Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FYRqMOsLGDF-9umJGL6t02WTx4g.roa
File: FYRqMOsLGDF-9umJGL6t02WTx4g.roa (raw, json)
Hash identifier: MVa/99y56C4rTycHwVQpzSBHqWGLA7VUZr0AcZBJQG4=
Subject key identifier: 15:84:6A:30:EB:0B:18:31:7E:F6:E9:89:18:BE:AD:D3:65:93:C7:88
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 0198F22A0424ED441229C6BB358144571B21
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FYRqMOsLGDF-9umJGL6t02WTx4g.roa
Signing time: Thu 28 Aug 2025 19:31:36 +0000
ROA not before: Thu 28 Aug 2025 19:31:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214259
IP address blocks: 109.122.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f2:2a:04:24:ed:44:12:29:c6:bb:35:81:44:57:1b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 28 19:31:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15846a30eb0b18317ef6e98918beadd36593c788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:84:5e:df:a4:fe:99:5e:39:0c:bc:17:77:
58:22:ed:98:62:64:ad:1b:03:ab:0d:c3:09:2e:23:
94:db:de:0c:93:3f:ae:14:e6:09:88:a3:84:89:88:
76:d5:2a:10:55:81:30:37:89:67:11:bd:5a:11:47:
1b:3e:8b:e3:03:ed:5f:79:9c:94:90:a4:8a:a1:06:
b9:b3:16:5a:63:67:bf:3f:32:a4:cf:b2:5a:8f:d9:
50:ac:1b:47:67:e5:55:6b:ea:a8:97:8c:e9:a2:08:
c8:d3:8d:4b:92:5a:79:5a:80:8f:67:ab:9a:1a:3e:
60:af:85:15:c4:4f:55:bb:d6:75:56:82:db:76:38:
d2:5e:48:c0:66:eb:e6:af:35:23:fb:83:72:b4:c7:
7b:5b:59:c0:c2:07:3f:45:48:ad:09:78:88:19:1d:
46:90:5d:53:a0:78:38:07:8a:27:59:2e:56:c3:e3:
3f:b7:39:2a:12:2f:7b:6f:1f:8b:23:32:9c:32:68:
32:32:9d:65:06:d5:4b:69:90:b0:1e:a9:4f:fe:a7:
46:14:e1:d9:37:6d:63:80:f4:67:db:88:65:1b:3c:
19:49:3f:29:bf:12:74:ad:e0:f2:47:d1:c0:42:2f:
c8:56:56:7d:af:be:37:2f:ae:f6:ae:ad:64:f4:6d:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:84:6A:30:EB:0B:18:31:7E:F6:E9:89:18:BE:AD:D3:65:93:C7:88
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FYRqMOsLGDF-9umJGL6t02WTx4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6c:24:0f:b2:79:44:08:c6:05:e6:0d:08:28:0e:73:fd:89:
1e:59:0f:ab:42:32:59:0d:15:da:86:73:af:58:8a:ef:13:4c:
50:b1:fa:fd:7f:6b:32:29:74:28:3f:60:54:d4:2b:ee:f6:91:
25:0d:71:be:a9:7e:db:8c:b0:78:30:78:9d:8b:2f:fd:51:e5:
b3:49:c6:43:0a:23:df:51:d2:cd:35:5a:bd:f9:7f:c4:69:c3:
14:57:30:ac:db:b3:ce:c1:14:10:d7:ad:1c:1e:4a:f4:da:34:
09:a4:2e:19:83:c0:94:ed:6b:05:ed:6c:37:5c:48:4a:5f:36:
0e:79:f1:92:a9:3f:ce:ed:ea:ef:e9:b9:ee:79:f4:fe:2d:de:
0c:2a:9d:44:e0:6a:59:2a:17:9a:9b:f5:44:08:57:a9:3e:0d:
10:49:67:d1:61:34:15:5c:2b:3b:9f:25:64:80:a3:2d:7d:32:
e1:89:a1:ab:2c:57:d7:ae:cd:41:3d:fc:69:f2:b8:89:74:3c:
41:67:68:c9:36:39:79:1f:6a:f2:49:ee:7b:b5:3a:98:00:9d:
c4:e6:14:a5:e1:63:34:ea:05:6b:6f:26:4f:0b:de:a8:28:0f:
de:2d:5a:7e:cc:a4:2c:6f:aa:4d:92:3e:9c:cf:77:76:94:67:
c5:93:0d:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjyKgQk7UQSKca7NYFEVxshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjUwODI4MTkzMTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTg0NmEzMGViMGIxODMxN2VmNmU5ODkxOGJlYWRkMzY1OTNjNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylaEXt+k/pleOQy8F3dYIu2YYmSt
GwOrDcMJLiOU294Mkz+uFOYJiKOEiYh21SoQVYEwN4lnEb1aEUcbPovjA+1feZyU
kKSKoQa5sxZaY2e/PzKkz7Jaj9lQrBtHZ+VVa+qol4zpogjI041Lklp5WoCPZ6ua
Gj5gr4UVxE9Vu9Z1VoLbdjjSXkjAZuvmrzUj+4NytMd7W1nAwgc/RUitCXiIGR1G
kF1ToHg4B4onWS5Ww+M/tzkqEi97bx+LIzKcMmgyMp1lBtVLaZCwHqlP/qdGFOHZ
N21jgPRn24hlGzwZST8pvxJ0reDyR9HAQi/IVlZ9r743L672rq1k9G2r1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBWEajDrCxgxfvbpiRi+rdNlk8eIMB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvRllScU1Pc0xHREYtOXVtSkdMNnQwMldUeDRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoNMA0G
CSqGSIb3DQEBCwUAA4IBAQB7bCQPsnlECMYF5g0IKA5z/YkeWQ+rQjJZDRXahnOv
WIrvE0xQsfr9f2syKXQoP2BU1Cvu9pElDXG+qX7bjLB4MHidiy/9UeWzScZDCiPf
UdLNNVq9+X/EacMUVzCs27POwRQQ160cHkr02jQJpC4Zg8CU7WsF7Ww3XEhKXzYO
efGSqT/O7erv6bnuefT+Ld4MKp1E4GpZKheam/VECFepPg0QSWfRYTQVXCs7nyVk
gKMtfTLhiaGrLFfXrs1BPfxp8riJdDxBZ2jJNjl5H2rySe57tTqYAJ3E5hSl4WM0
6gVrbyZPC96oKA/eLVp+zKQsb6pNkj6cz3d2lGfFkw1S
-----END CERTIFICATE-----
Generated at Tue Sep 9 01:49:19 2025 by rpki-client