Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/FbAqPaVw4Lc8kzGFywuLUOLuN6g.roa
File: FbAqPaVw4Lc8kzGFywuLUOLuN6g.roa (raw, json)
Hash identifier: 5y6ol4UAm9wCL/bXngkdTGDKDxUzmNqQsajx2DmmhCQ=
Subject key identifier: 15:B0:2A:3D:A5:70:E0:B7:3C:93:31:85:CB:0B:8B:50:E2:EE:37:A8
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 0199325A98CA2A06F59F7671898CB1ABE913
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/FbAqPaVw4Lc8kzGFywuLUOLuN6g.roa
Signing time: Wed 10 Sep 2025 06:40:22 +0000
ROA not before: Wed 10 Sep 2025 06:40:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21107
IP address blocks: 62.101.144.0/21 maxlen: 21
81.93.92.0/24 maxlen: 24
89.111.225.0/24 maxlen: 24
94.250.37.0/24 maxlen: 24
94.250.38.0/23 maxlen: 23
94.250.38.0/24 maxlen: 24
94.250.40.0/22 maxlen: 22
94.250.44.0/22 maxlen: 22
94.250.48.0/21 maxlen: 24
94.250.56.0/22 maxlen: 24
94.250.64.0/20 maxlen: 20
94.250.64.0/24 maxlen: 24
94.250.65.0/24 maxlen: 24
94.250.66.0/24 maxlen: 24
94.250.67.0/24 maxlen: 24
94.250.68.0/22 maxlen: 22
94.250.72.0/21 maxlen: 21
94.250.80.0/22 maxlen: 22
94.250.80.0/23 maxlen: 23
94.250.82.0/23 maxlen: 23
94.250.88.0/21 maxlen: 24
94.250.96.0/20 maxlen: 20
94.250.112.0/24 maxlen: 24
94.250.113.0/24 maxlen: 24
94.250.114.0/24 maxlen: 24
94.250.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:5a:98:ca:2a:06:f5:9f:76:71:89:8c:b1:ab:e9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Sep 10 06:40:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15b02a3da570e0b73c933185cb0b8b50e2ee37a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:ab:fe:cc:e5:3f:4f:6a:3d:a2:ed:02:44:
8b:cb:bc:bc:3e:2e:15:1e:6c:f6:a5:de:95:46:89:
53:b8:e1:9e:aa:c7:d3:45:f1:a6:09:98:94:e2:6f:
6a:db:83:6a:51:cb:94:73:d2:95:fe:08:2b:a7:f1:
5d:59:6b:5d:d6:ae:c1:d4:02:44:03:b7:e7:d4:b7:
e5:68:55:8f:35:a0:62:90:65:fe:b6:77:e0:97:88:
ce:c6:8f:17:c0:f1:45:f3:21:d3:14:1e:09:a3:4e:
6f:1f:1f:dd:2f:65:da:af:26:8f:90:c8:a7:52:0f:
4a:c0:cb:41:fb:6f:f3:00:7b:f7:e8:33:8b:98:26:
b2:38:7a:e4:dc:0c:bb:5d:9b:0f:44:6d:29:f5:3f:
af:bf:e8:7e:90:25:aa:37:c0:77:6a:8e:8b:0b:ec:
9d:27:f3:c4:80:7e:db:6b:a0:ef:2d:3a:bb:44:89:
b4:2c:b3:05:6a:cb:d0:92:1c:7f:d1:bf:ed:ec:25:
45:b3:79:9a:f1:c4:27:5f:f1:78:87:a4:0b:dc:95:
d8:5d:85:9d:3b:c9:cf:2a:9a:6b:1c:36:91:dc:93:
78:4e:a9:9c:57:88:d9:4c:d6:41:d7:26:5f:2f:f3:
ac:17:ff:88:27:4c:13:69:b4:2d:a8:c4:fe:9e:d1:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B0:2A:3D:A5:70:E0:B7:3C:93:31:85:CB:0B:8B:50:E2:EE:37:A8
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/FbAqPaVw4Lc8kzGFywuLUOLuN6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.101.144.0/21
81.93.92.0/24
89.111.225.0/24
94.250.37.0-94.250.59.255
94.250.64.0-94.250.83.255
94.250.88.0-94.250.115.255
Signature Algorithm: sha256WithRSAEncryption
86:77:dc:bd:85:2d:06:30:0b:88:5b:f6:29:59:3c:b3:c0:82:
64:80:df:90:1d:8d:34:f8:fb:3f:52:a4:dd:72:ea:ff:20:ad:
35:d8:1a:dc:61:99:6f:2b:e6:00:09:1e:03:04:46:a7:b9:7c:
ae:3c:52:8c:50:e5:53:e2:06:fd:7b:4f:94:5a:f7:1e:84:7b:
5b:4b:ba:db:0c:bb:0f:3b:ba:5d:96:05:26:70:ae:dd:48:ad:
9e:d5:92:7d:b3:00:75:8d:cf:c0:6c:56:d5:0a:eb:05:b0:1b:
24:ce:60:f5:7f:dc:4d:93:85:89:e5:f9:c6:70:eb:e6:e3:40:
8a:d1:bd:92:34:dc:c8:8b:86:74:2c:6b:e0:cc:5a:03:e5:d2:
10:25:74:67:59:74:d7:17:74:7d:43:50:78:5d:2c:82:84:0b:
99:e7:12:4a:5d:ac:b0:d7:b7:50:5d:52:ff:97:16:97:a8:24:
96:f9:9f:9c:10:cc:a5:ff:6d:86:4c:6d:de:2e:d3:16:ec:17:
99:ce:da:f8:a5:5b:ee:26:69:b0:d7:cf:12:8a:c7:d4:eb:23:
46:a6:f7:49:0a:15:8a:f9:4e:95:39:03:5f:36:b7:bc:2c:f4:
ee:30:80:57:8e:5c:d0:5e:d5:af:82:6c:41:e6:a8:1f:ff:0a:
8a:72:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:54:09 2025 by rpki-client