Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/FC4K9cci-eXwiNdvRsWeBHRaYMw.roa
File: FC4K9cci-eXwiNdvRsWeBHRaYMw.roa (raw, json)
Hash identifier: f+O7sFGh04yGJ7kTRgAPiUe07FsxKS0OK4hnUOJ1gWU=
Subject key identifier: 14:2E:0A:F5:C7:22:F9:E5:F0:88:D7:6F:46:C5:9E:04:74:5A:60:CC
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 019A156BE1C73CB18614A91558FAE03191AF
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/FC4K9cci-eXwiNdvRsWeBHRaYMw.roa
Signing time: Fri 24 Oct 2025 08:53:02 +0000
ROA not before: Fri 24 Oct 2025 08:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 375
IP address blocks: 131.207.0.0/17 maxlen: 17
192.49.0.0/21 maxlen: 21
192.49.9.0/24 maxlen: 24
192.49.10.0/24 maxlen: 24
192.49.13.0/24 maxlen: 24
192.49.19.0/24 maxlen: 24
192.49.20.0/24 maxlen: 24
192.49.22.0/24 maxlen: 24
192.49.33.0/24 maxlen: 24
192.49.36.0/22 maxlen: 22
192.49.40.0/21 maxlen: 21
192.49.40.0/23 maxlen: 23
192.49.48.0/22 maxlen: 22
192.49.50.0/24 maxlen: 24
192.49.52.0/23 maxlen: 23
192.49.55.0/24 maxlen: 24
192.49.56.0/21 maxlen: 21
192.49.64.0/22 maxlen: 22
192.49.68.0/24 maxlen: 24
192.49.70.0/23 maxlen: 23
192.49.72.0/23 maxlen: 23
192.49.72.0/24 maxlen: 24
192.49.78.0/24 maxlen: 24
192.49.81.0/24 maxlen: 24
192.49.86.0/23 maxlen: 23
192.49.88.0/23 maxlen: 23
192.49.90.0/24 maxlen: 24
192.49.91.0/24 maxlen: 24
192.49.92.0/22 maxlen: 22
192.49.96.0/20 maxlen: 20
192.49.96.0/24 maxlen: 24
192.49.98.0/23 maxlen: 23
192.49.100.0/23 maxlen: 23
192.49.102.0/24 maxlen: 24
192.49.103.0/24 maxlen: 24
192.49.104.0/24 maxlen: 24
192.49.106.0/23 maxlen: 23
192.49.108.0/22 maxlen: 22
192.49.112.0/22 maxlen: 22
192.49.112.0/23 maxlen: 23
192.49.114.0/23 maxlen: 23
192.49.117.0/24 maxlen: 24
192.49.119.0/24 maxlen: 24
192.49.120.0/22 maxlen: 22
192.49.124.0/23 maxlen: 23
192.49.126.0/24 maxlen: 24
192.49.128.0/22 maxlen: 22
192.49.131.0/24 maxlen: 24
192.49.133.0/24 maxlen: 24
192.49.134.0/24 maxlen: 24
192.49.136.0/23 maxlen: 23
192.49.139.0/24 maxlen: 24
192.49.140.0/23 maxlen: 23
192.49.142.0/24 maxlen: 24
192.49.144.0/24 maxlen: 24
192.49.146.0/24 maxlen: 24
192.49.148.0/22 maxlen: 22
192.49.152.0/21 maxlen: 21
192.49.160.0/21 maxlen: 21
192.49.160.0/23 maxlen: 23
192.49.163.0/24 maxlen: 24
192.49.164.0/22 maxlen: 22
192.49.168.0/23 maxlen: 23
192.49.170.0/24 maxlen: 24
192.49.173.0/24 maxlen: 24
192.49.174.0/23 maxlen: 23
192.49.176.0/20 maxlen: 20
192.49.192.0/18 maxlen: 18
