Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fel8MPy5X_TRXqVNoCG8RxsFyFc.roa
File: fel8MPy5X_TRXqVNoCG8RxsFyFc.roa (raw, json)
Hash identifier: DJyzsJazmaVFNL9LNaPzo4NB7mvEBPso5QhmpJleimE=
Subject key identifier: 7D:E9:7C:30:FC:B9:5F:F4:D1:5E:A5:4D:A0:21:BC:47:1B:05:C8:57
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0198122B5EDE712B467488DEE8A12326B3E0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fel8MPy5X_TRXqVNoCG8RxsFyFc.roa
Signing time: Wed 16 Jul 2025 07:38:08 +0000
ROA not before: Wed 16 Jul 2025 07:38:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9318
IP address blocks: 77.107.95.0/24 maxlen: 24
109.176.10.0/24 maxlen: 24
109.176.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:2b:5e:de:71:2b:46:74:88:de:e8:a1:23:26:b3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 16 07:38:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7de97c30fcb95ff4d15ea54da021bc471b05c857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:0f:49:ba:8f:bc:aa:62:9e:ce:9d:70:fc:
2f:ce:98:aa:04:bc:a1:7b:66:a2:5d:ef:15:bf:19:
96:eb:5c:ac:7d:a9:83:d8:dc:13:a7:3a:c9:a3:91:
9f:9b:4b:e9:b1:4a:1d:ad:5a:84:08:28:4b:d3:d8:
4d:36:42:a5:e4:4d:2f:44:e8:a9:db:ff:8e:ec:1e:
ef:14:92:ca:5a:0a:d5:88:3d:f0:e3:44:ec:06:ff:
e5:3e:93:7e:b2:be:75:1b:25:71:27:79:14:b9:2e:
dd:4d:3f:83:bd:dd:7c:31:36:0a:de:c8:67:e6:41:
0b:7f:e2:1f:1d:87:db:46:a5:39:4d:bd:14:1d:9a:
ab:e9:88:7e:06:e9:4d:dd:47:1c:02:a3:1b:40:3a:
a1:88:3d:17:8d:b0:88:d9:b0:6b:64:ca:d3:21:d9:
74:0f:c7:fa:a0:36:84:5b:7f:e7:84:56:b0:58:f2:
b2:5b:ac:4f:cc:f5:a3:fb:7d:97:4c:f6:ad:2f:1f:
39:88:3b:9e:ee:19:c5:93:57:48:b6:cc:93:a1:10:
57:e6:6a:f8:45:8e:02:54:d6:d7:0b:ad:c1:f2:61:
46:e1:af:6a:8d:16:e5:6b:91:bc:32:a3:0f:32:66:
04:86:51:46:10:36:90:d7:46:6f:68:68:e8:34:a1:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E9:7C:30:FC:B9:5F:F4:D1:5E:A5:4D:A0:21:BC:47:1B:05:C8:57
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fel8MPy5X_TRXqVNoCG8RxsFyFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.95.0/24
109.176.10.0/24
109.176.134.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c7:69:f0:08:44:d1:b2:6a:8c:56:bb:8b:cb:68:94:c0:b3:
ae:83:68:ba:72:43:7a:2f:1c:61:e8:b7:7a:1d:dd:0f:14:19:
25:20:2f:f1:36:70:fe:a7:79:4a:04:c1:2f:54:9c:85:00:cb:
b4:4c:e0:c4:81:be:db:a6:20:60:fa:af:20:db:7d:5e:cf:6b:
2d:e2:19:10:00:78:f7:af:46:5d:8f:10:91:64:5f:84:98:14:
50:af:65:69:f0:19:09:ca:c4:20:59:08:03:2a:2e:d6:8a:1c:
c0:16:96:11:c3:63:73:37:46:25:06:d5:62:88:57:b7:dc:6d:
c9:f3:91:60:45:4c:f3:2b:1c:85:52:59:69:bd:12:d1:ac:05:
7b:7e:70:df:24:f9:67:27:06:7a:9a:67:91:1c:24:c8:7d:9d:
1e:6c:aa:c8:bc:6d:31:d9:a0:7a:7b:0a:00:7e:78:c8:32:e8:
47:83:6a:53:a2:ae:ad:96:0a:47:2c:5e:41:13:46:d6:12:69:
22:77:65:99:0f:12:bf:65:36:4d:49:9b:8d:fb:31:c7:e4:c9:
a8:6d:c3:65:d3:50:78:9a:57:6b:a6:f9:31:67:7f:ba:01:18:
ea:e7:60:40:35:ef:72:79:20:8f:ce:f2:da:44:19:f9:c6:94:
c2:01:7f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:13:31 2025 by rpki-client