Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_FNMQj84tJh-4HyNowtmOCEiCxo.roa
File: _FNMQj84tJh-4HyNowtmOCEiCxo.roa (raw, json)
Hash identifier: dAMKJZfOUCNw/ajVE5EkGXLyxrXFFacIJUlJ/Yg5aRk=
Subject key identifier: FC:53:4C:42:3F:38:B4:98:7E:E0:7C:8D:A3:0B:66:38:21:22:0B:1A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01981D63A2EA7713CB3741F02E8A4CB593C4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_FNMQj84tJh-4HyNowtmOCEiCxo.roa
Signing time: Fri 18 Jul 2025 11:55:25 +0000
ROA not before: Fri 18 Jul 2025 11:55:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207695
IP address blocks: 185.227.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 20:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:63:a2:ea:77:13:cb:37:41:f0:2e:8a:4c:b5:93:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 18 11:55:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc534c423f38b4987ee07c8da30b663821220b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:d2:ad:44:be:33:6b:0a:5a:db:6a:fa:20:
83:e4:dd:9e:6c:f6:16:e6:eb:47:2a:78:07:c6:e8:
84:5b:d2:a3:71:72:9c:b0:f2:bf:6e:bf:e9:fe:c1:
85:56:39:8b:54:d5:fc:36:33:cb:93:bc:06:1f:3f:
41:37:0a:92:76:c4:55:e3:42:74:cf:59:a1:c5:52:
84:6e:7f:c5:21:ac:ce:55:44:63:cb:b0:20:3d:94:
cb:e3:2b:b6:ff:88:14:5d:fb:31:40:00:20:7f:87:
93:10:48:ea:49:28:ea:44:a6:20:de:b6:e5:a6:d3:
af:89:a8:a4:39:09:27:b9:8c:7e:c3:f6:fb:fd:d0:
b8:bd:86:82:d3:67:f3:25:23:5e:d6:c6:eb:6d:26:
bb:d4:e3:4b:9f:0e:34:2a:57:47:0c:4a:a6:51:85:
f1:df:0a:03:cb:4c:87:c9:88:fa:c4:0e:4f:52:c1:
47:0e:99:91:d0:48:dc:1d:de:0a:fe:40:18:a7:98:
ce:ad:1c:3a:6d:e0:7b:9a:b1:ec:0c:c4:9f:c4:66:
06:d6:d7:47:b3:09:60:81:99:19:7e:56:4c:fa:44:
55:1d:89:09:48:c1:6d:f9:45:fd:bb:17:af:fa:9a:
42:4b:85:8c:74:38:8b:68:40:cc:9b:b3:74:0e:c5:
f7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:4C:42:3F:38:B4:98:7E:E0:7C:8D:A3:0B:66:38:21:22:0B:1A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_FNMQj84tJh-4HyNowtmOCEiCxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.144.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ac:24:db:2a:e3:8a:da:45:56:6b:00:96:99:d0:5e:a4:f6:
ca:60:bd:fa:a8:de:e2:76:3f:d0:a5:33:bd:c8:44:7e:19:17:
9f:67:55:f2:ab:cc:6c:3a:c2:06:9d:d1:e1:bf:a6:e8:ea:34:
d5:36:00:f9:3d:98:11:60:f0:b4:2e:04:fc:f2:a5:00:1b:30:
ae:69:8b:cb:73:7d:8b:90:ea:85:a7:57:99:36:3d:9e:01:1d:
e3:ef:27:23:3a:b9:e1:42:99:9b:3e:95:79:72:f1:e6:e5:78:
94:12:b5:98:b9:d2:e7:a2:97:20:e0:7b:5b:fe:e6:f6:92:37:
0c:0a:46:d0:48:a9:33:aa:fb:13:b3:15:86:e9:6e:f3:4b:3a:
eb:6f:76:02:bb:10:5c:68:6e:93:58:f3:0a:9b:12:f8:f8:13:
9f:61:31:1c:51:e3:b1:8c:89:e9:6c:ab:b2:98:42:89:35:ee:
54:0e:c6:c5:31:0a:9e:5f:42:ee:3d:bb:d8:f6:46:50:91:26:
6c:72:4f:42:10:46:56:99:e6:7a:08:36:1d:6d:6d:c8:29:f7:
40:51:86:41:a1:0a:7e:0a:fe:98:99:37:f3:8c:19:ad:dd:1e:
4e:d6:3e:26:73:3a:6c:5d:ae:3c:2c:f7:68:ed:23:84:73:8f:
77:ec:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:17:51 2025 by rpki-client