Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/FemB6pHy5zROZf_sTYfXBgmDKnw.roa
File: FemB6pHy5zROZf_sTYfXBgmDKnw.roa (raw, json)
Hash identifier: E4h0nLpq/ffPu/HaB0H3Hf/9wKbbDUcsOyUxjgjXY1s=
Subject key identifier: 15:E9:81:EA:91:F2:E7:34:4E:65:FF:EC:4D:87:D7:06:09:83:2A:7C
Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial: 019D48BDB6FE315828DC7AE8B76D9E92E7C0
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/FemB6pHy5zROZf_sTYfXBgmDKnw.roa
Signing time: Wed 01 Apr 2026 11:11:25 +0000
ROA not before: Wed 01 Apr 2026 11:11:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41085
IP address blocks: 195.189.100.0/22 maxlen: 22
195.189.100.0/23 maxlen: 24
195.189.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:bd:b6:fe:31:58:28:dc:7a:e8:b7:6d:9e:92:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Validity
Not Before: Apr 1 11:11:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15e981ea91f2e7344e65ffec4d87d70609832a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:53:b9:28:77:0f:e7:54:56:6c:07:6c:cf:
0c:50:e2:6e:9a:c4:f9:f3:d2:72:ef:2e:09:e3:d4:
07:84:73:18:21:7c:e4:fd:eb:65:4b:26:43:95:dc:
e8:19:a7:db:79:2c:82:72:1b:90:f0:90:c2:17:3d:
d4:a6:6d:61:6a:3b:4c:3d:16:97:e5:5b:a1:7e:29:
77:c0:83:05:31:64:db:8f:e9:07:4a:83:39:34:bf:
29:60:6e:04:ae:dd:48:33:f7:5c:62:3e:3b:36:42:
c8:02:26:22:51:d5:81:f8:0c:36:4b:6e:e0:24:2a:
a9:bd:0c:46:16:b1:f0:08:a5:e0:f0:a3:fa:fa:45:
21:36:63:c3:85:74:46:a9:82:42:87:bd:e0:7b:f3:
3d:6f:92:78:eb:04:f0:21:78:66:07:1b:97:ed:00:
05:39:b0:c8:59:0c:19:95:92:0d:b9:9f:c6:9d:6f:
2b:b9:65:0e:3c:0d:a1:9c:51:04:d1:c3:4a:67:f6:
3e:f1:b3:61:7c:3a:f6:73:6a:be:54:b5:da:bd:10:
8e:29:20:1e:7c:13:4d:2a:c9:bb:f2:f5:a4:75:94:
84:4d:9e:9c:73:bc:17:a1:5c:24:ee:c1:1c:7e:ea:
be:83:df:8c:69:e8:dc:8a:9b:56:e7:27:a6:5a:23:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E9:81:EA:91:F2:E7:34:4E:65:FF:EC:4D:87:D7:06:09:83:2A:7C
X509v3 Authority Key Identifier:
keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/FemB6pHy5zROZf_sTYfXBgmDKnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.100.0/22
Signature Algorithm: sha256WithRSAEncryption
99:cd:84:7c:1b:f9:26:70:a1:74:ec:fe:ef:c1:fe:4e:e6:23:
13:ca:cb:c7:c3:52:ef:a6:03:d1:9a:2b:50:e5:cf:0c:2f:73:
ba:c0:2c:e6:d7:60:54:47:88:ac:ce:05:37:2f:1d:f8:18:57:
53:ee:a6:7b:7f:28:68:90:88:20:a1:bd:33:03:36:e2:c0:ad:
16:aa:cc:c9:b0:0b:c8:4c:7e:d2:a0:f7:2c:9d:24:fa:47:de:
97:2f:8c:5a:bd:cf:51:05:00:2e:77:34:68:3d:66:d5:70:b9:
3e:18:eb:43:66:af:fe:e3:27:d8:c5:a7:de:05:41:f2:4b:7d:
ee:74:e1:27:8c:09:d0:29:ef:c8:2a:95:71:83:14:3f:a7:d1:
3c:dc:33:18:7e:a6:05:bb:43:bf:a9:d3:a7:73:3b:3d:62:04:
3c:9d:5d:77:c1:b7:f2:5a:7b:d8:95:43:a2:0f:93:f2:56:ff:
01:9e:f9:51:c8:6a:22:4e:dc:ba:73:ca:9e:54:b0:25:8f:a0:
43:de:4a:c1:d5:74:fc:d8:7a:95:0c:ee:fe:45:8b:98:04:ac:
cc:a2:42:82:57:8e:e5:fc:af:8a:81:a6:a0:6f:ca:ad:c7:8d:
ef:2a:87:fc:c5:8f:f0:d2:d6:82:12:03:d6:7e:92:15:88:ac:
26:53:54:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:58:23 2026 by rpki-client