2a03:9b80::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:6b:e1:c7:3c:b1:86:14:a9:15:58:fa:e0:31:91:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Oct 24 08:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=142e0af5c722f9e5f088d76f46c59e04745a60cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:ed:f0:18:4a:bd:53:cb:ad:eb:b8:fd:bf:
a0:98:8c:91:f2:ef:4d:ab:18:ae:8e:75:6a:ed:0d:
42:34:85:58:52:ec:86:93:d8:c2:0a:fa:9b:e5:bb:
ee:73:9b:1d:84:92:13:ea:09:38:b4:fd:d4:0e:8b:
bd:89:f1:bb:ea:31:d2:b2:ec:ef:b6:3d:ad:fa:36:
ed:88:3c:24:42:cd:41:3e:a0:3e:3d:0a:36:ce:26:
35:b4:f8:10:6f:73:93:d7:51:93:67:e0:99:2f:92:
2f:17:ea:cd:55:f7:a2:91:b8:e1:9b:86:82:c6:ea:
8f:58:66:24:ca:b3:6e:24:19:ad:05:69:f6:7c:60:
79:61:64:0a:72:70:34:51:79:51:84:60:fd:1d:64:
8d:0b:98:4b:d2:cf:c6:60:28:1f:4a:11:6b:ca:ca:
60:9b:91:d0:b8:33:2d:95:a1:66:7a:a7:0e:46:94:
46:90:9f:61:eb:93:3c:a1:d9:11:d0:c3:ea:aa:45:
88:c6:90:85:60:c0:92:32:32:a6:16:70:e6:e6:e7:
28:7f:ff:77:85:a4:81:43:b3:ec:58:b2:3c:72:c1:
a9:a5:d5:83:d7:9f:46:2c:35:a0:02:b3:2c:b1:de:
68:03:df:57:23:3a:8a:22:61:b6:77:f4:a6:b7:d5:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2E:0A:F5:C7:22:F9:E5:F0:88:D7:6F:46:C5:9E:04:74:5A:60:CC
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/FC4K9cci-eXwiNdvRsWeBHRaYMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.207.0.0/17
192.49.0.0/21
192.49.9.0-192.49.10.255
192.49.13.0/24
192.49.19.0-192.49.20.255
192.49.22.0/24
192.49.33.0/24
192.49.36.0-192.49.53.255
192.49.55.0-192.49.68.255
192.49.70.0-192.49.73.255
192.49.78.0/24
192.49.81.0/24
192.49.86.0-192.49.115.255
192.49.117.0/24
192.49.119.0-192.49.126.255
192.49.128.0/22
192.49.133.0-192.49.134.255
192.49.136.0/23
192.49.139.0-192.49.142.255
192.49.144.0/24
192.49.146.0/24
192.49.148.0-192.49.170.255
192.49.173.0-192.49.255.255
IPv6:
2a03:9b80::/34
Signature Algorithm: sha256WithRSAEncryption
96:89:96:97:11:af:f9:01:b2:f1:83:f9:74:56:ed:a2:9c:a7:
d3:31:40:72:e7:da:da:0c:58:fc:4c:90:31:cc:a6:11:1f:4a:
1c:5c:b3:65:49:9b:66:cd:91:82:42:78:d5:d2:b2:3e:97:3d:
f6:19:5f:94:e8:7c:0c:07:65:ef:3a:61:90:4a:a4:07:15:9f:
df:d9:60:64:92:da:2d:de:d7:85:ea:27:d0:af:99:bd:b4:d2:
2f:36:99:a6:bc:20:e0:61:59:98:e5:31:11:1d:18:f4:e5:ef:
bc:d5:a6:db:06:a7:00:54:d2:f0:48:29:ea:2b:f4:3d:4e:8a:
63:78:98:09:a5:c8:13:54:4d:b5:64:6b:23:31:ad:02:43:5a:
ea:af:37:9b:82:e4:e8:9a:bd:ab:2f:8b:03:33:68:61:66:38:
6b:d4:5d:b3:db:9e:bf:65:06:ac:4a:1f:cc:b4:ad:4a:3f:5d:
0a:98:ba:7c:03:60:fb:bf:7b:25:56:7c:87:57:7b:70:78:0b:
f6:ff:57:f1:91:de:e4:55:da:7d:6f:14:15:45:0b:24:ac:3a:
7a:5d:04:41:82:b2:e9:f7:5c:35:17:99:6c:44:47:d2:a8:62:
44:bb:3b:00:5c:81:21:11:a1:1a:ae:36:e3:01:c9:84:ce:52:
06:e4:63:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:01:53 2025 by rpki-client