Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/FZWglvGe_EXLgfopqbYB40x-HmQ.roa
File: FZWglvGe_EXLgfopqbYB40x-HmQ.roa (raw, json)
Hash identifier: ut7XvnhzAglW/JWhkP7fQs2fwTTxv/3p/HkYM/jFlBY=
Subject key identifier: 15:95:A0:96:F1:9E:FC:45:CB:81:FA:29:A9:B6:01:E3:4C:7E:1E:64
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019A26F94A62967B1CAF1745CD3178A04C29
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/FZWglvGe_EXLgfopqbYB40x-HmQ.roa
Signing time: Mon 27 Oct 2025 18:41:03 +0000
ROA not before: Mon 27 Oct 2025 18:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 195.222.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:f9:4a:62:96:7b:1c:af:17:45:cd:31:78:a0:4c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Oct 27 18:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1595a096f19efc45cb81fa29a9b601e34c7e1e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:f3:d3:6c:f1:8a:6d:d2:b7:88:45:93:7f:
f7:32:68:b2:42:48:03:70:d3:f1:3c:16:52:4c:72:
52:c1:a1:e8:c1:4d:eb:ab:b8:39:d5:64:e1:ac:b7:
93:bf:4e:4a:b7:6c:39:c3:d3:44:35:67:f5:3d:df:
13:c3:23:2d:87:0b:0b:88:01:85:cb:bb:7e:c7:27:
bd:93:08:08:7b:16:2b:89:1b:5c:61:db:4f:82:05:
e2:83:53:e8:8b:12:89:1f:52:9f:76:41:23:6d:dd:
1d:62:27:e3:24:b2:55:09:be:be:1a:2e:70:5b:f7:
da:90:a6:3e:fc:f5:46:33:ad:d8:1c:7a:33:26:3d:
7b:84:9f:86:37:6a:eb:90:5c:ca:5b:4d:29:5f:d9:
31:4a:08:ca:fd:cc:ca:3c:e1:45:3f:e0:93:ca:73:
ad:7e:17:54:f6:d2:c8:a0:88:aa:30:93:d8:c2:7b:
e5:92:a4:a0:8c:53:7c:de:6c:0b:44:14:d1:89:b4:
2c:66:9f:e6:2c:97:e6:a4:73:6f:2d:09:76:6f:aa:
2b:00:f2:81:28:d7:ed:1d:86:dd:9f:67:fe:75:10:
0c:20:f5:2d:a7:3e:22:a6:4d:03:e3:3e:18:16:c9:
a2:66:eb:2a:74:b5:c1:7d:f1:ae:8a:a0:3e:63:21:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:95:A0:96:F1:9E:FC:45:CB:81:FA:29:A9:B6:01:E3:4C:7E:1E:64
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/FZWglvGe_EXLgfopqbYB40x-HmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.222.127.0/24
Signature Algorithm: sha256WithRSAEncryption
23:24:d0:cf:a4:28:f7:f3:10:66:0d:b3:ae:25:23:83:9f:49:
7a:f0:2c:f8:7f:d8:13:d8:7f:9b:86:95:99:1a:90:a6:b7:bd:
37:81:fe:f9:de:bc:1a:86:34:62:26:01:01:ab:1b:ce:3c:e9:
ad:43:98:d6:55:61:ff:18:d4:35:ac:84:a7:25:00:db:93:02:
0e:21:26:9d:cf:9c:48:36:54:09:9f:06:db:31:b7:3e:39:72:
58:4f:a3:f1:49:c3:cc:dc:2c:f7:0f:9b:19:47:69:cb:9f:0b:
d4:e1:f0:ea:79:b5:d0:2d:37:a1:1a:f5:e6:d5:2e:1b:5a:64:
3b:07:6f:5f:91:93:5c:e1:fa:3e:34:76:b2:cc:c0:5d:1e:6d:
e9:db:f2:2f:ba:8a:5a:8a:1e:3f:32:dd:e3:2d:3d:88:07:3a:
80:ef:70:47:4b:05:9f:a1:eb:e0:c2:b0:11:26:94:f7:3f:3c:
d9:ec:9a:23:2c:6e:56:3b:35:32:86:c9:61:f7:04:c5:40:7d:
93:d6:58:1d:19:92:df:01:38:bb:b7:37:30:49:7d:7a:e2:72:
da:32:25:56:4b:c6:56:d7:4a:d5:bc:63:19:7a:d2:7b:7e:ba:
e3:73:00:a3:e3:f1:b2:d5:1e:21:c6:28:f1:46:1e:ae:a5:77:
ad:08:3a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:31:40 2025 by rpki-client