Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/FKqsClUSc-HScmueq_QOqvdFJPo.roa
File: FKqsClUSc-HScmueq_QOqvdFJPo.roa (raw, json)
Hash identifier: QDB9/wNvtMenWcDG/OOKIL2kdnSagKU38zWW9V2bprA=
Subject key identifier: 14:AA:AC:0A:55:12:73:E1:D2:72:6B:9E:AB:F4:0E:AA:F7:45:24:FA
Certificate issuer: /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial: 01995839EEF24A45EEC2225DB65A147573FB
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/FKqsClUSc-HScmueq_QOqvdFJPo.roa
Signing time: Wed 17 Sep 2025 15:10:15 +0000
ROA not before: Wed 17 Sep 2025 15:10:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 67.63.59.0/24 maxlen: 24
67.63.60.0/24 maxlen: 24
67.63.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:58:39:ee:f2:4a:45:ee:c2:22:5d:b6:5a:14:75:73:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
Validity
Not Before: Sep 17 15:10:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14aaac0a551273e1d2726b9eabf40eaaf74524fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:9d:56:3a:e3:43:c0:7e:72:e8:1e:c3:1d:
b7:b3:57:d4:1a:f3:5f:a9:37:c5:fa:f1:74:ce:3c:
c5:50:2a:4e:08:8b:3e:52:a3:f3:74:de:cd:6c:25:
58:52:53:87:de:78:32:4b:58:9f:86:4b:ed:8f:57:
24:f3:a8:a4:cc:0a:61:14:00:c5:8f:b9:76:a3:d3:
87:69:de:2d:30:91:31:42:f3:04:57:af:76:52:9b:
60:92:a5:cb:5b:d7:40:6d:c7:fb:33:24:2c:e9:02:
61:f6:ac:a9:74:1f:17:51:12:2a:1d:73:b3:69:11:
c1:21:68:9a:25:ae:65:b0:53:b6:ec:8b:ad:ed:8e:
4d:62:ba:f0:3a:61:9c:8b:fb:4f:c2:ad:00:cd:6c:
5f:b0:fe:46:c3:35:84:ed:17:82:8f:32:40:7a:76:
07:9e:94:3c:33:cc:7c:23:f6:26:a0:44:ab:61:88:
db:e8:1b:40:18:d2:14:7b:59:12:f8:09:1f:12:3c:
b0:14:78:93:2a:dc:4d:66:74:47:ea:15:32:2d:34:
cc:93:d2:b8:de:33:33:1a:57:98:bd:5e:fd:97:7c:
a2:03:e8:fd:29:67:50:cf:d0:84:c8:58:18:5b:4d:
dd:34:82:3d:09:51:e6:ba:78:30:9c:0c:9b:ca:17:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AA:AC:0A:55:12:73:E1:D2:72:6B:9E:AB:F4:0E:AA:F7:45:24:FA
X509v3 Authority Key Identifier:
keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/FKqsClUSc-HScmueq_QOqvdFJPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.63.59.0-67.63.60.255
67.63.62.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:20:96:e2:54:2d:ef:4a:d1:a5:95:9e:1d:26:c7:b6:eb:94:
84:8e:cf:68:6b:4f:f6:f9:04:ad:b7:c7:9c:54:67:e1:78:58:
77:56:ea:3b:35:d6:9f:ca:bb:d9:12:26:a8:f5:c3:db:f6:7c:
b5:09:f1:f3:54:d7:31:88:22:29:4c:9c:1f:e6:7c:fc:90:2f:
58:f1:8d:a0:20:24:0e:a0:a0:80:ae:8b:40:3b:e7:e0:9d:01:
4c:26:4f:85:5a:b6:1e:12:c7:79:fd:3e:24:8d:34:f8:ab:9b:
ff:7d:8e:db:25:93:0e:af:15:86:ce:c9:3d:d7:6c:2e:4f:24:
05:55:f1:81:93:69:43:fe:d3:61:31:af:fb:1c:93:65:a8:97:
27:ec:ea:a1:8c:b0:76:82:74:3d:2c:b8:74:01:e0:cd:c4:1f:
6d:a5:cf:f5:96:7a:50:41:ad:d7:92:3c:3a:8b:9c:02:4c:37:
e2:2a:c2:ac:bf:3b:89:21:03:82:b4:07:c2:83:cb:86:03:3b:
b4:7e:49:ec:e2:d8:0a:ca:56:d0:35:03:09:a3:ad:16:7b:69:
34:46:c3:1a:ce:55:17:28:8a:91:fb:6f:c1:69:f3:de:50:35:
f5:41:f0:6c:34:db:0a:09:9a:68:d2:43:bd:59:b9:ab:ee:dd:
d8:f5:54:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:17:46 2025 by rpki-client