Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/fTdsyBaVrS554TN2UN0VhGeNDls.roa
File: fTdsyBaVrS554TN2UN0VhGeNDls.roa (raw, json)
Hash identifier: sXUJowWDLg4BNu9L4rAYmrodb2Pa6x55JbRF2HjEfVM=
Subject key identifier: 7D:37:6C:C8:16:95:AD:2E:79:E1:33:76:50:DD:15:84:67:8D:0E:5B
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 0198E2547D0BA79E310C6AAABE7D1B3CD4CF
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/fTdsyBaVrS554TN2UN0VhGeNDls.roa
Signing time: Mon 25 Aug 2025 17:44:04 +0000
ROA not before: Mon 25 Aug 2025 17:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 85.203.22.0/24 maxlen: 24
85.203.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:54:7d:0b:a7:9e:31:0c:6a:aa:be:7d:1b:3c:d4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Aug 25 17:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d376cc81695ad2e79e1337650dd1584678d0e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:49:f5:ca:ca:b3:18:ff:66:8b:d9:1c:98:
31:d7:62:df:60:ca:2e:20:7f:e3:c8:80:42:d9:8d:
25:a6:24:60:fd:d3:db:43:8b:00:68:4d:91:2e:50:
54:13:40:94:48:73:f4:1d:b0:18:e9:58:69:a6:24:
2d:da:8f:b2:e7:fd:b7:da:6d:7e:87:d9:fd:5f:62:
e8:30:21:5e:48:8c:8c:b7:9b:7b:4e:f6:a4:25:aa:
69:70:60:f9:6b:46:4b:79:fb:a4:c5:ff:cc:c5:b3:
a4:a1:34:2a:6d:9e:53:8b:94:e2:4b:60:c5:53:b9:
e0:84:47:98:15:31:ac:92:06:c3:1b:86:11:8d:ef:
88:ce:b7:76:44:2e:04:bd:7a:19:f6:51:46:e0:1e:
f4:51:12:56:54:98:12:ec:32:69:a8:2c:ab:43:23:
b2:c5:0a:80:16:42:42:85:0c:5c:7d:dd:f0:be:be:
b9:4d:9b:c6:37:39:43:5c:ec:16:21:04:4c:ab:03:
1a:de:c8:71:6d:a0:e4:57:64:37:f3:dd:05:7c:75:
7a:04:cd:08:44:eb:22:68:a6:ba:0e:f5:55:dc:a0:
70:00:46:89:e7:c0:91:83:9b:6e:64:73:34:e5:53:
6c:d0:66:1d:7b:67:ef:d9:62:0d:bf:6f:eb:0f:3a:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:37:6C:C8:16:95:AD:2E:79:E1:33:76:50:DD:15:84:67:8D:0E:5B
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/fTdsyBaVrS554TN2UN0VhGeNDls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.22.0/24
85.203.46.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c4:79:b5:0b:fd:0d:da:08:32:fb:50:cd:b1:aa:91:9d:79:
1a:28:59:7f:66:59:89:3f:0d:cf:82:a2:6b:3c:3e:f9:c8:09:
b4:32:cf:59:01:e3:6e:6e:d0:a9:27:4d:f2:51:7c:4c:80:e7:
11:83:a3:ee:e3:a0:27:7a:25:ff:99:0c:fe:d5:31:b6:38:a3:
0b:95:b8:b3:95:fb:26:0a:96:0f:7a:8b:96:4d:ab:50:83:39:
0e:52:b6:52:ec:52:04:ea:17:13:28:c0:09:b9:cc:e2:7f:a9:
33:b3:42:1c:de:42:79:5a:93:7f:87:21:6c:df:5a:9b:02:a8:
d4:e5:af:04:a0:3b:a1:d2:a1:fa:64:60:38:59:5a:c3:51:08:
c2:0d:27:9d:2b:78:46:2f:58:c8:4c:61:9b:b8:fd:7f:84:dd:
6b:4d:a4:a9:47:c9:7c:fa:f7:3e:ce:aa:40:e9:19:74:c6:bd:
eb:cc:bb:c1:77:bb:bc:26:3e:45:24:8c:ec:d1:40:44:22:4e:
33:2b:1c:d0:02:59:91:9a:43:b5:af:76:c1:55:00:a6:ab:ad:
64:a5:41:8f:d3:ca:bf:24:6b:76:ba:3d:3d:34:2c:24:4f:75:
2c:dc:10:4d:d6:d7:4b:7a:65:b8:f4:4a:14:a9:3a:66:94:cc:
0e:0d:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:32:39 2025 by rpki-client