Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/FudqgirmCrO2uiNGTZkCxNOwnUA.roa
File: FudqgirmCrO2uiNGTZkCxNOwnUA.roa (raw, json)
Hash identifier: lnqPwMY8JwwVUPtEEP4knIhkpCztI5NLgiivxpLqkEs=
Subject key identifier: 16:E7:6A:82:2A:E6:0A:B3:B6:BA:23:46:4D:99:02:C4:D3:B0:9D:40
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01983C6282EFBB2729F7BF975B083A103581
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/FudqgirmCrO2uiNGTZkCxNOwnUA.roa
Signing time: Thu 24 Jul 2025 12:22:25 +0000
ROA not before: Thu 24 Jul 2025 12:22:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 92.71.32.0/23 maxlen: 24
92.71.38.0/23 maxlen: 24
92.71.46.0/23 maxlen: 24
92.71.64.0/23 maxlen: 24
92.71.96.0/23 maxlen: 24
92.71.126.0/23 maxlen: 24
213.201.240.0/23 maxlen: 24
213.201.248.0/23 maxlen: 24
213.201.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:62:82:ef:bb:27:29:f7:bf:97:5b:08:3a:10:35:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 24 12:22:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16e76a822ae60ab3b6ba23464d9902c4d3b09d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:a0:e0:53:24:62:ae:bc:12:8f:fd:8a:8d:
a4:f1:8b:61:7d:ee:a4:79:3a:b0:e7:68:12:27:bb:
90:3f:cc:bd:c0:9e:b8:de:7b:99:c5:ad:ce:1c:3e:
3a:a7:03:a3:f2:3e:2c:c2:7c:e0:7c:23:19:9d:0d:
63:3f:f6:29:57:8b:c3:4d:82:9c:b6:5e:00:3f:d7:
a1:bf:00:9f:1d:fe:fc:bd:00:16:23:49:69:1b:b2:
37:1d:4c:91:3b:c6:50:e0:7c:17:ef:cb:b3:a1:5c:
49:b4:dd:2e:fd:bb:4f:45:57:af:66:cd:cf:cd:1a:
13:dd:81:ec:1d:62:e6:40:03:60:39:a7:e8:8f:a9:
e5:c0:8f:0e:ea:bc:bf:ff:7b:fa:49:78:85:0b:df:
a7:4a:40:07:c1:7f:df:fa:00:d8:80:60:b2:aa:e6:
09:92:1a:79:82:16:3c:ae:f6:29:1b:e5:eb:63:11:
4f:28:cf:57:dd:75:20:d6:42:69:5f:55:b1:88:43:
28:ec:c4:2a:a1:bb:d8:87:f2:ad:3c:fe:f8:0d:c0:
cb:01:04:af:ef:48:2a:75:cb:52:b2:cf:18:03:b5:
e8:52:a7:59:b0:e1:a0:83:2c:04:e9:bf:a0:85:85:
98:90:7d:81:12:ee:6f:32:b3:31:43:0e:35:da:84:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E7:6A:82:2A:E6:0A:B3:B6:BA:23:46:4D:99:02:C4:D3:B0:9D:40
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/FudqgirmCrO2uiNGTZkCxNOwnUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.32.0/23
92.71.38.0/23
92.71.46.0/23
92.71.64.0/23
92.71.96.0/23
92.71.126.0/23
213.201.240.0/23
213.201.248.0/23
213.201.254.0/23
Signature Algorithm: sha256WithRSAEncryption
60:3f:fe:48:87:be:c9:28:eb:9a:dd:f8:d9:3c:e9:e6:c1:88:
b8:67:8d:90:8e:73:c6:f3:7e:78:88:21:84:8e:36:df:d0:e2:
3b:b0:e7:a8:5b:8a:54:e1:bb:e2:d5:d9:fe:d7:ef:7f:bd:5c:
62:7c:12:d1:86:a3:c5:af:49:0f:fb:cd:38:27:45:79:b7:b8:
c2:35:05:53:49:60:04:27:3c:f1:5c:f7:21:05:4b:15:0f:61:
e2:40:ba:3b:e6:fa:35:13:c2:52:32:b5:49:a8:bf:b6:82:5e:
95:2c:63:f9:b0:20:90:45:9b:88:38:ba:62:14:ba:d2:3d:b8:
9c:1d:47:27:80:f8:fe:74:8f:c2:bb:54:50:ff:f1:7d:f7:eb:
f9:52:ff:e1:92:18:8f:b9:84:e7:00:12:ca:3a:ff:e7:b2:95:
90:b2:1d:54:e3:f9:d1:4c:95:56:68:29:b8:49:03:c8:f9:aa:
da:a5:c9:43:ab:f0:c5:9d:ee:26:34:70:dc:9c:f6:89:39:58:
64:37:5d:b9:fa:2c:42:8d:67:44:63:d6:eb:7e:10:77:6b:3c:
5c:30:d7:8f:d0:dd:76:e2:e9:56:c0:5f:5f:62:66:5a:72:ef:
18:d1:a4:12:47:ab:07:fb:78:ae:c9:e3:90:b0:53:49:59:8a:
de:14:68:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:34:37 2025 by rpki-client