3
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 019F7A6346624183AEB1A4DF0388ACD18A14
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/Fe9Xj78mLtBv56f9jO8i3r-s8qM.roa
Signing time: Sun 19 Jul 2026 12:39:14 +0000
ROA not before: Sun 19 Jul 2026 12:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202492
IP address blocks: 185.162.88.0/24 maxlen: 24
185.162.90.0/23 maxlen: 24
185.165.152.0/23 maxlen: 24
185.165.155.0/24 maxlen: 24
185.170.128.0/24 maxlen: 24
185.170.130.0/24 maxlen: 24
185.172.36.0/23 maxlen: 24
185.174.41.0/24 maxlen: 24
185.174.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7a:63:46:62:41:83:ae:b1:a4:df:03:88:ac:d1:8a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jul 19 12:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15ef578fbf262ed06fe7a7fd8cef22debfacf2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:ba:6f:fe:09:de:d6:3c:7c:a3:60:5f:5d:
3f:35:1b:54:86:fc:2c:8f:84:39:92:fe:6b:e2:0f:
ff:fa:0c:e0:54:b5:0c:26:44:fc:2b:73:41:c4:4a:
1b:66:71:5d:a7:30:21:92:52:a2:24:06:23:ea:ef:
50:00:22:31:13:ca:b6:47:e1:f8:a7:c5:47:6b:d8:
3e:f3:27:fa:a5:de:66:4b:c1:8d:de:90:51:13:56:
62:bb:3f:8e:c1:cc:91:34:66:89:6f:cd:76:fc:ad:
f3:95:da:da:88:4c:07:e1:8c:e4:90:20:48:1a:d7:
a0:b5:b4:03:7a:21:6b:d1:56:ae:a4:e5:46:4e:b8:
12:06:87:10:a7:78:63:fb:ba:d2:54:e4:bd:ef:16:
bd:26:a9:40:2c:c8:91:5f:31:17:21:be:81:82:dc:
3d:e1:35:6d:d2:66:fa:bf:f5:c4:29:42:bc:5e:9a:
bc:02:c7:5f:e9:bf:e1:dd:dd:a1:eb:cc:79:09:77:
3f:56:a1:eb:4d:d8:7d:1f:50:08:ef:61:62:61:14:
b0:fd:dc:30:8a:65:14:e2:74:c2:cb:7a:46:4e:27:
11:86:f8:80:94:a2:37:34:7a:cd:a1:0b:4b:da:db:
d5:9e:06:95:e2:1f:47:65:60:fc:2d:a8:47:ab:f9:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EF:57:8F:BF:26:2E:D0:6F:E7:A7:FD:8C:EF:22:DE:BF:AC:F2:A3
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/Fe9Xj78mLtBv56f9jO8i3r-s8qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.88.0/24
185.162.90.0/23
185.165.152.0/23
185.165.155.0/24
185.170.128.0/24
185.170.130.0/24
185.172.36.0/23
185.174.41.0-185.174.43.255
Signature Algorithm: sha256WithRSAEncryption
21:15:41:37:5a:30:1a:16:e7:e8:d4:a5:85:d0:cc:c8:3c:4e:
30:fa:59:46:40:59:f7:21:69:6e:f1:8b:94:b1:46:e7:09:02:
34:e6:25:74:0b:d2:ee:eb:95:e8:a4:79:db:6a:07:6e:f4:e6:
fb:bf:22:9c:03:fb:c6:3d:47:3b:66:e9:f6:b9:07:20:17:cb:
a9:a9:84:8b:72:8b:28:36:7f:20:cb:6c:46:ae:5e:49:64:95:
86:a0:41:1e:72:6c:2f:ca:7e:d8:13:79:98:0f:6b:93:cf:46:
2f:78:50:e6:02:7c:ae:36:81:bd:8f:fd:4b:14:88:f9:3b:23:
c4:7f:3c:fe:38:0a:54:00:5b:f1:08:94:10:d8:4e:9b:da:da:
b3:dc:a2:23:a6:f0:56:7f:ad:b6:4a:8f:ae:de:a9:d5:0d:e4:
83:1e:e9:e4:f6:af:34:5c:4c:04:d3:f3:18:9d:26:53:e0:42:
39:10:89:9c:bb:59:0f:1c:dd:15:82:4e:0a:01:d5:43:75:33:
e2:dc:2f:56:44:cc:7e:8b:e1:9c:b4:f7:76:22:71:6d:db:8f:
2d:6f:8d:71:d0:b6:00:d4:0a:68:2e:25:8a:3a:6c:2a:36:73:
25:e2:a2:96:98:5d:2f:cb:7f:6c:41:39:23:c0:2f:27:d6:86:
ba:43:ea:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:31 2026 by rpki-client