Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/FTrYYx4CBKkDflQVg1_J0y11QdQ.roa
File: FTrYYx4CBKkDflQVg1_J0y11QdQ.roa (raw, json)
Hash identifier: TOnemNVhdJLNIGqBvgUS4W9Hdvqcz6Ct0ExYEDZZ3M4=
Subject key identifier: 15:3A:D8:63:1E:02:04:A9:03:7E:54:15:83:5F:C9:D3:2D:75:41:D4
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019975E62FABAFF884505DFDD719BAD9E39D
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/FTrYYx4CBKkDflQVg1_J0y11QdQ.roa
Signing time: Tue 23 Sep 2025 09:27:23 +0000
ROA not before: Tue 23 Sep 2025 09:27:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398465
IP address blocks: 93.114.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:75:e6:2f:ab:af:f8:84:50:5d:fd:d7:19:ba:d9:e3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Sep 23 09:27:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=153ad8631e0204a9037e5415835fc9d32d7541d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:a9:8b:23:60:82:1c:22:3b:46:61:79:c3:
50:b6:e3:f1:36:2b:c7:c5:1d:42:f9:68:06:30:7c:
ec:8e:8e:eb:78:38:69:2d:a0:cf:31:aa:31:9f:3d:
81:5d:6b:af:4b:13:08:98:c8:50:ae:3c:52:41:7d:
6b:b2:8d:6b:c1:59:96:26:dc:ce:55:f8:fa:59:2f:
df:6d:4e:4a:a2:19:f6:e1:c1:5e:9f:b1:80:25:d0:
86:f2:f2:15:33:34:d8:78:21:8a:7c:18:fa:f7:fd:
5c:ee:bc:1e:fa:a4:7b:36:1c:86:67:5d:17:2b:d7:
fb:5a:be:71:dd:e0:40:c8:4d:c4:71:6b:e0:51:57:
42:82:de:54:51:5d:5b:29:e2:0b:66:aa:08:62:b0:
74:70:a3:9f:a9:ee:95:e2:b9:e0:e8:0f:26:39:dd:
b3:c2:72:22:b8:b3:26:b5:10:22:84:13:f5:3f:ca:
cf:d3:51:84:cc:91:6f:77:10:8b:a5:85:5d:d7:59:
39:62:f1:90:71:66:4d:ad:11:14:52:b8:de:56:b3:
23:28:45:e6:e3:3f:b4:54:b1:94:29:8f:4b:26:75:
7e:80:a6:75:c9:4d:a8:93:45:b6:17:4b:45:85:cd:
99:ad:f6:5b:fc:eb:46:f8:9e:ec:50:42:ab:43:3b:
c0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3A:D8:63:1E:02:04:A9:03:7E:54:15:83:5F:C9:D3:2D:75:41:D4
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/FTrYYx4CBKkDflQVg1_J0y11QdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.52.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:a2:b5:8a:4d:10:14:1f:03:42:26:a6:c6:be:1d:2b:9c:8b:
df:cd:0a:30:2f:de:f3:00:29:7e:54:17:b9:10:c5:c5:2f:bc:
55:7e:3e:6f:c2:08:15:dd:97:68:9c:88:6c:35:d3:29:05:13:
c6:2a:d1:4b:3c:56:72:8e:a3:48:99:14:61:5e:c9:08:0c:cf:
33:15:29:9b:e5:ad:1e:48:11:3c:30:c7:cb:25:cd:c0:cf:b2:
74:03:e9:2c:b7:6f:b1:a6:1e:f6:f4:57:d2:98:24:35:e3:82:
cf:1f:46:06:8c:2c:1a:0f:8e:9b:93:68:ba:5e:44:df:fb:ee:
ce:6a:26:85:a4:fc:d5:65:fa:75:d4:5a:f5:d9:8b:cd:b5:79:
0d:ba:0e:f7:88:e7:4c:0d:21:d3:40:bc:39:bd:1f:98:75:e2:
74:3f:4e:d7:5b:7c:f2:4e:b0:10:e5:10:c2:86:de:9e:2e:6e:
8c:c1:f7:ee:48:c1:f5:36:05:dc:25:bf:a2:b8:4c:53:e2:22:
84:ff:92:f6:39:8f:79:fe:72:05:b6:14:6a:e8:7a:ee:ee:5d:
e8:27:ef:91:f7:0a:6f:41:98:7b:a5:14:c1:fe:97:2e:ca:08:
ed:0f:f7:37:0b:a0:7f:6f:95:c4:28:51:74:65:5b:8d:d9:33:
64:fa:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:33:16 2025 by rpki-client