Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/_KFhe_BTtpV1lrF9X5QVnQTsJqE.roa
File: _KFhe_BTtpV1lrF9X5QVnQTsJqE.roa (raw, json)
Hash identifier: IF46Z4ZmdTyMS4tPxALnyzFW/TQdLU6fExwxVvpvcXA=
Subject key identifier: FC:A1:61:7B:F0:53:B6:95:75:96:B1:7D:5F:94:15:9D:04:EC:26:A1
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 0197E73E4A940E0B2F1F2297C34B5ED90C8E
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/_KFhe_BTtpV1lrF9X5QVnQTsJqE.roa
Signing time: Mon 07 Jul 2025 23:35:08 +0000
ROA not before: Mon 07 Jul 2025 23:35:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51319
IP address blocks: 178.251.144.0/21 maxlen: 21
185.164.8.0/22 maxlen: 22
2a02:2340::/29 maxlen: 29
2a02:2340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e7:3e:4a:94:0e:0b:2f:1f:22:97:c3:4b:5e:d9:0c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Jul 7 23:35:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fca1617bf053b6957596b17d5f94159d04ec26a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:c9:cc:dc:b8:35:11:50:3b:89:b5:ce:17:
8f:cd:8e:5a:c9:e2:e1:b3:8f:e3:3e:37:7c:28:4e:
0f:5b:38:ae:e4:45:22:32:07:49:2c:ef:77:ca:79:
89:2d:de:4d:82:26:71:3a:7f:ab:ed:25:b2:01:52:
56:4e:b8:0c:2d:04:ea:19:0c:c4:1b:2c:6d:66:73:
19:f2:ea:17:d2:ba:8a:79:d3:bb:c4:0c:94:c4:18:
ee:17:f4:85:48:a3:8b:1e:b2:f5:d1:51:c3:89:8a:
68:3b:62:c4:d2:25:66:5f:0e:2b:82:3a:4c:05:b4:
bb:ea:5e:8a:bc:d6:de:d8:64:a4:5e:fe:e7:d6:74:
cd:2a:b3:16:8c:43:36:06:f2:07:71:ed:fb:2a:68:
57:95:73:a6:f3:78:33:fd:45:bf:6b:1f:9a:ae:48:
20:3e:81:cf:7d:ee:f2:25:75:0f:7d:83:ed:0e:15:
69:0d:e6:78:36:c3:56:9a:fa:04:e3:a7:c0:7a:5b:
5e:e4:a9:c2:b7:95:a6:8d:0a:cd:b1:64:d3:8b:b8:
70:3a:2f:9e:98:bb:ef:6c:f0:ac:fa:28:86:09:61:
df:a3:09:d7:04:42:df:57:26:0a:bc:48:90:82:f7:
7d:35:e9:c2:f3:e1:7d:f8:b4:eb:c4:41:94:46:87:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A1:61:7B:F0:53:B6:95:75:96:B1:7D:5F:94:15:9D:04:EC:26:A1
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/_KFhe_BTtpV1lrF9X5QVnQTsJqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.144.0/21
185.164.8.0/22
IPv6:
2a02:2340::/29
Signature Algorithm: sha256WithRSAEncryption
c5:72:da:58:40:39:1c:fb:ab:95:d8:8a:ff:c8:a4:9d:44:ef:
fd:19:bd:e8:c2:bd:4b:c4:19:ac:fd:e3:f0:ef:78:43:c1:50:
1d:f0:93:22:e6:be:27:f6:59:b3:ef:50:d2:53:39:34:7c:08:
56:14:18:5b:51:36:ba:a3:95:ca:a0:8b:23:4f:76:79:7f:08:
82:8c:fe:6f:16:d0:b0:7e:c9:f2:b2:78:47:43:ff:96:c5:a2:
88:9e:61:66:77:fe:c3:0c:2d:1e:8d:3f:c6:55:9e:83:ca:90:
28:68:18:42:5b:27:ba:da:df:fa:31:ca:3b:e5:63:9b:85:c6:
b1:f5:74:60:e4:02:a4:ba:ff:c2:9f:f3:4d:37:5e:41:34:08:
1b:a0:23:34:18:5b:14:05:ce:fb:49:2d:4e:2e:1e:c3:e2:ac:
6a:5a:97:d0:0d:62:26:0a:0a:79:f5:63:c5:09:cf:aa:b4:f0:
05:6f:12:a6:48:75:ba:fc:cf:81:a8:9c:f1:65:32:f4:e0:d2:
8b:dc:8f:df:75:b6:20:47:87:d4:31:3b:7f:79:05:f1:23:8b:
42:90:39:54:42:49:1c:5f:e3:66:28:78:0d:83:c5:4b:a9:50:
92:37:e2:06:2f:21:83:f9:f9:17:d1:07:65:7a:d2:8c:de:07:
e8:bf:bc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:38:15 2025 by rpki-client