Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/FEgeYcFLPGsn_DF04vy60HLH3eU.roa
File: FEgeYcFLPGsn_DF04vy60HLH3eU.roa (raw, json)
Hash identifier: mvXQQ+TxCYuDnGKabkqj9L+d+yyQb/h/Oz4Zigg1PAE=
Subject key identifier: 14:48:1E:61:C1:4B:3C:6B:27:FC:31:74:E2:FC:BA:D0:72:C7:DD:E5
Certificate issuer: /CN=d4b908a9d74b4a10aa1f4c0e8aed6a84a3b79005
Certificate serial: 019D4AA2754329307303C9BF8AA1309009DD
Authority key identifier: D4:B9:08:A9:D7:4B:4A:10:AA:1F:4C:0E:8A:ED:6A:84:A3:B7:90:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/FEgeYcFLPGsn_DF04vy60HLH3eU.roa
Signing time: Wed 01 Apr 2026 20:00:53 +0000
ROA not before: Wed 01 Apr 2026 20:00:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51727
IP address blocks: 91.221.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4a:a2:75:43:29:30:73:03:c9:bf:8a:a1:30:90:09:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b908a9d74b4a10aa1f4c0e8aed6a84a3b79005
Validity
Not Before: Apr 1 20:00:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14481e61c14b3c6b27fc3174e2fcbad072c7dde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:ee:b9:20:34:0f:01:c3:4a:46:b9:ef:14:
58:11:a9:95:a8:2e:a4:09:f0:75:6f:02:24:3e:91:
99:c5:09:19:06:c9:b6:3e:ea:17:f7:29:e3:ca:58:
35:33:69:eb:e8:74:59:e0:58:5a:32:be:ed:d0:2d:
c6:c0:44:b4:a3:4c:8a:36:25:43:d4:09:22:c7:41:
e7:23:91:77:c7:16:7a:33:3f:3a:f5:c9:07:87:59:
0d:51:4b:1f:74:fb:3e:1d:55:f7:40:dd:07:dc:4f:
cf:54:f3:5b:e2:aa:96:16:21:fc:35:68:d2:71:66:
3f:02:c1:9a:48:bb:cd:d5:98:e4:55:a8:3c:b4:15:
80:2f:b9:76:b8:83:0b:dc:7d:21:09:d0:c2:ab:e5:
bb:de:af:99:7e:d6:9c:ea:85:11:3f:37:f0:01:76:
1b:3e:04:3e:38:cf:e9:81:89:81:fa:ac:54:50:03:
78:c6:42:4a:8a:76:e3:54:49:9d:42:f4:f9:43:0e:
ed:ba:9c:cb:b9:cf:80:ad:a2:30:f1:e8:fa:35:ac:
b0:d8:dd:39:4c:f8:d8:d8:1b:c5:08:1e:f9:38:f3:
11:3f:6b:11:ac:56:c2:b3:cc:57:46:21:2d:c7:06:
43:53:18:45:7a:5b:12:4e:cb:b0:e1:4e:b6:6e:5a:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:48:1E:61:C1:4B:3C:6B:27:FC:31:74:E2:FC:BA:D0:72:C7:DD:E5
X509v3 Authority Key Identifier:
keyid:D4:B9:08:A9:D7:4B:4A:10:AA:1F:4C:0E:8A:ED:6A:84:A3:B7:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/FEgeYcFLPGsn_DF04vy60HLH3eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.46.0/23
Signature Algorithm: sha256WithRSAEncryption
37:10:5c:e8:bf:7e:a5:d6:c4:b7:ce:00:0d:94:b6:0f:c9:36:
d7:cb:0a:35:ac:4a:18:f7:c7:04:cb:20:60:dd:3c:0b:8f:aa:
d3:e8:82:59:46:b8:85:74:a1:f8:cb:8b:6e:3a:38:05:dd:9d:
04:16:15:22:70:ac:44:aa:40:22:23:17:d7:2c:2f:0c:e4:fc:
8c:dd:1b:d7:97:da:15:88:2f:e4:cc:6b:ac:de:9b:fa:c7:78:
4e:ae:6c:23:40:be:a4:b4:d4:51:bf:23:ef:54:37:c5:20:43:
da:14:62:fa:3a:f1:b7:e9:3e:bc:66:68:d3:8a:c7:ea:72:c1:
2b:97:6d:22:90:00:8c:66:d5:bd:0f:66:a6:d9:b8:6f:95:bd:
82:ff:c4:bc:77:a4:a3:4d:00:35:3f:f0:ca:e4:35:57:7e:93:
2d:0b:53:0c:5a:24:fc:b6:86:5e:b2:ad:7f:70:4f:bd:66:dc:
95:21:9e:a5:99:4a:d7:6a:3f:bd:17:57:3c:0d:67:21:b6:78:
84:c5:de:9f:cf:fb:90:9e:c8:2d:0d:48:f7:6d:6c:60:ee:54:
49:3c:f1:f6:58:3c:85:ae:28:ce:48:cf:0a:8d:6f:e0:bc:db:
03:90:bd:fb:e5:41:16:8a:a2:8c:4c:05:14:93:58:57:1d:e5:
75:c1:90:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:36 2026 by rpki-client