Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/73mAifFbbkq89y_6L8I3tNV-FFU.roa
File: 73mAifFbbkq89y_6L8I3tNV-FFU.roa (raw, json)
Hash identifier: NX+SZCE/iRZZ/qn+fphnC6ahtdeAZSBcTHMFH46HmuE=
Subject key identifier: EF:79:80:89:F1:5B:6E:4A:BC:F7:2F:FA:2F:C2:37:B4:D5:7E:14:55
Certificate issuer: /CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Certificate serial: 0199197683569D7E57576AB8D4FB2EA909A0
Authority key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/73mAifFbbkq89y_6L8I3tNV-FFU.roa
Signing time: Fri 05 Sep 2025 10:40:21 +0000
ROA not before: Fri 05 Sep 2025 10:40:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 167.94.246.0/24 maxlen: 24
194.110.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:76:83:56:9d:7e:57:57:6a:b8:d4:fb:2e:a9:09:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Validity
Not Before: Sep 5 10:40:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef798089f15b6e4abcf72ffa2fc237b4d57e1455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:e3:c4:0a:fd:98:b4:8f:46:01:56:79:20:
3e:90:ed:a4:7f:ce:6e:0e:64:14:bf:db:e6:ac:f9:
ce:a4:8a:7f:42:a8:46:b9:a5:7a:b1:5e:01:dd:42:
46:3e:c9:84:59:65:b0:54:79:f2:23:a7:99:c3:ab:
ca:ae:40:7c:b5:41:3f:de:9e:f6:07:25:b7:25:b0:
a6:b4:cd:23:b9:d7:27:30:86:83:79:b1:ec:85:4f:
71:ff:f2:bd:35:ca:45:8f:2a:91:6e:2e:a8:6f:56:
3c:05:15:e5:18:45:36:f5:33:19:45:d7:11:eb:22:
c2:bc:1d:2b:56:73:a9:b8:b1:dd:60:63:51:f1:d7:
ea:0a:88:96:c2:d5:f7:22:63:d5:a1:cc:ac:e2:cc:
42:8a:86:dc:89:68:73:43:e6:27:f4:ee:3a:d2:ad:
b4:6c:d3:f7:9c:25:d5:49:ba:6b:b0:16:5e:82:b6:
da:bc:55:22:b0:f6:fa:ee:0d:7a:f1:dc:bb:fd:5b:
9b:bf:7b:6a:8b:61:ae:c2:66:a2:83:6e:f8:87:29:
a8:0d:75:10:2a:54:7e:62:68:92:55:7e:e8:27:26:
a9:63:4b:a5:e8:f4:73:b6:eb:34:0c:f5:fc:dd:f5:
5f:fc:c5:8d:4f:49:ad:75:3d:55:43:ec:17:15:b8:
e3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:80:89:F1:5B:6E:4A:BC:F7:2F:FA:2F:C2:37:B4:D5:7E:14:55
X509v3 Authority Key Identifier:
keyid:E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/73mAifFbbkq89y_6L8I3tNV-FFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.94.246.0/24
194.110.0.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a2:c6:86:64:b9:8f:f1:a7:8c:a6:23:e2:63:2d:f1:46:81:
3a:b1:fb:2f:40:46:e7:ef:0d:19:1d:73:7c:4c:b5:08:37:63:
e2:44:be:70:e5:54:af:cb:04:e2:07:b0:40:a0:0a:15:a9:c4:
12:87:26:59:30:b6:33:54:20:9d:a9:fc:65:3d:4d:ec:3c:5b:
50:b9:25:a6:fb:c2:88:68:06:8f:38:a5:66:62:7d:08:6f:cc:
b9:f4:82:d6:43:92:8e:44:39:3a:07:69:32:af:28:72:a2:e1:
1f:ab:04:e6:a9:db:db:b7:0b:73:82:f0:af:ce:23:ec:f9:eb:
82:81:d8:fd:bc:6b:81:6e:8c:77:af:71:31:8b:2b:42:ed:b5:
73:1a:7b:59:b1:b9:eb:40:26:97:93:70:74:9d:5f:49:8f:dc:
86:b8:54:e4:ab:0c:98:bf:83:3c:70:bd:62:4f:e1:a9:26:7b:
2a:d1:14:5a:cb:2a:d4:61:fa:dc:f5:0e:e2:15:2a:4c:54:c0:
4d:74:7c:93:76:2e:6e:dc:50:79:9e:b0:f3:d7:d8:ac:e0:84:
2b:48:d1:fe:6e:f6:41:a9:32:4d:ea:8a:05:9b:43:91:84:a3:
00:8f:c9:df:fb:94:93:08:f7:6a:74:95:6e:ed:41:f3:fe:39:
83:4b:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:39:05 2025 by rpki-client