Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/FIfoAXaxpYLmDe5rWtbqnwoZyG4.roa
File: FIfoAXaxpYLmDe5rWtbqnwoZyG4.roa (raw, json)
Hash identifier: McAx354GUPfDHZvpRDVZ7JLef+rbJmvzLHPw8ZCGP3g=
Subject key identifier: 14:87:E8:01:76:B1:A5:82:E6:0D:EE:6B:5A:D6:EA:9F:0A:19:C8:6E
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019A260798267E7C070F3F3956CE0E1993E9
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/FIfoAXaxpYLmDe5rWtbqnwoZyG4.roa
Signing time: Mon 27 Oct 2025 14:17:03 +0000
ROA not before: Mon 27 Oct 2025 14:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3265
IP address blocks: 62.216.0.0/19 maxlen: 19
80.100.0.0/15 maxlen: 15
82.92.0.0/14 maxlen: 14
82.161.0.0/16 maxlen: 16
83.68.0.0/20 maxlen: 20
83.68.16.0/21 maxlen: 21
83.68.24.0/22 maxlen: 22
83.68.28.0/24 maxlen: 24
83.68.29.0/24 maxlen: 24
83.68.31.0/24 maxlen: 24
194.109.0.0/16 maxlen: 16
195.64.80.0/20 maxlen: 20
213.222.0.0/19 maxlen: 19
2001:888::/29 maxlen: 29
2001:888::/30 maxlen: 30
2001:888::/32 maxlen: 32
2001:980::/29 maxlen: 29
2001:980::/30 maxlen: 30
2001:980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:07:98:26:7e:7c:07:0f:3f:39:56:ce:0e:19:93:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Oct 27 14:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1487e80176b1a582e60dee6b5ad6ea9f0a19c86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:d3:ec:f7:d7:45:f1:f5:3d:97:2d:99:ad:
47:fd:5a:a2:68:40:b3:f9:f8:2c:b9:21:88:11:4a:
42:9c:90:78:7c:4b:2d:60:54:72:e8:b7:c4:61:3a:
4e:30:81:b7:36:e3:d8:ea:fd:02:4e:00:28:3d:0c:
86:94:10:58:2d:b6:04:e6:ed:93:47:ce:06:28:a9:
9a:42:fb:e1:13:99:bf:71:d2:19:b5:d9:e2:76:a8:
6a:05:d0:c2:e5:78:26:d4:fd:0f:bf:f6:4c:3e:a3:
cc:4f:4a:b4:fb:e0:c2:ec:0f:e5:93:72:7a:97:61:
d5:33:80:e1:7f:9c:42:96:d0:69:af:6e:93:f5:00:
ad:67:2b:5e:cf:f7:cb:cc:c1:98:7b:c0:ba:3e:83:
38:10:06:c4:54:82:1d:06:d6:f4:3e:a0:78:20:8a:
05:ee:51:44:4d:66:f8:5d:4a:c7:a3:74:56:d0:62:
d9:ac:12:05:ec:54:7d:13:3d:5b:fd:6e:78:98:0c:
1b:89:a5:6a:83:90:85:89:64:cf:01:22:26:1e:71:
c7:97:39:57:61:f7:bd:56:de:cd:19:ef:37:5d:dc:
a8:28:ec:d3:00:2f:14:b8:dc:ec:f3:30:11:af:1e:
e1:4e:25:29:d0:91:23:71:be:fc:52:c8:11:78:b5:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:87:E8:01:76:B1:A5:82:E6:0D:EE:6B:5A:D6:EA:9F:0A:19:C8:6E
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/FIfoAXaxpYLmDe5rWtbqnwoZyG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.216.0.0/19
80.100.0.0/15
82.92.0.0/14
82.161.0.0/16
83.68.0.0-83.68.29.255
83.68.31.0/24
194.109.0.0/16
195.64.80.0/20
213.222.0.0/19
IPv6:
2001:888::/29
2001:980::/29
Signature Algorithm: sha256WithRSAEncryption
13:19:a4:a8:51:f0:3a:37:b2:0c:c3:f7:12:fb:5b:7a:0e:da:
85:8a:16:72:72:75:2f:57:e4:3c:e0:55:a2:11:ed:24:8f:b9:
0e:74:ef:9c:87:d3:06:44:75:b4:d6:f0:0c:f1:14:62:06:2f:
45:a4:b1:23:75:6d:d9:65:78:14:1b:9e:c4:ad:f2:6a:db:a0:
f5:93:f6:e7:22:bf:4a:52:04:f1:e4:01:1d:e6:13:b7:08:3d:
b9:3a:b2:7a:6d:1e:cf:e6:de:cd:7e:5f:b4:3f:2f:44:b5:93:
d2:aa:93:ac:44:2d:85:38:5f:67:1c:a0:55:da:fc:d6:fa:49:
85:e1:15:f2:48:00:04:fe:1d:28:60:d8:eb:fd:e8:04:ea:77:
c2:c6:cd:cb:58:73:3d:01:56:6d:10:53:21:e0:c3:2d:cd:6e:
10:2e:98:16:de:0e:a7:22:a5:c9:8e:27:e0:96:2b:9e:a3:78:
ed:b9:23:8f:5d:f4:a5:92:16:fe:95:af:6c:93:18:ee:d1:2b:
68:5b:87:3d:c6:28:7c:06:7e:b9:1a:b9:79:fe:b6:bd:33:ad:
63:67:8d:9c:86:51:57:e7:0c:59:5b:9f:1b:32:e8:91:5c:a2:
97:cd:6b:88:7a:bb:c6:75:55:7f:f0:5e:56:1a:87:f1:90:52:
92:8f:f8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:39:57 2025 by rpki-client