Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/FEaE2qLI_wqHAWChOgjsRXVq6ME.roa
File: FEaE2qLI_wqHAWChOgjsRXVq6ME.roa (raw, json)
Hash identifier: F+cDcJVnU67LGTQYpY/6DTGdAR8nGV5p4mlu5N+H+FU=
Subject key identifier: 14:46:84:DA:A2:C8:FF:0A:87:01:60:A1:3A:08:EC:45:75:6A:E8:C1
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A090ED555402327EA313CA434A32907BE2
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/FEaE2qLI_wqHAWChOgjsRXVq6ME.roa
Signing time: Fri 11 Sep 2026 14:44:28 +0000
ROA not before: Fri 11 Sep 2026 14:44:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 194.231.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:ed:55:54:02:32:7e:a3:13:ca:43:4a:32:90:7b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 11 14:44:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=144684daa2c8ff0a870160a13a08ec45756ae8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:78:05:b0:d9:d1:d0:ef:0a:f9:3e:09:16:
34:f5:e6:3c:6e:73:77:d8:c4:b8:70:65:d2:30:9f:
9d:0a:5f:45:a1:b2:1f:4c:1f:e3:4d:49:4e:65:a0:
95:99:6d:27:b5:5b:62:91:ee:6b:92:ab:89:de:5c:
de:ed:c3:66:01:fc:da:8e:ed:ad:6f:6b:de:9e:89:
44:54:83:16:de:42:e9:66:23:00:ec:c0:f4:b6:fd:
2e:b0:b6:0a:ea:76:15:27:f8:c2:3b:d6:67:23:ec:
28:83:b0:d3:0a:20:16:1e:b0:02:d1:10:7d:cb:a2:
21:51:dc:3a:7d:b6:d7:85:f8:d1:70:64:8e:27:a7:
86:7a:75:2a:f7:8d:3a:f4:df:be:ec:91:39:60:8d:
e8:4f:3c:5b:f0:64:24:38:30:b9:1b:61:7f:0b:83:
aa:e1:41:17:5e:35:18:2b:3b:fd:43:bb:58:31:7c:
38:76:88:b4:72:9e:3b:5d:d2:5c:66:33:3a:78:35:
c8:d3:2e:be:ea:cc:4c:2b:f5:eb:7a:83:3a:7a:00:
70:49:ef:50:87:73:57:08:47:37:4d:55:52:f2:a6:
79:56:fe:90:44:57:2d:40:13:0f:59:fd:3b:15:08:
f1:a9:f0:68:c8:2d:12:6c:35:d4:40:d0:1d:48:38:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:46:84:DA:A2:C8:FF:0A:87:01:60:A1:3A:08:EC:45:75:6A:E8:C1
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/FEaE2qLI_wqHAWChOgjsRXVq6ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.148.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a3:00:59:85:a9:f5:2b:f7:d1:0f:19:cf:a2:36:00:e6:da:
38:da:6b:46:d7:9b:56:7d:4d:ca:de:71:23:55:9e:df:8e:64:
8b:0b:ee:06:50:fb:d3:67:96:9e:1b:ef:77:eb:70:70:63:a2:
d9:ec:40:2c:15:ad:86:e3:10:dd:7a:81:4b:17:bd:7c:38:f6:
41:a0:d3:25:e1:10:84:b5:8e:fb:77:23:63:dd:5c:93:69:2d:
dc:b8:cb:1a:1f:e7:7f:f9:fc:0e:e5:b9:11:f9:28:f6:75:2f:
42:c8:94:70:30:4a:37:19:bd:20:6f:60:63:00:ea:39:1c:19:
5c:ba:cd:99:ce:bb:1e:8c:b2:eb:53:de:13:df:15:6a:80:d7:
6f:a9:d2:ca:c1:6e:4d:98:b8:dc:eb:68:31:5b:2b:b5:9b:79:
2e:d9:f4:ca:c9:7f:b0:19:39:2c:4c:1b:f7:5f:85:79:b7:2b:
81:cf:28:08:2d:57:8b:ac:c1:ca:53:ea:57:47:8a:7f:9a:65:
0e:42:2c:66:39:df:c8:2f:b5:ec:05:76:e5:67:7e:71:cf:62:
77:f8:0b:a9:58:12:7f:e9:9a:07:16:1f:27:6b:93:fd:33:09:
71:f9:ae:22:c0:95:4b:0c:cc:b4:15:8a:34:b8:ea:90:52:19:
41:66:c8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:02:55 2026 by rpki-client