Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IDNq1fzegiVq3DfMODVoKXhXsXw.roa
File: IDNq1fzegiVq3DfMODVoKXhXsXw.roa (raw, json)
Hash identifier: 9qsXkwmfg9GPCCRx/oqPNzp3M+SoGsIIkgThEWElfxg=
Subject key identifier: 20:33:6A:D5:FC:DE:82:25:6A:DC:37:CC:38:35:68:29:78:57:B1:7C
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019A91C636FA136FA94398786DFDEAAD3DD5
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IDNq1fzegiVq3DfMODVoKXhXsXw.roa
Signing time: Mon 17 Nov 2025 12:24:37 +0000
ROA not before: Mon 17 Nov 2025 12:24:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63199
IP address blocks: 81.21.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:91:c6:36:fa:13:6f:a9:43:98:78:6d:fd:ea:ad:3d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 17 12:24:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20336ad5fcde82256adc37cc383568297857b17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:ab:47:9b:52:48:da:10:2d:d3:19:f1:4d:
81:ea:ac:91:44:c9:63:bb:dc:a3:16:97:d9:07:c6:
3c:58:8a:5f:95:90:62:90:e1:60:9f:55:54:7e:1b:
c5:56:46:ed:2b:0c:d1:43:ef:d1:bc:7b:4c:05:5c:
98:0b:8d:fc:02:15:d6:06:94:fb:d4:37:d0:f4:52:
56:27:5f:c4:94:40:b1:91:9c:8c:7b:48:86:9f:cf:
ac:a0:91:19:ee:7c:9c:f6:f1:9d:26:45:2b:23:f0:
d2:9c:5b:d1:2d:98:90:7a:23:1c:e9:3e:7d:4c:70:
cc:32:fc:27:61:39:db:89:97:d5:e2:c7:91:58:3f:
8a:e9:36:4b:ef:07:17:c3:32:35:f9:1d:ab:5a:a4:
91:7a:b7:dc:8e:b8:77:f4:62:85:17:15:bc:46:28:
39:bd:ff:33:2d:46:66:3b:93:02:35:b8:2e:7c:8f:
8f:d4:a6:37:e9:51:00:1b:b6:11:62:a6:5b:b3:f2:
ea:94:a4:38:37:c9:2f:8a:2b:17:84:b2:1d:7a:1b:
49:a6:0d:9a:52:5c:52:9d:25:5d:a3:ad:80:e5:52:
a5:5d:e4:bb:1b:b8:c1:ea:1d:76:d3:20:83:bb:1f:
ab:74:ab:94:ed:6f:35:68:ff:0b:d0:3d:10:a0:c1:
76:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:33:6A:D5:FC:DE:82:25:6A:DC:37:CC:38:35:68:29:78:57:B1:7C
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IDNq1fzegiVq3DfMODVoKXhXsXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e0:40:02:66:18:7e:c4:07:95:e0:a3:7b:ca:8f:4d:8e:4f:
9e:14:59:10:68:ab:b6:a7:d2:f9:0a:0f:81:b4:c6:fc:3e:6d:
e7:59:ae:93:69:05:f2:53:22:fc:ab:e0:95:00:97:d4:69:be:
b9:aa:e6:9f:cb:3a:c6:52:e1:59:5e:1e:e0:4d:7a:a2:64:c1:
82:85:81:e9:8b:1c:33:7b:f0:3b:f5:9c:79:46:9f:d7:e1:71:
80:99:3a:2d:54:db:20:cb:09:56:f0:72:88:e2:40:80:2c:93:
4c:54:93:8f:8b:5f:da:64:b0:9e:5b:07:a8:e8:5c:a1:12:f7:
51:f6:d4:9c:da:2a:bb:07:0b:e1:c1:43:81:45:ce:25:29:04:
ab:35:4e:83:a2:fc:2b:d5:32:14:3b:48:f5:87:ba:06:30:52:
ed:82:57:0a:e6:98:45:c2:bd:64:de:d0:27:6e:9a:6b:7d:69:
4a:5b:c6:70:cb:1b:5c:06:23:ea:24:2a:f9:d0:ac:97:5d:03:
b6:00:a4:fd:48:03:a6:9a:87:bd:12:38:e9:ea:97:96:e3:09:
04:ef:54:0b:9f:cf:58:a1:fe:b2:1e:c0:fa:32:d8:4c:ee:77:
b5:a9:92:f0:da:1e:25:b6:a6:6e:a4:da:10:67:bd:be:1d:62:
db:c0:76:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 15:53:50 2025 by rpki-client