Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fef9gnRFhKy5uF4X6DEO-OgPQDg.roa
File: fef9gnRFhKy5uF4X6DEO-OgPQDg.roa (raw, json)
Hash identifier: gPSP6WWSnCKBk/7WmJ5hJrlVAs6mpUZM3rz669KqdJI=
Subject key identifier: 7D:E7:FD:82:74:45:84:AC:B9:B8:5E:17:E8:31:0E:F8:E8:0F:40:38
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C607088236AEE5A8943CDFF1C8EF0B082
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fef9gnRFhKy5uF4X6DEO-OgPQDg.roa
Signing time: Sun 15 Feb 2026 08:35:13 +0000
ROA not before: Sun 15 Feb 2026 08:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23532
IP address blocks: 84.245.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:60:70:88:23:6a:ee:5a:89:43:cd:ff:1c:8e:f0:b0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 15 08:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7de7fd82744584acb9b85e17e8310ef8e80f4038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:21:77:39:96:61:00:01:48:95:6a:53:0b:
05:25:e7:94:14:5b:9b:f0:8b:77:5f:dd:8c:79:41:
2a:ae:93:0f:84:1f:b2:e4:9c:0a:3a:6e:67:05:17:
11:c8:0e:a4:86:0b:b6:7f:78:38:74:dc:c4:81:11:
64:d3:e9:7f:37:29:1e:57:79:b9:77:17:87:63:c8:
e6:c5:54:82:33:72:49:11:fd:8b:66:53:c6:93:15:
c3:f8:0a:31:d8:5e:8e:08:dd:2f:34:d2:34:01:42:
a4:56:5c:18:1d:00:0d:cb:1e:06:73:04:24:57:f2:
a9:e8:e3:a1:34:cd:69:3c:10:38:59:e1:77:da:35:
72:26:15:a7:3e:1a:fc:af:ae:d3:03:54:2e:cf:c1:
d6:64:5d:5d:55:ae:af:ca:65:1e:c9:e3:d4:35:92:
e6:60:ab:e0:45:25:df:46:ac:48:ce:07:95:92:7a:
99:f2:9b:ac:dd:66:fe:49:01:7a:46:13:74:a3:1b:
d7:b4:3d:54:7b:90:e8:f7:61:27:4a:69:97:a8:9a:
24:ea:fa:59:a4:7c:d7:41:e4:01:d7:8f:db:00:f2:
13:9e:ad:bd:cc:c2:91:1c:c3:30:9a:78:2a:e1:0a:
f4:12:61:3b:46:81:1b:3e:94:95:dc:39:9b:f4:5f:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E7:FD:82:74:45:84:AC:B9:B8:5E:17:E8:31:0E:F8:E8:0F:40:38
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fef9gnRFhKy5uF4X6DEO-OgPQDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.28.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a4:a1:53:14:c4:59:62:4a:b9:9a:d3:dd:5e:74:d6:1a:61:
8d:49:2d:64:6d:f6:bc:50:cf:2c:63:85:fa:4f:1d:71:11:0e:
dc:90:63:f2:ee:35:ac:7b:24:64:fb:2d:48:76:a6:f6:dc:5c:
64:ca:f7:35:81:d3:32:78:c7:31:85:8b:5a:62:71:11:47:48:
2a:e4:c8:2d:c4:c0:bb:b0:72:18:27:f6:db:24:bb:a2:2f:27:
76:42:3f:63:a0:0e:ec:5a:78:17:f4:85:cd:33:ac:05:29:c6:
b3:bf:66:6e:4e:9e:64:70:83:77:2d:f4:b1:3e:4f:7e:ea:97:
3a:35:34:38:be:e5:ce:0d:7b:a8:17:20:75:4a:e7:51:e8:3d:
1f:8a:5a:b7:00:5e:26:85:b8:aa:9f:fa:6a:7b:8b:0c:ab:58:
c6:35:8f:d5:ff:5c:4a:a7:d0:b1:19:41:2a:34:53:98:5a:98:
30:17:d1:af:55:4b:fd:f0:e6:90:71:c7:7a:ea:75:50:94:0f:
7b:66:e4:55:73:a9:a0:95:62:4b:59:37:8b:0e:dc:64:95:57:
71:53:cf:58:83:3c:f2:97:26:19:4b:48:c1:f4:92:0f:11:ee:
f7:97:eb:ca:01:f1:ca:a0:1f:0f:aa:f2:fb:e7:0e:23:d9:0d:
7d:5f:00:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:35 2026 by rpki-client