Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fiCGtzKKE-k-7cha3uNWaHMAwQE.roa
File: fiCGtzKKE-k-7cha3uNWaHMAwQE.roa (raw, json)
Hash identifier: DG4Oq1uFkwkg9DHh3q1fJzBn5icOEgMS7FPAHL+4K8o=
Subject key identifier: 7E:20:86:B7:32:8A:13:E9:3E:ED:C8:5A:DE:E3:56:68:73:00:C1:01
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0199C260F65BB520986CEC439BBAF21529FE
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fiCGtzKKE-k-7cha3uNWaHMAwQE.roa
Signing time: Wed 08 Oct 2025 05:52:38 +0000
ROA not before: Wed 08 Oct 2025 05:52:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 45.81.16.0/23 maxlen: 24
45.81.16.0/24 maxlen: 24
45.81.17.0/24 maxlen: 24
45.81.18.0/24 maxlen: 24
45.81.19.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 20:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:60:f6:5b:b5:20:98:6c:ec:43:9b:ba:f2:15:29:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 8 05:52:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e2086b7328a13e93eedc85adee356687300c101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:20:8c:f2:82:e3:3e:3f:77:d0:72:6c:3a:
a8:22:1f:76:a0:ba:42:d5:56:2a:a4:5a:e9:ef:56:
a7:f0:48:8a:3c:ec:23:14:f4:68:60:49:a9:05:eb:
17:e1:07:61:ba:17:b1:39:89:f7:ab:fd:f7:fb:b8:
89:80:07:19:9c:bc:d9:b7:17:b4:63:6d:51:d3:fa:
0c:50:5c:50:f3:0d:15:bc:df:10:ea:41:4a:2f:cd:
db:22:97:07:90:96:d9:11:35:03:8d:e5:2d:fd:f6:
92:cf:cb:ca:18:73:d3:f1:fe:fe:0c:b8:a0:eb:6d:
b7:0e:b1:f4:54:dd:1d:eb:57:95:09:bf:1a:25:4b:
f1:06:fe:aa:2d:9a:33:11:ee:ef:18:ba:44:1d:14:
6b:b8:6c:43:a9:c5:0e:7d:13:c0:da:8f:df:5f:68:
ea:7e:02:89:99:79:43:ae:28:59:27:fa:2a:29:7b:
bc:80:db:d8:77:64:71:de:f1:fe:a2:c4:cf:b9:91:
8c:b5:a8:f2:f9:6e:f6:b3:15:66:2e:e2:f1:db:6e:
bd:4c:ab:c0:b2:54:59:c1:47:59:ba:49:4a:84:72:
0e:ae:a5:c9:e9:0e:b6:88:ce:70:f9:8e:9c:81:87:
4c:9f:52:28:65:ee:ea:bb:b0:67:44:a6:e3:71:17:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:20:86:B7:32:8A:13:E9:3E:ED:C8:5A:DE:E3:56:68:73:00:C1:01
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fiCGtzKKE-k-7cha3uNWaHMAwQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.16.0/22
185.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
af:64:cd:ef:8c:0e:b3:82:5a:95:36:a0:74:c7:2c:9a:a0:80:
56:94:09:0f:c2:14:a1:b4:c3:24:aa:44:85:68:14:45:63:c5:
f2:36:69:af:51:c6:53:0b:14:8e:9e:90:e2:e7:1b:b2:d4:16:
db:1a:04:f2:d4:c4:62:38:3d:4d:b7:25:cb:12:96:88:dd:d5:
87:1f:9e:83:eb:a9:cf:0a:b4:e2:b5:d8:34:df:a6:76:36:df:
6c:46:49:1a:4b:7e:92:86:6a:7b:b4:bd:02:a7:df:6c:27:cd:
2a:18:2b:79:9d:87:83:46:6c:c7:37:8b:04:58:7b:2e:8b:93:
17:58:f1:2a:38:53:10:60:cf:80:6e:78:b8:0a:9e:39:4e:ac:
ee:ca:2e:f9:49:3b:5b:d8:9a:31:7b:35:d2:fd:36:22:50:ea:
d1:69:06:4c:56:55:d3:21:0d:6e:3b:7b:94:47:d3:f9:75:91:
ca:f0:98:3a:45:fd:3e:0d:42:8f:23:5b:67:9e:6d:af:2c:19:
b4:70:79:8f:81:20:46:0f:83:e5:f5:4f:68:75:f3:2b:d5:b5:
f8:9d:43:a7:f9:fd:3e:2a:26:b7:7e:ef:87:fa:74:e8:61:8e:
c4:0e:7a:c3:89:ea:71:dd:c2:6b:0f:8f:3d:eb:e9:23:2d:66:
bc:c6:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:24:01 2025 by rpki-client