Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1FbkjpJO2_mh_BJ9Ta4GPHfXyRE.roa
File: 1FbkjpJO2_mh_BJ9Ta4GPHfXyRE.roa (raw, json)
Hash identifier: QMrP9cfQ8DcUwzKyVwF1Uz1S191Pn+dUZlSEwPXu8BI=
Subject key identifier: D4:56:E4:8E:92:4E:DB:F9:A1:FC:12:7D:4D:AE:06:3C:77:D7:C9:11
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0199FC288AD909DACB975B240D05BC7E1F8F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1FbkjpJO2_mh_BJ9Ta4GPHfXyRE.roa
Signing time: Sun 19 Oct 2025 11:08:59 +0000
ROA not before: Sun 19 Oct 2025 11:08:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 45.90.16.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:28:8a:d9:09:da:cb:97:5b:24:0d:05:bc:7e:1f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 19 11:08:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d456e48e924edbf9a1fc127d4dae063c77d7c911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d1:01:5c:84:c3:d2:f4:81:22:e3:7a:03:a1:
60:52:52:4f:83:a7:60:87:de:40:e8:77:69:07:c5:
bd:66:c4:0d:30:fd:67:d9:d3:9d:8b:a1:5e:44:4e:
f0:72:1a:a1:4f:a3:66:33:47:1d:0f:68:83:b8:5e:
48:8b:81:88:5d:fe:82:11:c2:f1:30:d3:5d:cc:eb:
08:59:1a:23:8d:07:e7:2d:13:b7:c9:52:5d:d9:74:
58:67:9e:9c:92:b9:b1:d7:2b:29:e4:e2:5d:03:ed:
96:56:90:f3:65:a4:57:67:ba:46:24:78:92:72:a8:
2e:92:5d:30:ad:ec:f2:6c:b8:61:e7:66:3e:30:d6:
48:1d:68:0e:9e:3c:5c:d7:91:85:57:30:78:8e:bd:
7c:83:c8:10:fb:5d:a1:b1:6d:55:4d:d6:83:37:35:
02:e8:20:36:a7:a1:04:12:52:1e:3b:ee:64:b6:8a:
de:a5:a2:a4:8f:b5:ec:ed:6d:16:eb:b8:8c:51:b4:
f2:21:a9:ab:25:e1:ff:ff:ac:ee:7a:db:4d:4c:25:
28:5e:8e:95:a8:a9:10:a8:98:dd:98:a4:a8:2f:2c:
ec:02:2b:af:c2:53:2d:c4:fa:17:99:c6:94:b3:13:
a2:4e:8c:8d:a2:4b:5c:93:02:1b:9a:92:69:91:9b:
9b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:56:E4:8E:92:4E:DB:F9:A1:FC:12:7D:4D:AE:06:3C:77:D7:C9:11
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1FbkjpJO2_mh_BJ9Ta4GPHfXyRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
185.199.158.0/24
185.210.235.0/24
185.214.108.0/24
185.218.20.0/24
185.234.22.0/24
185.246.112.0/24
194.5.64.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:8f:c4:72:b1:b4:3f:14:b9:86:a8:8f:71:c3:bd:ad:77:e6:
35:8e:2c:c3:19:14:0f:b9:68:96:fd:bc:75:08:ce:4d:45:53:
31:ca:a4:2b:22:b2:36:9b:59:66:dd:a5:a7:c5:c7:7b:e9:71:
bb:de:6a:20:19:00:ae:14:45:0b:13:dc:83:80:aa:5c:fd:2c:
2f:38:a3:a1:7a:1f:7d:78:1b:ad:29:0c:b0:b1:7f:5a:17:a9:
a1:d6:a7:b8:9c:87:bc:99:4d:a5:e0:4c:57:a3:ee:ab:b8:ca:
bf:f9:c0:b1:2f:c4:0d:08:ee:cd:ee:5a:04:97:ea:30:e9:11:
8e:9a:73:8b:9d:d9:3c:28:59:20:0c:c8:49:4b:7b:2b:5b:11:
3d:00:cd:26:a4:a3:ff:d3:12:7f:2e:8f:de:dc:87:de:15:86:
9e:a1:9d:ef:f7:3d:41:e7:49:31:72:16:54:56:99:b5:6d:30:
dd:3c:89:09:54:47:1d:7c:16:76:74:90:ad:3a:4e:a0:93:75:
65:8d:e1:89:93:fd:8b:f2:cd:d1:61:5e:9d:13:fa:11:76:45:
4a:7f:d7:51:dc:71:79:50:7d:29:87:2c:8f:10:64:4d:18:54:
4b:8e:e4:af:d9:b7:8a:40:b7:2b:d0:1b:8c:41:2c:50:c1:da:
e6:b7:ba:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:04 2025 by rpki-client