Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/FSPUqW6f1bt6Ln_O_GZY8ELfTV0.roa
File: FSPUqW6f1bt6Ln_O_GZY8ELfTV0.roa (raw, json)
Hash identifier: 39sdJjk3vkgTas0mAKaVPbVq8zhDKwE42Ih8tHp8ZqQ=
Subject key identifier: 15:23:D4:A9:6E:9F:D5:BB:7A:2E:7F:CE:FC:66:58:F0:42:DF:4D:5D
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 019805AB9994C0FBFBCF01700B4B6146D4BD
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/FSPUqW6f1bt6Ln_O_GZY8ELfTV0.roa
Signing time: Sun 13 Jul 2025 21:23:08 +0000
ROA not before: Sun 13 Jul 2025 21:23:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 92.60.72.0/23 maxlen: 23
92.60.74.0/24 maxlen: 24
92.60.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:05:ab:99:94:c0:fb:fb:cf:01:70:0b:4b:61:46:d4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jul 13 21:23:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1523d4a96e9fd5bb7a2e7fcefc6658f042df4d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:96:69:60:e1:66:9a:f6:29:ae:c6:8a:09:
5e:c0:0b:30:42:ec:03:eb:43:82:f9:b2:e6:66:3c:
34:97:d7:87:be:bb:4a:36:33:bb:80:0f:9a:6d:32:
2f:c6:7e:45:d0:e9:1a:ee:78:b9:e3:9a:46:61:c2:
bb:a3:08:77:e3:ca:f5:99:3e:5d:6c:01:4c:c2:83:
6d:f4:13:fa:b1:bd:30:d3:3e:ef:2f:71:59:d3:c4:
e8:19:e2:02:39:6b:10:43:02:a4:b5:7b:c9:44:55:
c7:a7:9e:5e:0f:61:18:52:7b:42:a9:81:0a:d3:cf:
68:95:f0:f9:35:90:77:1a:ea:cf:af:76:3e:4b:a2:
7e:15:9c:ec:a7:54:8d:3d:19:7f:56:0b:f0:0e:81:
35:7c:88:54:79:c6:ae:28:5f:71:e3:64:1d:46:25:
98:2d:b5:f3:29:95:70:3e:90:dd:47:f6:a6:c0:c5:
a2:59:09:ef:f4:ab:ec:b5:03:07:7f:54:f7:eb:27:
f1:60:3f:8c:ee:77:11:19:1b:65:b5:95:3a:e0:89:
0b:6f:cc:7b:d5:e4:88:5a:ec:ee:f5:e7:0c:02:b0:
92:20:1a:4b:41:d9:9c:1f:7c:86:b0:d9:8e:8c:91:
03:ef:5e:d0:fe:d3:25:7f:03:ce:ef:19:fd:2f:a0:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:23:D4:A9:6E:9F:D5:BB:7A:2E:7F:CE:FC:66:58:F0:42:DF:4D:5D
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/FSPUqW6f1bt6Ln_O_GZY8ELfTV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.72.0/22
Signature Algorithm: sha256WithRSAEncryption
02:fd:46:f1:af:26:32:f9:73:0f:51:ca:c2:5b:23:0a:8b:13:
bf:cb:d6:f8:f5:79:bf:71:83:5a:55:99:f5:5c:af:4c:71:d6:
4c:6f:39:ad:55:a7:f4:0e:f6:29:ef:2c:87:45:b5:f7:a9:dc:
d6:4f:ac:28:f8:1c:99:e5:62:e5:c7:55:31:00:4d:8d:c8:ee:
1e:2f:8d:11:59:f2:0a:6c:18:37:cb:a8:da:fb:db:ec:19:0c:
ac:8e:a9:55:2d:26:60:c5:b8:57:14:74:fb:95:b1:b0:df:52:
47:fe:86:70:e3:a7:4e:2e:75:9e:57:bd:d9:64:c2:de:db:12:
28:ad:cc:58:c7:af:b0:bc:d2:89:20:4e:00:ad:8c:fb:83:d8:
cc:bf:c0:02:87:86:fc:02:c8:8d:75:c9:8f:0e:fb:f0:9f:a0:
4d:f5:6c:fc:97:77:b7:1a:03:71:72:3e:45:07:8f:cb:47:7c:
9d:f7:19:d1:7b:5f:e8:eb:d1:7f:9d:2a:2f:91:04:64:74:b2:
7e:90:ee:b8:39:10:d1:a3:d9:e3:4b:f4:a1:dc:2c:e9:e9:f3:
5d:9f:e9:72:c5:71:8a:e5:ce:fd:b5:e2:0b:d5:47:d0:9c:54:
7a:f4:c4:25:38:39:2e:5d:46:06:b5:78:7f:8a:5c:d4:d1:17:
e9:a5:f0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:35:33 2025 by rpki-client