Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/FCpJthrUdi78kwsbjnvmSeWPH68.roa
File: FCpJthrUdi78kwsbjnvmSeWPH68.roa (raw, json)
Hash identifier: RnhfDetX6Kie5PV96cMxUBtQPboqAvBdtd2gSPSaUYc=
Subject key identifier: 14:2A:49:B6:1A:D4:76:2E:FC:93:0B:1B:8E:7B:E6:49:E5:8F:1F:AF
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01990AE1393FADE162DCBBCC8823CC739FEC
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/FCpJthrUdi78kwsbjnvmSeWPH68.roa
Signing time: Tue 02 Sep 2025 14:42:36 +0000
ROA not before: Tue 02 Sep 2025 14:42:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.246.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:e1:39:3f:ad:e1:62:dc:bb:cc:88:23:cc:73:9f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 2 14:42:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=142a49b61ad4762efc930b1b8e7be649e58f1faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:2a:e8:a0:a9:0c:0e:de:42:41:cc:75:c1:
9a:82:bb:1a:22:20:93:46:ab:9d:81:66:18:0b:8a:
bb:a5:11:85:ac:33:86:71:96:c9:5f:3a:6e:6f:db:
bc:b7:5c:b3:61:87:df:c8:73:63:56:73:e2:e7:b9:
15:3b:48:3e:57:9e:0e:8e:c8:73:e4:57:ce:57:9c:
fb:ee:23:af:ea:b2:d8:35:9c:38:32:82:c8:71:b1:
19:67:b6:db:08:a2:3f:1f:57:2b:67:dc:1b:a1:85:
6b:54:10:33:3a:2c:4d:fa:d4:68:31:e7:51:d5:e5:
44:95:71:6b:15:eb:12:ab:96:22:56:df:63:9e:b1:
e9:26:48:18:a0:27:0d:9b:c3:5a:a2:90:7d:6b:a9:
7d:86:f1:c1:42:72:fb:40:66:6e:45:07:91:45:ef:
e8:11:d5:06:d3:bb:fd:b3:63:31:0b:71:d6:0d:c2:
1a:a5:8f:a5:4c:93:7f:39:bd:cb:87:79:c4:74:bd:
6b:d6:8e:02:4a:cb:50:fb:89:bc:8a:1e:8b:92:4f:
95:eb:82:88:cd:d4:85:69:4e:bf:7d:18:2c:bc:9d:
c1:f7:11:80:1c:04:1a:c7:ab:1d:9d:f8:4f:54:3e:
d1:e3:8d:c0:19:a9:1c:48:a3:f2:58:0e:f1:b5:85:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2A:49:B6:1A:D4:76:2E:FC:93:0B:1B:8E:7B:E6:49:E5:8F:1F:AF
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/FCpJthrUdi78kwsbjnvmSeWPH68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1a:f9:3b:e2:72:3c:cf:7d:6a:c6:f4:08:8e:32:6a:3f:3a:
80:8c:ee:e0:3d:8e:15:6e:93:e8:f6:1c:a7:bc:99:45:4a:45:
f0:74:07:e3:ee:11:18:ae:50:46:36:4f:f7:dc:30:c8:50:d1:
eb:3d:59:ca:a9:0b:bf:ee:f0:c9:bd:46:94:7a:92:fd:7f:c5:
a8:af:e9:79:3c:fe:c9:71:89:f9:79:a4:67:ea:bb:7e:37:bb:
e2:27:f6:f3:f5:d8:97:fd:83:8d:cc:bd:a8:7c:e3:8f:97:a6:
dd:e9:6c:bf:2e:fa:56:9c:c1:78:2f:fe:57:12:26:e4:1b:04:
61:37:28:7a:54:83:5b:d9:68:5b:6e:a8:76:44:a5:72:e2:1a:
71:db:7c:c0:a6:ec:67:28:68:ca:b4:c2:58:a9:ee:10:29:b8:
13:1e:f4:06:b7:bf:82:46:73:31:c1:f7:50:a3:d6:08:84:45:
43:dd:1f:8a:6c:c4:a6:4c:24:22:7a:a0:ae:89:86:dc:a6:28:
41:28:37:b1:3a:fe:18:d0:64:8b:e0:eb:6a:c5:ee:de:de:50:
e6:87:1f:b9:31:44:fc:d1:a4:05:31:00:3c:f3:de:bb:7d:88:
3b:38:35:c2:db:1a:5a:a7:d1:c1:86:68:4e:f9:7c:86:a6:c0:
62:51:e4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:28:16 2025 by rpki-client