Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/fxDc8gX7q8X8Hh-lBGPrs5eXxec.roa
File: fxDc8gX7q8X8Hh-lBGPrs5eXxec.roa (raw, json)
Hash identifier: wkWxE134SNM0nnIfcHARo9e5nRHIl1fG/1y5aKiTFBE=
Subject key identifier: 7F:10:DC:F2:05:FB:AB:C5:FC:1E:1F:A5:04:63:EB:B3:97:97:C5:E7
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01991203840DFBE230FAB2069A73A3F684A2
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/fxDc8gX7q8X8Hh-lBGPrs5eXxec.roa
Signing time: Wed 03 Sep 2025 23:57:24 +0000
ROA not before: Wed 03 Sep 2025 23:57:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.208.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:12:03:84:0d:fb:e2:30:fa:b2:06:9a:73:a3:f6:84:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Sep 3 23:57:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f10dcf205fbabc5fc1e1fa50463ebb39797c5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:a7:3c:5c:af:67:bc:50:d6:21:d0:09:6d:
be:2d:a4:49:90:48:86:49:96:a0:b2:07:88:68:c8:
c5:ac:b1:0a:9b:42:90:0b:22:02:22:d2:02:98:c2:
6f:07:48:19:1c:80:46:f3:de:08:60:18:2b:23:f1:
a0:7a:ce:a4:5a:f8:82:cb:5d:81:54:d7:0e:ca:72:
01:c1:50:4c:9c:29:d8:b4:e6:3a:a8:12:62:b3:eb:
2f:d3:55:dd:ef:77:f0:5e:3a:48:6c:81:91:a8:99:
45:24:d9:85:5b:70:f4:88:40:45:b5:26:d2:61:0d:
02:72:36:93:58:da:92:01:5d:2e:7a:e3:fe:cc:df:
62:53:73:46:7f:8a:3a:db:46:a7:82:7d:31:02:16:
d0:5b:ec:26:d9:fa:9a:24:46:16:af:f4:66:ce:ef:
02:ff:e4:85:66:68:0c:2e:fe:ee:2c:b1:d3:72:24:
48:7c:e6:48:68:5e:fe:73:26:dd:b0:ba:5d:89:54:
ea:12:78:d0:5a:f8:30:29:e8:99:86:74:67:17:88:
95:a5:a8:50:ad:cb:b5:4c:72:27:31:7f:01:76:c3:
7c:cb:84:56:a5:20:db:94:8c:8f:54:b4:d7:df:8a:
27:e5:ca:38:6b:c3:08:b0:c3:68:84:89:32:17:c0:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:10:DC:F2:05:FB:AB:C5:FC:1E:1F:A5:04:63:EB:B3:97:97:C5:E7
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/fxDc8gX7q8X8Hh-lBGPrs5eXxec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.153.0/24
Signature Algorithm: sha256WithRSAEncryption
40:da:b8:e6:f4:cf:29:ef:18:1f:4f:41:0b:d3:3a:cb:b2:05:
60:ba:b1:ac:4b:0c:5a:df:93:37:ec:ec:8e:ff:8c:ba:72:16:
82:c5:c3:b8:1a:38:0c:da:13:62:d7:f8:eb:e2:6a:25:0e:db:
17:e5:ef:8a:d2:28:ff:08:d9:ba:c0:92:a9:1f:9a:1a:b6:7c:
f2:96:bc:1b:e5:93:85:68:6f:eb:17:9c:bd:5c:0e:7c:40:a6:
44:a4:8c:46:00:2f:80:08:e4:82:59:03:0b:b7:cb:cf:12:35:
8f:57:f8:93:e4:c6:6e:bd:7a:bc:7b:92:71:86:99:c7:e5:f6:
09:90:a2:64:8f:c2:68:82:8f:a7:96:a5:e1:1e:1b:ce:4f:45:
49:62:c6:32:9f:0c:f1:e8:4e:b2:88:ed:5f:76:3c:4d:3a:d1:
e6:32:31:8d:aa:72:0b:e9:63:6b:6d:84:d4:a9:3d:07:d4:94:
95:84:30:38:16:81:f6:fc:37:53:e0:bf:56:60:6b:df:db:d5:
fe:a6:ff:f5:6a:4d:91:a5:5c:60:97:19:5c:e5:35:5a:aa:7a:
9c:a9:5f:ee:11:c1:be:3f:29:3f:af:70:a8:b6:a9:64:88:d2:
3d:d8:94:8a:63:a6:64:02:67:69:37:47:65:01:3f:7b:d8:44:
b3:4f:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 04:48:21 2025 by rpki-client