Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/FLn7CAF79mOmugGj8k0FVo_sRII.roa
File: FLn7CAF79mOmugGj8k0FVo_sRII.roa (raw, json)
Hash identifier: Lrep2bOXpLxm46oWuoQl42fldxhpT0C+CT9tHP1R1Bw=
Subject key identifier: 14:B9:FB:08:01:7B:F6:63:A6:BA:01:A3:F2:4D:05:56:8F:EC:44:82
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0198EB34D3D66DE3AE1981DC6DD345E61A22
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/FLn7CAF79mOmugGj8k0FVo_sRII.roa
Signing time: Wed 27 Aug 2025 11:06:04 +0000
ROA not before: Wed 27 Aug 2025 11:06:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200515
IP address blocks: 194.31.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:34:d3:d6:6d:e3:ae:19:81:dc:6d:d3:45:e6:1a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Aug 27 11:06:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14b9fb08017bf663a6ba01a3f24d05568fec4482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e4:dc:54:7e:b5:fb:3a:b0:30:56:5e:55:2f:
4b:13:83:93:09:e6:fb:e7:eb:e8:8d:e4:45:19:12:
c5:4a:4a:d9:7f:72:b7:ed:32:60:7f:8e:b8:25:96:
ff:79:be:b6:87:66:25:c3:89:f0:4d:01:f1:f4:f0:
b4:b8:4d:fc:7e:30:07:3b:97:93:12:a9:74:38:43:
78:9a:c1:96:e0:0a:fa:ab:da:c3:8e:2c:e0:e4:4e:
7b:69:03:d1:61:2b:06:83:01:01:91:bc:07:89:36:
ec:56:08:73:ee:86:1a:46:c0:66:48:ef:e5:c1:11:
23:89:37:54:fd:e9:b3:3f:7e:f1:b9:42:14:67:9c:
5c:4c:23:5e:b9:29:bb:25:56:f6:ae:89:25:cb:ae:
ec:f1:97:96:b2:6d:83:e2:5d:44:e6:9d:15:d6:52:
55:25:93:ad:99:b0:c0:c9:08:9b:e9:20:1b:57:b8:
ca:24:4a:7b:ea:4a:bc:7c:d3:0e:f5:05:28:09:89:
41:1c:20:4b:27:e1:2a:98:fe:f4:a2:f5:ec:11:2b:
9c:fb:7d:91:54:13:3f:3d:72:69:5c:e3:fa:a8:84:
b5:3f:9a:79:f0:3c:d3:18:b9:53:f7:5b:97:28:04:
42:43:cf:0a:9d:d6:93:0a:b0:86:8c:aa:65:02:9c:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B9:FB:08:01:7B:F6:63:A6:BA:01:A3:F2:4D:05:56:8F:EC:44:82
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/FLn7CAF79mOmugGj8k0FVo_sRII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:8d:4f:2b:4c:bf:ff:ea:d1:0a:ba:78:ee:78:80:c4:a0:66:
53:ea:02:8b:04:03:6d:e3:fe:3e:29:24:cb:32:8d:2d:22:e1:
03:f0:3d:7a:dc:1c:d3:4c:14:c7:29:23:67:ff:6e:7a:af:12:
f5:ab:6c:a5:12:ef:d2:58:5e:02:ef:4a:83:65:c0:77:10:ad:
13:01:e6:6a:e1:cb:40:08:62:df:40:ba:5f:55:ff:94:de:c9:
3c:3c:92:09:76:5f:60:da:19:28:5f:e9:27:22:67:24:e5:72:
88:9d:2f:6a:86:e2:cf:10:62:b8:71:0c:c3:a3:8f:76:ce:5b:
2e:83:db:ca:42:2f:14:93:ec:5d:f5:10:d1:77:81:85:29:b3:
fd:1d:05:9f:cd:93:79:3b:e4:b2:b5:58:cf:3c:03:d3:0f:6b:
75:3f:ea:4b:de:a0:71:dd:9a:d5:ea:3b:8f:ca:64:f9:71:2c:
4e:05:30:95:06:15:de:6b:b6:c3:70:e2:23:00:f1:06:7a:a5:
5b:c4:15:7e:6c:c7:d8:11:d8:16:3d:8c:8f:5b:35:4a:5c:5d:
09:04:55:94:9d:a8:ab:ce:b6:35:3f:b9:54:80:bb:33:6f:7b:
45:0e:45:f3:24:95:a1:a0:3e:67:ea:8b:0a:d1:9c:68:cd:27:
29:8b:03:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:19:43 2025 by rpki-client