Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/FGH5MAwo2-kG0-fJhqBT4gIeWJM.roa
File: FGH5MAwo2-kG0-fJhqBT4gIeWJM.roa (raw, json)
Hash identifier: 1FaU+6R3v9t9VIFKSp/Yr2MFIF4LwvmQGlBqd0+XyY8=
Subject key identifier: 14:61:F9:30:0C:28:DB:E9:06:D3:E7:C9:86:A0:53:E2:02:1E:58:93
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 019A2D1418F0BA00745C62462FAE12AA2DDE
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/FGH5MAwo2-kG0-fJhqBT4gIeWJM.roa
Signing time: Tue 28 Oct 2025 23:08:03 +0000
ROA not before: Tue 28 Oct 2025 23:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216472
IP address blocks: 109.224.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 23:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:14:18:f0:ba:00:74:5c:62:46:2f:ae:12:aa:2d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Oct 28 23:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1461f9300c28dbe906d3e7c986a053e2021e5893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:3e:09:15:2f:1c:9c:6f:26:e5:66:27:a9:
c7:a1:b3:ac:2b:52:3f:12:10:04:99:90:47:1c:d7:
1e:db:f4:c6:d6:44:e3:4c:17:4b:da:0c:e3:49:6e:
21:17:cc:f9:f3:b5:d0:2c:b6:79:fd:4c:48:4b:1b:
b3:70:48:fe:b9:5f:84:74:13:e1:36:be:0b:e9:72:
de:df:1c:b2:0c:ef:af:70:bc:c9:0f:20:7b:ac:00:
19:8c:0a:65:93:dd:af:4c:48:31:1f:7f:50:2d:f9:
3d:3f:1f:95:db:a6:ec:a3:52:fb:99:ca:f0:90:70:
2b:31:81:14:75:c1:25:c6:93:2c:97:84:5b:5c:14:
a3:0e:10:bc:a1:c7:1b:21:66:3a:92:bf:c8:ad:e0:
ff:a2:75:ea:fa:66:2e:7f:7f:e0:cd:39:04:ef:bb:
70:4d:4a:07:83:85:f1:8b:89:b4:d3:e8:34:70:f6:
86:f9:90:8f:a4:43:cc:35:f7:0e:c6:5d:83:55:2d:
a1:d6:7a:ae:87:27:3f:4a:6a:cb:69:94:0c:4b:57:
17:8a:ff:04:7f:0e:8f:9c:f4:19:85:a1:d5:6c:02:
04:09:b2:7a:89:24:14:33:09:78:e0:78:c9:76:a4:
d8:1f:15:0f:bb:23:5d:c6:61:dc:3e:02:70:f5:8d:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:61:F9:30:0C:28:DB:E9:06:D3:E7:C9:86:A0:53:E2:02:1E:58:93
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/FGH5MAwo2-kG0-fJhqBT4gIeWJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.242.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e3:fd:1a:36:5e:3a:b9:62:3b:37:07:92:21:3f:17:f2:25:
6e:0f:f0:f2:1a:f6:4b:c9:5e:91:d7:32:48:ac:2f:0c:0f:9b:
40:23:9f:d9:d7:aa:38:33:58:ce:41:fe:6b:27:11:23:26:a1:
c7:ed:a4:38:db:c9:ed:59:93:1d:0b:f0:69:92:9f:06:a1:d1:
02:6e:54:e6:4a:98:fd:ea:78:e2:18:bc:1f:14:58:50:35:d2:
3e:e4:12:4a:49:2d:75:6e:bb:a2:ca:9c:3c:6b:41:72:c6:e3:
4b:95:9c:1b:cc:28:24:be:c9:5f:63:cc:77:c4:9d:01:0f:5f:
79:ad:c8:3e:8d:7b:a5:d1:46:4a:91:47:74:98:5a:51:07:ce:
91:61:5d:12:18:21:95:ae:8b:06:5f:2c:34:97:0b:be:08:d3:
93:28:05:0e:08:c7:3c:ca:fe:5a:23:15:4a:03:49:d5:eb:57:
a4:31:a7:29:ec:49:a8:7c:16:ed:c9:bf:4d:2d:a5:9d:75:5b:
7d:1a:28:d4:08:2b:e6:68:91:cf:d6:cc:0a:ee:d5:89:9a:0c:
9c:96:05:26:80:78:ea:46:2f:42:04:84:dc:65:9e:10:46:cf:
f4:19:bf:91:bc:dd:78:e4:c2:b5:16:80:dc:4b:2a:3c:dd:26:
4b:64:26:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:20:22 2025 by rpki-client