Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Fe-FyMRwhjgRoMZIHnUPOmU5tSc.roa
File: Fe-FyMRwhjgRoMZIHnUPOmU5tSc.roa (raw, json)
Hash identifier: 57oCr13uTF1HIj16S9qzLcXhqUuXADV6ZNpFyqg5gM0=
Subject key identifier: 15:EF:85:C8:C4:70:86:38:11:A0:C6:48:1E:75:0F:3A:65:39:B5:27
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0BAF70CD2458C78114A4E6B52FBDFA9A4
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Fe-FyMRwhjgRoMZIHnUPOmU5tSc.roa
Signing time: Sat 19 Sep 2026 18:39:07 +0000
ROA not before: Sat 19 Sep 2026 18:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17404
IP address blocks: 195.21.128.0/24 maxlen: 24
195.21.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:f7:0c:d2:45:8c:78:11:4a:4e:6b:52:fb:df:a9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 19 18:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15ef85c8c470863811a0c6481e750f3a6539b527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:13:a9:8b:5d:31:f2:af:1b:2e:29:e6:76:
bc:09:2d:2b:66:10:cb:25:65:df:2d:ae:97:ad:fa:
14:3e:89:58:0d:3f:2f:cf:3b:8e:69:26:41:97:85:
c1:ed:82:9e:26:71:92:24:44:0f:3d:63:80:81:b6:
27:e3:d7:dd:a0:48:97:42:7a:b7:2c:84:f5:e2:9e:
ee:a9:3e:ed:50:be:c0:8d:00:50:7c:63:d5:d9:f6:
17:af:04:ab:f7:ff:2f:01:a0:df:4e:2e:ed:71:be:
45:69:44:b0:e3:d0:a5:c2:de:ce:50:31:74:fc:2c:
2e:ea:73:ef:99:2b:f0:07:20:f0:32:a1:9a:7b:db:
0a:91:5c:56:0b:d4:9b:96:32:af:0e:a6:d9:5f:41:
4d:a2:19:9b:cb:b0:b9:19:99:fb:b6:ec:59:04:7d:
e0:16:94:fb:76:d7:9d:cf:ab:56:f4:cd:35:c0:44:
6d:a5:8a:13:8f:0c:bf:6c:86:87:1c:c2:df:5a:c8:
53:45:49:21:5c:e0:35:26:9e:68:82:43:dd:6e:fa:
af:ba:ee:5b:40:d0:bf:59:4f:10:97:6b:69:22:8d:
85:d8:8c:43:33:2e:b3:9e:a8:c5:42:83:89:08:c8:
89:46:5f:0e:93:00:35:85:4b:f2:92:d9:86:b5:7c:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EF:85:C8:C4:70:86:38:11:A0:C6:48:1E:75:0F:3A:65:39:B5:27
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Fe-FyMRwhjgRoMZIHnUPOmU5tSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.21.128.0/24
195.21.148.0/24
Signature Algorithm: sha256WithRSAEncryption
af:cf:b5:64:cb:0e:92:56:20:43:13:8a:25:19:40:11:57:50:
2a:ff:8d:c4:ba:6b:d2:c1:18:7e:b0:db:48:e6:3c:2d:0a:ef:
22:c1:c0:ff:0a:15:19:ab:21:fa:21:de:f4:16:7f:a8:ec:19:
1c:ba:6f:07:b9:68:2c:d6:ff:c9:5c:db:b1:4d:ed:df:98:2b:
5a:93:f3:0e:c7:df:9b:07:a2:62:53:49:bd:36:09:23:73:a5:
37:c6:de:ea:3d:68:43:a1:8c:6b:e9:48:8f:6a:61:47:e9:5e:
98:3e:90:df:4c:77:28:95:2f:5e:7e:5a:3b:ee:8f:3d:5f:d5:
9c:ea:64:38:a1:b2:7a:ba:7d:f0:84:c6:c0:ad:ce:fa:ed:57:
8f:61:41:99:7e:6b:2b:5b:2a:41:7c:f8:a4:98:43:eb:4b:fe:
6b:ad:a1:16:1a:ec:fc:05:9c:c5:54:60:15:01:b3:dd:00:6f:
6a:b0:cb:24:62:86:1b:47:c0:65:53:fc:cb:b9:8b:94:82:c3:
f1:40:5a:6a:03:ea:22:30:3a:6a:40:fd:17:9e:6f:60:c3:c4:
8e:1f:de:7a:20:36:27:69:4f:2c:52:23:6a:73:15:07:93:58:
3e:01:5d:0a:26:85:df:7b:b5:0f:1f:5a:53:81:97:f4:cd:2c:
c1:8b:5e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:04:48 2026 by rpki-client