Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FmOi2ZrDzQ5piJCA1t_Q8EcATfU.roa
File: FmOi2ZrDzQ5piJCA1t_Q8EcATfU.roa (raw, json)
Hash identifier: m5nEdE4O3Y+ADuAsxDuIgV0AB4oBbvYhAtxt5hhUqCE=
Subject key identifier: 16:63:A2:D9:9A:C3:CD:0E:69:88:90:80:D6:DF:D0:F0:47:00:4D:F5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A61F5A150EEE83678AC2731F84E19B243
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FmOi2ZrDzQ5piJCA1t_Q8EcATfU.roa
Signing time: Sat 08 Nov 2025 05:34:38 +0000
ROA not before: Sat 08 Nov 2025 05:34:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209699
IP address blocks: 151.243.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:61:f5:a1:50:ee:e8:36:78:ac:27:31:f8:4e:19:b2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 8 05:34:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1663a2d99ac3cd0e69889080d6dfd0f047004df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:fb:f1:43:50:a2:11:4f:50:9e:75:fd:3f:
a0:b0:46:d8:d4:59:f6:66:eb:99:85:6e:56:0f:95:
c4:64:fe:28:36:97:65:a1:65:ee:08:26:0a:e2:ed:
7a:16:f7:7a:85:8a:67:9d:08:ba:76:23:be:54:54:
e5:e4:f7:39:d6:44:34:26:b4:5b:03:60:b7:6e:cd:
e2:26:ec:b1:b0:e5:30:5c:b8:c6:65:2a:9d:4a:0e:
ba:4f:01:6d:dc:cb:36:ce:33:03:11:ec:f9:2c:a2:
12:d2:00:a4:ec:15:e8:28:f6:d2:e0:ec:10:04:8f:
f1:4c:24:a0:be:94:56:cf:f4:b8:aa:78:1c:05:9b:
ba:73:22:11:cc:fa:d1:6f:2c:51:ef:bb:f3:f3:1f:
cc:f7:3a:16:4b:13:03:cb:32:0f:46:d5:76:f8:52:
d5:8c:35:cb:d9:9d:c7:72:0b:fa:19:cb:81:e3:29:
b8:74:a2:3d:e3:d7:c9:08:91:2d:50:ac:98:95:2f:
7f:01:cf:45:f3:17:7d:9b:80:77:4e:cb:7e:57:1d:
7f:28:63:2d:5a:fc:57:b8:4c:f9:0f:a0:8a:3e:dc:
9b:89:c2:79:71:b3:6c:4e:0b:c1:18:b0:57:25:7a:
0f:56:c0:3a:e8:d1:74:88:2d:a0:2f:3c:e4:fa:5e:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:63:A2:D9:9A:C3:CD:0E:69:88:90:80:D6:DF:D0:F0:47:00:4D:F5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FmOi2ZrDzQ5piJCA1t_Q8EcATfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.58.0/23
Signature Algorithm: sha256WithRSAEncryption
70:ec:6c:e2:ad:32:f3:c0:36:fd:09:44:22:3c:9a:34:d8:be:
3d:b9:b2:fc:e7:9e:79:63:bf:b2:83:d9:1e:3b:57:02:9d:7d:
a0:90:9d:18:bc:9c:30:4b:03:d9:ee:ad:7d:e6:43:e6:a8:78:
8c:94:35:49:54:bc:df:fe:da:03:d5:09:70:1a:e0:64:25:fc:
45:f1:62:4f:c0:1f:9a:51:58:2c:d3:a8:fb:c4:20:5f:25:cb:
2d:1c:ea:c3:ee:0e:63:b2:b5:d7:6d:ae:5e:9b:11:83:da:b0:
5f:9b:e8:71:c7:59:8c:b6:cd:5b:7f:8e:4a:34:5c:74:f9:34:
f4:72:46:78:2a:ff:73:21:b1:a5:83:18:21:bc:98:a8:0a:ce:
0d:33:fa:74:77:62:f4:90:8a:5e:42:ed:66:d9:5a:8c:41:fe:
af:87:9d:ae:ec:23:c6:3d:10:12:09:4c:71:76:ba:97:74:86:
ed:ed:dd:03:fd:7a:cb:9d:35:09:72:1b:e2:47:10:c6:a9:61:
8e:47:c2:73:f7:95:08:de:de:51:01:bb:91:bf:eb:a6:d3:cf:
e4:c9:47:57:81:59:57:d3:ca:e3:30:ef:03:99:f2:10:c2:94:
9e:f4:4f:49:e0:6f:ba:f3:e1:80:f2:80:11:74:7d:1b:a1:6e:
b3:ab:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 23:03:23 2025 by rpki-client