Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fxJiH6eIDyvLzyEvl0wGoIdLa14.roa
File: fxJiH6eIDyvLzyEvl0wGoIdLa14.roa (raw, json)
Hash identifier: kKoVyH0Lzfe6UOzToW/73K9Otv/57/8q0T5ca/jlhPY=
Subject key identifier: 7F:12:62:1F:A7:88:0F:2B:CB:CF:21:2F:97:4C:06:A0:87:4B:6B:5E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01994DAFDFBB1A482A15F8717C2993325E2D
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fxJiH6eIDyvLzyEvl0wGoIdLa14.roa
Signing time: Mon 15 Sep 2025 14:03:15 +0000
ROA not before: Mon 15 Sep 2025 14:03:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
82.115.9.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
178.173.232.0/22 maxlen: 24
188.209.156.0/22 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:af:df:bb:1a:48:2a:15:f8:71:7c:29:93:32:5e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 15 14:03:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f12621fa7880f2bcbcf212f974c06a0874b6b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:c3:63:dc:28:e4:52:16:55:14:e1:5c:32:
44:51:09:17:b8:72:9f:5a:1f:94:9c:54:87:55:ef:
c7:8c:a7:0d:ae:e2:d4:90:38:22:4e:ab:c9:06:27:
26:85:3a:18:35:2a:ad:7f:60:7d:bc:a7:23:89:7c:
b9:57:bc:f0:c9:3f:c9:14:25:10:5d:f5:ee:64:13:
4e:cc:9d:9c:06:56:86:a7:47:b8:d9:17:ac:f3:e6:
8b:36:60:29:45:d9:99:99:ed:c1:87:50:89:5f:df:
5e:92:56:25:4c:42:83:41:13:b7:f5:43:cb:11:ec:
48:b6:78:44:9a:e0:cc:ce:8a:c7:9e:49:ff:04:74:
37:40:ed:e3:bb:77:a8:38:dd:1f:cb:93:85:0b:78:
b3:13:34:14:52:d4:5d:1e:50:36:72:8b:7f:0e:b4:
47:d2:de:be:59:7e:7d:57:70:ca:a9:ba:95:15:ab:
a5:09:c2:3f:f7:4a:eb:1f:72:1f:0c:9f:3e:ac:19:
fb:49:30:ae:9c:64:a1:c5:b1:e0:31:70:23:55:5a:
76:39:68:53:39:64:5e:77:c3:48:4a:aa:eb:5f:ec:
6f:3f:22:cc:24:ed:e7:12:47:78:de:80:b2:23:3a:
39:8b:d5:3e:66:8e:86:40:ed:3f:d8:78:fa:29:ac:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:12:62:1F:A7:88:0F:2B:CB:CF:21:2F:97:4C:06:A0:87:4B:6B:5E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fxJiH6eIDyvLzyEvl0wGoIdLa14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
82.115.9.0/24
159.255.32.0/21
178.173.232.0/22
188.209.156.0/22
202.133.90.0/23
212.90.100.0/22
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:7c:13:0a:43:5e:b9:73:93:e2:89:bb:8d:48:02:4b:53:dd:
8a:04:1c:1e:3e:a7:dc:88:8f:b4:4a:1b:64:34:ab:86:24:be:
d6:a9:46:1d:ce:13:c1:39:c8:69:e7:96:89:af:6a:9d:4f:e2:
ad:a3:0a:ab:f2:0c:49:1b:38:6c:4d:8a:99:67:f7:49:17:74:
0c:6b:1a:1a:fd:2a:d6:1c:bf:a0:c9:c2:f5:4a:f9:8b:27:0b:
cc:50:d3:05:1a:3e:83:57:b4:c4:df:6e:61:98:8f:51:27:27:
29:08:f7:bd:2b:71:29:df:ac:de:74:3d:c9:bf:e7:69:8c:e0:
7e:ec:7f:35:51:3e:9f:0d:95:f3:d7:6c:e6:16:ba:bc:dd:71:
93:c3:f8:d7:69:03:ff:84:f7:44:b9:c9:51:03:45:4c:bb:6a:
bc:c4:36:d2:d4:96:8c:5f:11:ab:03:fc:43:98:ef:f0:be:90:
cd:9e:02:5b:1c:cf:c3:34:4b:80:cb:7a:9e:c1:a3:f1:5c:14:
2e:97:19:6c:68:2f:ff:b1:b7:fc:8a:8c:4a:fb:9a:08:3e:2e:
13:91:4b:f2:e1:b1:1d:fd:54:6b:e3:44:9c:9a:3b:48:bc:c9:
24:7d:7e:65:08:4d:35:f5:0d:e9:76:e8:50:43:0b:37:0c:37:
83:ba:bc:27
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZlNr9+7GkgqFfhxfCmTMl4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwOTE1MTQwMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjEyNjIxZmE3ODgwZjJiY2JjZjIxMmY5NzRjMDZhMDg3NGI2YjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw3DY9wo5FIWVRThXDJEUQkXuHKf
Wh+UnFSHVe/HjKcNruLUkDgiTqvJBicmhToYNSqtf2B9vKcjiXy5V7zwyT/JFCUQ
XfXuZBNOzJ2cBlaGp0e42Res8+aLNmApRdmZme3Bh1CJX99eklYlTEKDQRO39UPL
EexItnhEmuDMzorHnkn/BHQ3QO3ju3eoON0fy5OFC3izEzQUUtRdHlA2cot/DrRH
0t6+WX59V3DKqbqVFaulCcI/90rrH3IfDJ8+rBn7STCunGShxbHgMXAjVVp2OWhT
OWRed8NISqrrX+xvPyLMJO3nEkd43oCyIzo5i9U+Zo6GQO0/2Hj6Kazk4wIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFH8SYh+niA8ry88hL5dMBqCHS2teMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvZnhKaUg2ZUlEeXZMenlFdmwwd0dvSWRMYTE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBLYsGAwQA
UnMJAwQDn/8gAwQCsq3oAwQCvNGcAwQByoVaAwQC1FpkAwQC1a0gMA0GCSqGSIb3
DQEBCwUAA4IBAQDEfBMKQ165c5PiibuNSAJLU92KBBwePqfciI+0ShtkNKuGJL7W
qUYdzhPBOchp55aJr2qdT+Ktowqr8gxJGzhsTYqZZ/dJF3QMaxoa/SrWHL+gycL1
SvmLJwvMUNMFGj6DV7TE325hmI9RJycpCPe9K3Ep36zedD3Jv+dpjOB+7H81UT6f
DZXz12zmFrq83XGTw/jXaQP/hPdEuclRA0VMu2q8xDbS1JaMXxGrA/xDmO/wvpDN
ngJbHM/DNEuAy3qewaPxXBQulxlsaC//sbf8ioxK+5oIPi4TkUvy4bEd/VRr40Sc
mjtIvMkkfX5lCE019Q3pduhQQws3DDeDurwn
-----END CERTIFICATE-----
Generated at Tue Sep 16 12:19:13 2025 by rpki-client