Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/FzYunAfXIbAtMm8QIW2Ik_u5Pxo.roa
File: FzYunAfXIbAtMm8QIW2Ik_u5Pxo.roa (raw, json)
Hash identifier: Xg8cJgDDQk7BXhyX/Ij+B4fnpVtV86uWM+NQF821ZPs=
Subject key identifier: 17:36:2E:9C:07:D7:21:B0:2D:32:6F:10:21:6D:88:93:FB:B9:3F:1A
Certificate issuer: /CN=a4b707300e869467be5e5273222d90e0b618f924
Certificate serial: 01992A475D5AF2633281804085C326739BA5
Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/FzYunAfXIbAtMm8QIW2Ik_u5Pxo.roa
Signing time: Mon 08 Sep 2025 17:02:23 +0000
ROA not before: Mon 08 Sep 2025 17:02:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 912
IP address blocks: 45.152.56.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2a:47:5d:5a:f2:63:32:81:80:40:85:c3:26:73:9b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924
Validity
Not Before: Sep 8 17:02:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17362e9c07d721b02d326f10216d8893fbb93f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:95:de:d0:6a:c0:89:61:c6:0c:8e:eb:0b:65:
36:e6:8a:53:62:b4:26:cc:10:f1:a1:8e:06:17:ce:
24:b5:e8:ca:0c:b4:3e:8a:c7:3b:04:62:b9:be:46:
ce:92:68:d2:c7:3b:55:5d:87:54:35:ea:f9:4a:a4:
2f:7d:ce:04:4c:d7:b0:f4:13:b3:0f:0a:02:4e:d8:
14:14:34:1a:1b:e9:eb:07:ae:ba:3a:f5:76:b3:ef:
99:ab:c4:4a:a2:8d:63:22:b3:80:e2:21:a9:6b:6e:
e1:82:57:7c:57:27:aa:e9:c3:f2:ef:fc:a8:c4:79:
3c:90:12:4c:7f:b9:4e:8a:e6:7b:46:b2:5f:35:c2:
83:b7:f3:ce:b1:ad:51:71:3d:11:c7:c2:cc:b8:e1:
f6:53:d2:27:21:e7:97:dc:1e:9c:78:09:61:59:27:
60:5c:3c:75:30:68:ec:17:fd:b4:63:0a:2e:d5:ea:
34:d4:2d:9f:db:d3:6c:91:31:da:25:ba:2f:9d:43:
9f:f1:d2:06:d7:85:ef:31:0f:f7:a9:85:e3:f1:24:
4e:e0:f6:fd:d8:a3:53:2f:01:6b:06:d1:1f:7b:d8:
42:19:d9:ee:71:ca:67:b5:f4:f4:e5:11:c7:7f:99:
af:1c:9a:da:f0:63:f7:64:b9:45:4a:34:d2:d5:ee:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:36:2E:9C:07:D7:21:B0:2D:32:6F:10:21:6D:88:93:FB:B9:3F:1A
X509v3 Authority Key Identifier:
keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/FzYunAfXIbAtMm8QIW2Ik_u5Pxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:68:a0:68:28:b0:52:eb:10:e2:c8:09:f1:37:75:90:2c:a8:
16:18:3e:8c:16:2c:b3:b9:53:c1:f4:a6:68:e1:7d:aa:ec:18:
d8:b1:72:a3:a3:8e:e2:b6:3d:e6:12:9b:9a:65:f2:3c:9f:51:
a0:6d:ad:73:06:d2:88:46:6a:1f:88:c8:1b:62:90:70:30:f0:
27:bb:7a:7f:09:f5:df:fa:c2:dc:96:28:e6:e0:a8:9e:b9:4f:
3b:1d:87:79:cc:ef:1c:f6:fe:34:24:6a:2f:4c:b5:50:46:93:
e8:d5:13:9f:15:4c:83:e7:a2:49:12:f2:15:ff:1c:ff:db:12:
2f:7e:7f:e1:a7:91:32:a1:ae:e2:d1:53:05:9f:bb:71:3f:ab:
82:dd:3b:06:fe:58:d3:54:a5:43:67:fb:7a:2f:90:7d:ec:97:
05:5a:9d:36:02:5b:ff:27:3f:5d:9d:64:b1:1b:22:a6:8c:fa:
bd:c8:af:8f:16:ce:ac:23:f9:84:24:0d:b9:99:03:0f:c6:d3:
ca:6b:c3:e9:86:35:ce:5d:67:45:96:dc:15:f9:d5:d0:e0:99:
b9:4a:10:7d:85:71:6b:98:e6:ad:59:a7:36:ba:33:fc:b3:0d:
66:aa:ab:80:12:ca:57:a4:2e:04:cd:b2:7a:62:04:99:ad:69:
e4:26:a9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:00:17 2025 by rpki-client