Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/fJSwZSCvgo26rqxIAcOdab5KKYs.roa
File: fJSwZSCvgo26rqxIAcOdab5KKYs.roa (raw, json)
Hash identifier: teqnFvvZnLT9nDR1yJ19E2k/PCo/G+uD5CJ+qieOR4o=
Subject key identifier: 7C:94:B0:65:20:AF:82:8D:BA:AE:AC:48:01:C3:9D:69:BE:4A:29:8B
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019994799F5C40D1ED659F727BA68426CE66
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/fJSwZSCvgo26rqxIAcOdab5KKYs.roa
Signing time: Mon 29 Sep 2025 07:57:02 +0000
ROA not before: Mon 29 Sep 2025 07:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401783
IP address blocks: 94.176.164.0/24 maxlen: 24
188.215.68.0/24 maxlen: 24
188.215.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:79:9f:5c:40:d1:ed:65:9f:72:7b:a6:84:26:ce:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Sep 29 07:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c94b06520af828dbaaeac4801c39d69be4a298b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:66:06:d5:44:d1:e2:37:68:4b:9d:8b:53:
e2:25:d8:3c:1b:1e:90:11:a1:be:59:c7:0a:1b:5f:
da:1a:0a:bd:43:ce:ea:54:6f:33:36:20:d6:ff:a0:
54:82:9b:17:ad:29:83:27:ec:4b:65:65:80:be:3f:
32:70:02:82:eb:92:b5:13:11:3c:6e:31:58:68:2e:
86:2d:c4:03:8e:e5:56:39:62:76:8f:e7:ae:ba:7f:
e8:e6:3d:f1:58:24:98:6a:5a:80:17:56:3b:87:84:
f3:00:c7:51:09:79:89:10:cd:99:6d:57:18:ef:d0:
01:44:e9:1a:c6:89:78:15:ab:a3:d5:50:12:a7:f5:
42:6f:53:59:66:63:04:ab:6c:23:5d:55:3e:59:6d:
8a:99:d0:2e:18:af:0b:e7:ed:3e:a5:64:22:f4:c2:
f5:81:0d:49:ed:a6:1d:a0:9a:58:4f:94:9c:fa:f2:
b8:9b:84:fc:27:90:39:a6:78:c8:49:7a:86:fe:0e:
66:27:44:8b:d3:15:5e:d8:fd:83:48:25:3a:fd:3d:
e7:f7:27:2a:58:2e:68:8c:ce:e6:09:08:e5:c3:b1:
5b:e7:ef:34:a2:7f:de:3b:e0:07:7f:07:d7:a3:e4:
fc:71:19:ed:1c:48:42:13:70:86:a4:8a:a9:09:79:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:B0:65:20:AF:82:8D:BA:AE:AC:48:01:C3:9D:69:BE:4A:29:8B
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/fJSwZSCvgo26rqxIAcOdab5KKYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.164.0/24
188.215.68.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:fd:ad:21:62:2a:aa:7b:bc:20:6b:ff:78:d0:9b:82:24:ee:
d8:97:c3:28:36:59:89:8d:0a:1b:04:89:49:ca:77:ce:76:e7:
0d:76:b0:f5:dc:6a:04:04:6d:1a:4a:6b:88:ee:98:e1:d3:ca:
73:2b:5d:d3:39:10:78:56:46:a7:eb:6c:22:f5:36:69:af:50:
99:c9:c0:11:1e:72:90:1e:bf:3a:0b:78:03:28:e8:1e:b1:8f:
e8:a4:b9:66:13:5d:eb:6d:2c:cb:dc:2d:51:6a:81:2b:8b:60:
6b:74:64:41:6b:b9:47:ed:ef:dc:5a:98:58:f5:81:e5:93:57:
14:8f:3a:57:ee:c7:a3:01:56:fb:b4:66:40:34:d0:a0:89:73:
82:47:f2:4f:1a:e3:7a:89:3e:57:1e:c2:22:b6:85:27:30:ae:
9f:4f:89:48:6d:86:47:cf:43:18:fb:60:e0:a7:b9:21:5f:f8:
43:4b:7c:49:00:a5:be:d7:00:df:26:a7:62:94:02:28:eb:02:
89:b2:bb:5f:fc:a7:a5:dd:4f:22:89:ef:46:c3:47:f9:df:e3:
21:c5:2c:a4:73:4d:d8:f1:05:87:3c:8e:87:5e:38:01:6e:6f:
f1:15:02:67:3f:07:c3:2a:b6:70:2b:40:88:b8:79:9c:38:d8:
bb:fb:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:10:30 2025 by rpki-client