Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/FeEckT4qIPnFBupFbhMx-hvffm4.roa
File: FeEckT4qIPnFBupFbhMx-hvffm4.roa (raw, json)
Hash identifier: dMuaS63v6Vf4ExEsJJZptpBNFEkp0v5Qz3wn0QyTq14=
Subject key identifier: 15:E1:1C:91:3E:2A:20:F9:C5:06:EA:45:6E:13:31:FA:1B:DF:7E:6E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 01A06F5A8D570D95B13E468A7D75EE529742
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/FeEckT4qIPnFBupFbhMx-hvffm4.roa
Signing time: Sat 05 Sep 2026 02:16:40 +0000
ROA not before: Sat 05 Sep 2026 02:16:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203077
IP address blocks: 185.138.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:5a:8d:57:0d:95:b1:3e:46:8a:7d:75:ee:52:97:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Sep 5 02:16:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15e11c913e2a20f9c506ea456e1331fa1bdf7e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:39:bd:a9:73:2f:93:a4:37:08:5e:46:4a:
2b:4c:13:e4:38:af:b2:cb:fb:b8:1a:f2:5d:e5:f1:
42:e7:f2:13:d5:1e:00:b0:fd:f4:cd:aa:b9:4e:ed:
64:ac:93:51:77:d7:7f:bb:19:76:c6:48:ea:35:4b:
08:e9:70:56:f3:4a:7c:58:b8:31:d1:95:a1:9b:7e:
21:4f:63:80:01:b1:48:70:64:35:e9:61:a6:08:2b:
f8:7f:f9:c5:03:4a:be:93:ce:54:71:b2:67:e5:8e:
14:10:8a:95:be:b2:d5:cd:f9:f6:ed:91:62:f6:40:
92:ad:b5:29:bc:f2:e5:14:85:d4:37:aa:2b:73:9e:
ef:e2:4a:06:eb:1c:d4:08:99:6b:0d:fd:79:06:5a:
64:2d:dc:99:5c:39:89:98:24:c7:da:cb:03:89:62:
a8:ff:e9:11:93:3d:d5:96:78:f6:8f:82:07:16:84:
31:b7:60:ea:ac:dc:3f:a8:b1:16:60:b7:42:4c:a4:
74:77:b3:e6:18:ce:83:b9:dd:06:c5:6f:9a:c7:d1:
dd:03:d1:9b:4a:ba:6c:c7:f6:b1:32:dc:8b:cf:16:
74:95:ac:f5:f7:31:c5:f2:2b:95:8e:ca:5e:54:f1:
7b:9f:1e:14:7e:0c:92:46:b0:82:74:8d:b0:14:02:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E1:1C:91:3E:2A:20:F9:C5:06:EA:45:6E:13:31:FA:1B:DF:7E:6E
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/FeEckT4qIPnFBupFbhMx-hvffm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.169.0/24
Signature Algorithm: sha256WithRSAEncryption
19:2e:44:56:77:0f:f4:dc:49:a3:fb:38:39:6b:c3:32:f6:36:
98:de:ab:1b:65:e2:1d:b5:e1:cf:08:42:ca:45:2c:cc:17:78:
83:e2:ea:60:01:fd:72:c0:6c:22:94:8e:9b:af:20:c1:fd:0e:
cb:6c:f8:36:c2:e6:8d:94:db:e8:22:86:20:ec:94:79:f9:85:
7c:6f:50:21:99:7c:88:9d:d7:16:b6:6b:2d:ee:55:51:d3:d9:
27:58:21:90:f8:b8:94:20:29:ff:62:ce:48:7e:7c:63:90:f6:
e9:0b:d4:72:ba:6f:04:33:a3:79:f9:8b:31:7d:13:cf:5a:4f:
66:98:f3:9e:88:b1:6f:0d:86:09:2f:53:aa:5d:00:5c:14:aa:
86:21:ea:8b:57:89:72:5b:f5:68:d8:71:56:e0:f0:0c:1e:06:
43:4b:e8:7c:c5:df:cf:b8:be:50:b5:3c:21:37:b8:34:f8:a7:
3c:b5:59:44:21:2a:7e:a7:04:4b:78:f5:f3:82:3d:b3:56:0d:
98:80:16:c0:19:e7:72:36:07:ea:cd:4a:d3:23:c7:d4:4f:cd:
5c:71:ba:36:bf:34:b8:0f:07:91:37:05:61:6c:c3:1d:36:4b:
a9:17:93:72:4b:91:8d:0d:8e:f8:09:32:87:9a:13:c3:84:e9:
4e:64:26:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:54:08 2026 by rpki-client