Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Fk8Eywl3l5q6WPzeM6opIg2N6bQ.roa
File: Fk8Eywl3l5q6WPzeM6opIg2N6bQ.roa (raw, json)
Hash identifier: s1Q+6ExVP3mIckSTAtW5/ZHZy6wKEUT8mWXwQDGRzXQ=
Subject key identifier: 16:4F:04:CB:09:77:97:9A:BA:58:FC:DE:33:AA:29:22:0D:8D:E9:B4
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 0197FB0094D7377ADC3B03BF9A7E53880559
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Fk8Eywl3l5q6WPzeM6opIg2N6bQ.roa
Signing time: Fri 11 Jul 2025 19:40:08 +0000
ROA not before: Fri 11 Jul 2025 19:40:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 109.122.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fb:00:94:d7:37:7a:dc:3b:03:bf:9a:7e:53:88:05:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 11 19:40:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=164f04cb0977979aba58fcde33aa29220d8de9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:8c:25:24:13:de:1d:03:c1:86:68:71:a0:
36:e9:93:31:84:75:8a:65:48:8b:f0:b3:0b:60:90:
f9:d4:51:8f:6e:76:9a:a1:4c:09:4a:6f:cf:a4:4a:
77:24:53:05:e7:0e:97:4e:4a:ac:6a:fd:28:99:23:
6a:ab:85:b5:cd:a6:98:90:6e:89:9c:cd:ea:1a:ef:
5e:3a:f4:14:d6:00:7d:a0:7d:67:81:84:1c:3d:b3:
a8:94:2a:af:a4:bd:1c:7d:c5:57:84:5e:a4:45:00:
32:8b:40:3a:91:97:9f:8d:0a:9b:f2:d5:59:04:ae:
77:8e:b4:99:fd:4c:e9:b5:15:f1:f1:73:34:c5:d4:
1c:27:ed:dd:e6:b3:8d:16:50:d8:a5:39:9e:dd:2c:
eb:f5:ea:b3:e9:9d:e0:11:58:f5:bc:31:a0:57:58:
f5:a2:a6:0a:3e:87:df:22:7d:a3:a5:ab:48:fc:04:
3a:1f:ee:47:59:08:1d:64:94:b6:a5:49:1e:f3:af:
77:49:ab:46:34:09:e6:31:e8:8f:89:59:65:20:1c:
e1:1c:2e:14:48:de:b9:62:9f:d9:4c:e4:b8:29:9a:
58:c4:d8:5c:e1:e9:e2:44:5a:ff:08:f3:22:16:e2:
06:95:ab:40:fc:42:7d:14:31:6e:62:8b:a6:c1:2c:
97:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4F:04:CB:09:77:97:9A:BA:58:FC:DE:33:AA:29:22:0D:8D:E9:B4
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Fk8Eywl3l5q6WPzeM6opIg2N6bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.29.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:53:7e:f0:24:d9:2f:09:b5:b9:58:22:57:47:d1:ce:55:15:
f0:02:18:62:1a:e9:f4:14:d1:32:c5:cf:c6:0b:6f:45:3b:f0:
de:48:10:48:fd:83:5e:84:eb:01:5f:26:90:d6:d9:6a:d0:9f:
04:13:4a:a5:ad:5b:57:28:5b:1d:28:f7:8c:bd:49:b5:7e:2f:
f1:25:73:2c:52:8d:7f:4f:8b:07:c0:c6:10:c8:18:66:17:14:
df:f2:5d:be:c3:ff:f0:71:bb:ae:6d:c1:84:43:f2:ad:d2:80:
08:37:4c:f7:e3:c5:d1:3b:64:9f:e6:25:58:37:dd:a5:c1:a8:
8c:82:40:e8:41:5d:12:39:b7:78:51:42:45:ae:7e:20:49:52:
e4:f3:3a:f0:21:e2:f9:ad:de:aa:7f:44:8f:29:52:35:fc:6c:
25:5c:52:87:7b:8a:cd:b0:65:73:1e:01:0a:b2:80:bc:c8:89:
93:83:9c:2e:b4:0f:2b:bf:fd:6e:0b:2e:3a:da:fd:d4:81:73:
9f:e8:9b:77:c5:5e:13:60:ae:58:75:70:4b:a7:91:76:f5:4c:
6b:f9:93:29:bf:fb:36:1b:70:22:fd:11:4d:e6:c5:b5:fd:55:
5e:f5:9d:da:4c:75:7d:de:7a:06:23:f1:08:d2:75:1b:bb:d5:
82:f9:a4:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZf7AJTXN3rcOwO/mn5TiAVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjUwNzExMTk0MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjRmMDRjYjA5Nzc5NzlhYmE1OGZjZGUzM2FhMjkyMjBkOGRlOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JSMJSQT3h0DwYZocaA26ZMxhHWK
ZUiL8LMLYJD51FGPbnaaoUwJSm/PpEp3JFMF5w6XTkqsav0omSNqq4W1zaaYkG6J
nM3qGu9eOvQU1gB9oH1ngYQcPbOolCqvpL0cfcVXhF6kRQAyi0A6kZefjQqb8tVZ
BK53jrSZ/UzptRXx8XM0xdQcJ+3d5rONFlDYpTme3Szr9eqz6Z3gEVj1vDGgV1j1
oqYKPoffIn2jpatI/AQ6H+5HWQgdZJS2pUke8693SatGNAnmMeiPiVllIBzhHC4U
SN65Yp/ZTOS4KZpYxNhc4eniRFr/CPMiFuIGlatA/EJ9FDFuYoumwSyXYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZPBMsJd5eaulj83jOqKSINjem0MB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvRms4RXl3bDNsNXE2V1B6ZU02b3BJZzJONmJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXodMA0G
CSqGSIb3DQEBCwUAA4IBAQCpU37wJNkvCbW5WCJXR9HOVRXwAhhiGun0FNEyxc/G
C29FO/DeSBBI/YNehOsBXyaQ1tlq0J8EE0qlrVtXKFsdKPeMvUm1fi/xJXMsUo1/
T4sHwMYQyBhmFxTf8l2+w//wcbuubcGEQ/Kt0oAIN0z348XRO2Sf5iVYN92lwaiM
gkDoQV0SObd4UUJFrn4gSVLk8zrwIeL5rd6qf0SPKVI1/GwlXFKHe4rNsGVzHgEK
soC8yImTg5wutA8rv/1uCy462v3UgXOf6Jt3xV4TYK5YdXBLp5F29Uxr+ZMpv/s2
G3Ai/RFN5sW1/VVe9Z3aTHV93noGI/EI0nUbu9WC+aRk
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:04:05 2025 by rpki-client