Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/fEi6HkF-C6surJLz6ozVnN3DCKA.roa
File: fEi6HkF-C6surJLz6ozVnN3DCKA.roa (raw, json)
Hash identifier: Sz33Ft2tcLfICDqBq5ZnLaKyfti3irB30drgbFVQKSw=
Subject key identifier: 7C:48:BA:1E:41:7E:0B:AB:2E:AC:92:F3:EA:8C:D5:9C:DD:C3:08:A0
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 019B78A324115EA8AF8417947D471825FF36
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/fEi6HkF-C6surJLz6ozVnN3DCKA.roa
Signing time: Thu 01 Jan 2026 08:18:36 +0000
ROA not before: Thu 01 Jan 2026 08:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48866
IP address blocks: 91.223.178.0/24 maxlen: 24
192.231.26.0/24 maxlen: 24
193.218.186.0/24 maxlen: 24
195.191.40.0/24 maxlen: 24
195.191.41.0/24 maxlen: 24
195.211.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:24:11:5e:a8:af:84:17:94:7d:47:18:25:ff:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Jan 1 08:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c48ba1e417e0bab2eac92f3ea8cd59cddc308a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:63:5b:87:99:a2:09:ac:bf:87:cd:a6:60:
a5:b0:70:9d:83:ed:d8:81:14:ea:9c:2e:8d:d1:ca:
b7:4b:71:a5:6f:18:e5:6f:48:44:95:68:28:a9:3b:
44:cc:69:dc:e0:b7:85:71:cf:95:1b:0f:c1:e2:d8:
7e:e9:05:94:53:6c:eb:b4:0b:e8:1c:e1:ae:4d:b8:
16:39:10:ac:c4:b5:b1:79:59:66:9a:53:f6:12:a1:
ab:03:0b:07:06:07:e6:d4:f7:d0:25:a1:2a:6d:7e:
3c:f1:70:33:f9:c9:aa:7d:8f:af:9d:94:98:61:f8:
4d:7c:e8:df:b9:7a:dc:e2:f3:c0:f9:77:30:9c:76:
11:7d:bb:1d:6c:da:74:bc:cb:19:55:33:17:77:01:
e0:bf:bb:2e:a2:94:55:f4:9d:bb:f8:87:5a:48:1a:
7c:7e:cd:4b:02:fe:c0:98:60:b5:db:56:63:48:40:
4b:ec:93:eb:43:71:4d:83:f6:63:a2:fc:dd:48:94:
99:15:aa:cd:b2:82:56:38:c5:cb:98:cf:13:3e:59:
9a:82:9b:b4:a0:5a:4c:b1:80:a2:d4:c7:0c:de:6f:
25:ee:2e:76:57:3b:16:15:55:9d:3c:d1:cf:59:07:
24:fe:a9:17:4b:e5:1e:d2:17:b4:e6:f1:92:26:c3:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:48:BA:1E:41:7E:0B:AB:2E:AC:92:F3:EA:8C:D5:9C:DD:C3:08:A0
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/fEi6HkF-C6surJLz6ozVnN3DCKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.178.0/24
192.231.26.0/24
193.218.186.0/24
195.191.40.0/23
195.211.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:55:fd:8c:aa:ab:12:69:37:d6:cd:f9:52:59:50:5f:14:08:
09:5b:f1:2b:41:48:f3:c7:93:bc:d9:49:d5:0d:6b:73:28:ec:
11:de:e5:f1:11:0a:90:36:b5:69:96:4d:f2:ad:97:44:5f:82:
5d:b7:17:41:79:bc:38:b8:a3:1b:0a:74:b4:ed:3c:c4:fc:f9:
90:2a:53:42:34:9a:96:35:1b:6d:63:60:55:87:f9:3c:c3:47:
87:9c:36:93:14:3c:5c:92:69:a1:fa:1a:fb:6c:af:ec:65:1a:
7a:70:03:85:44:ca:93:03:9f:3f:1c:5c:b2:e4:b5:5b:da:a6:
b9:96:76:16:fc:90:33:da:71:65:52:3d:e2:d6:fa:5f:d6:14:
30:5f:f1:e8:f5:e0:ac:e9:a6:4f:a2:36:54:0f:07:27:5e:b0:
ff:37:13:56:d6:00:80:19:3a:8a:9b:04:39:68:08:14:2a:a3:
50:ad:7d:1f:c1:89:37:10:83:a6:52:80:e2:7c:8a:60:8d:69:
3b:0a:3c:89:21:25:5c:c5:55:e7:26:e8:47:94:36:36:5d:07:
3b:2f:18:84:c3:91:92:3d:2e:dc:5a:f2:75:07:04:eb:5a:0e:
f4:bb:2a:d4:ae:3a:89:8c:d3:16:02:0d:d9:06:e2:5b:ab:65:
40:ff:07:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:03:56 2026 by rpki-client