Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/fFmtmgKBQaBlgrSOFcsTezZIQoE.roa
File: fFmtmgKBQaBlgrSOFcsTezZIQoE.roa (raw, json)
Hash identifier: yE6+Hjg8rOpz8XvJzcksmApmABBmT2uvG1pyVMepNuc=
Subject key identifier: 7C:59:AD:9A:02:81:41:A0:65:82:B4:8E:15:CB:13:7B:36:48:42:81
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 0199FE64BD9B0D9A194AC837F133F9A4A438
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/fFmtmgKBQaBlgrSOFcsTezZIQoE.roa
Signing time: Sun 19 Oct 2025 21:33:59 +0000
ROA not before: Sun 19 Oct 2025 21:33:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56755
IP address blocks: 109.175.210.0/24 maxlen: 24
109.205.193.0/24 maxlen: 24
2a01:fb01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 17:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:64:bd:9b:0d:9a:19:4a:c8:37:f1:33:f9:a4:a4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 19 21:33:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c59ad9a028141a06582b48e15cb137b36484281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b5:b2:03:e9:77:0e:84:83:66:18:62:51:98:
62:2a:13:06:a4:e6:ce:dc:7c:e9:13:62:36:31:5f:
35:42:1e:3d:01:bb:16:a4:36:37:1a:59:7f:c0:36:
00:98:1f:f4:6b:2e:d3:f7:dc:f0:5c:64:bc:ce:b6:
36:18:fd:eb:69:96:57:e2:35:88:cf:c0:5e:53:df:
8d:f2:52:3a:5a:36:fb:a2:fd:10:ca:aa:82:39:f6:
35:b2:d3:92:f7:7c:10:72:d6:ff:26:d2:a2:89:f2:
e1:d8:0b:c0:18:ef:cc:0d:bc:e3:5f:f1:a4:b7:14:
56:6c:b3:4f:8b:9a:39:5e:36:b8:38:62:bb:ba:8c:
65:17:2f:3e:ed:84:ea:3c:6f:1a:c1:72:ba:2d:0f:
7a:f1:d3:26:b1:5e:9c:f3:22:52:26:50:1a:54:4b:
5a:8b:50:0c:d8:82:e1:f1:25:96:02:eb:c8:71:7d:
6d:d3:b5:22:bb:df:70:9b:e4:03:95:29:1b:b9:31:
77:d0:bc:65:ba:9c:ac:fb:12:27:33:f9:fa:75:75:
46:8b:21:f0:3f:f4:c2:f6:5d:b6:9b:d1:c5:64:25:
8b:c8:09:0e:91:f9:1c:8b:61:02:55:62:c4:df:93:
19:72:44:0a:fe:e1:2b:e2:8f:6d:a8:20:2d:08:e5:
56:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:59:AD:9A:02:81:41:A0:65:82:B4:8E:15:CB:13:7B:36:48:42:81
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/fFmtmgKBQaBlgrSOFcsTezZIQoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.210.0/24
109.205.193.0/24
IPv6:
2a01:fb01::/32
Signature Algorithm: sha256WithRSAEncryption
7b:5e:77:6f:01:7b:a5:99:34:80:d4:20:cf:d2:97:1f:fd:31:
f0:98:aa:5c:dc:a1:46:4b:75:61:de:48:ef:7a:40:41:b8:87:
8b:b5:a9:ed:6b:27:af:48:75:89:58:eb:4b:03:f1:e7:a9:43:
68:77:ed:d7:bf:27:b4:b9:52:19:64:18:c6:51:69:24:c8:bb:
da:70:1e:8f:69:7c:9e:f6:29:74:92:a9:f6:72:44:a1:9b:23:
f6:d4:8a:81:be:d3:6c:7f:9d:1f:40:b3:64:21:d8:87:f7:3f:
77:b8:9d:af:f7:90:3b:60:ad:05:90:ec:51:15:dc:c2:32:05:
3f:90:68:2d:15:85:28:be:cf:ad:ba:e8:09:1b:c2:00:7a:11:
9c:57:9d:6f:0f:81:0f:bf:7a:9c:e6:50:c9:dd:6c:64:27:ee:
6b:70:ec:14:c6:a1:ed:44:6a:7c:ef:39:5c:dc:e1:65:07:3a:
f3:93:28:1c:9d:5f:f3:46:51:70:93:ad:7f:d8:50:29:bc:29:
0c:78:50:68:14:a8:c1:3b:8a:f7:2a:48:06:eb:99:6a:8b:22:
8a:90:25:db:c9:b9:14:7e:cf:db:e3:12:f8:fe:47:43:c8:c9:
09:d2:f7:2c:36:b8:7e:0d:c5:41:31:82:ba:22:e7:da:75:4e:
88:5a:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:42:12 2025 by rpki-client