Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/_5futta0xSGb2K29XZ9-2mIIcNo.roa
File: _5futta0xSGb2K29XZ9-2mIIcNo.roa (raw, json)
Hash identifier: B+25/sqAb1n8V0UhyQrKEJ3bDb2KGluec9BcmrwzlDo=
Subject key identifier: FF:97:EE:B6:D6:B4:C5:21:9B:D8:AD:BD:5D:9F:7E:DA:62:08:70:DA
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01991561F13B49730B223EAFC661969961D5
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/_5futta0xSGb2K29XZ9-2mIIcNo.roa
Signing time: Thu 04 Sep 2025 15:39:23 +0000
ROA not before: Thu 04 Sep 2025 15:39:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43803
IP address blocks: 213.155.175.0/24 maxlen: 24
213.155.176.0/24 maxlen: 24
213.155.182.0/23 maxlen: 23
213.155.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:61:f1:3b:49:73:0b:22:3e:af:c6:61:96:99:61:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Sep 4 15:39:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff97eeb6d6b4c5219bd8adbd5d9f7eda620870da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:9b:48:84:2d:e3:88:ff:59:20:53:fd:fb:
4c:1b:8a:4d:b1:05:8a:a7:14:bd:78:e8:ca:92:31:
2d:86:ec:33:ef:a0:65:b4:60:fe:29:6a:32:83:7f:
7a:15:91:a1:0e:29:73:33:46:91:6c:b5:31:57:41:
d1:b8:11:2e:ca:48:7a:73:ad:6f:56:d7:11:03:ee:
22:5c:16:c3:b2:c5:53:96:f4:a0:5e:a9:94:a3:33:
4a:28:f9:97:bf:85:de:e0:b2:0e:f1:c5:21:a6:cc:
e6:8c:4f:2a:e5:b9:82:0d:ca:37:31:16:85:9d:f4:
6b:04:9e:0e:7b:40:3c:53:6d:4e:09:c7:20:32:db:
ff:ec:be:38:bc:a9:89:11:df:19:fc:b6:cc:24:d1:
dc:03:de:fb:02:df:1a:96:54:26:1b:32:86:64:2a:
25:b8:2a:bd:0a:d1:80:05:55:a6:c9:90:ee:43:7f:
9c:8a:dc:b3:84:7d:ee:21:7e:15:0e:1b:af:24:97:
78:29:f6:6b:e0:7f:c3:f9:d3:82:4e:02:16:ad:d5:
e9:87:8f:db:94:93:ce:48:21:15:54:fc:68:f5:7d:
ef:5c:37:6d:e9:69:64:b9:03:e9:ca:59:a7:40:87:
9b:af:0a:ed:70:36:67:f3:fe:59:73:9f:d6:71:f0:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:97:EE:B6:D6:B4:C5:21:9B:D8:AD:BD:5D:9F:7E:DA:62:08:70:DA
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/_5futta0xSGb2K29XZ9-2mIIcNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.155.175.0-213.155.176.255
213.155.182.0/23
213.155.188.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:c2:03:b5:e1:71:f8:bd:2e:74:0c:d1:9b:5a:f8:ba:8b:99:
52:8f:0d:f0:51:f0:48:ad:3e:2b:18:6c:d5:eb:c2:7b:f4:03:
f7:4f:ef:79:b4:25:c9:ca:ba:85:96:6b:76:b8:57:b4:76:a7:
70:d8:d9:87:ce:b3:d1:10:2a:59:e7:cd:24:86:84:07:2e:9f:
64:cf:5e:34:80:80:31:32:0b:3f:5a:8a:97:a7:d7:b6:c4:20:
a0:de:a3:2f:bf:01:e7:5a:36:ae:06:d9:6c:0b:b0:6e:67:97:
06:78:fb:32:38:04:1c:71:62:90:d3:39:99:00:f7:66:16:dc:
d9:66:be:87:53:e8:11:1b:86:44:cf:13:b3:13:08:05:a2:7b:
8e:b4:39:f3:0b:b2:8e:2d:d9:ce:19:8a:17:4f:76:59:25:8b:
c9:7d:ad:06:30:a5:8d:ae:46:78:a5:56:15:65:d9:9a:bd:61:
7a:01:af:c7:10:87:96:27:3a:e3:d5:34:5f:5c:2e:7a:08:e0:
6e:95:2e:bb:de:b8:d7:2c:bf:e7:3f:d7:92:78:4c:2a:7f:17:
ff:da:40:45:3a:16:8e:1e:2b:12:8a:7d:e3:e6:13:82:26:e4:
88:a7:f3:48:37:85:58:94:32:a4:d5:99:99:68:cd:4a:45:99:
3b:a6:e2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:48:31 2025 by rpki-client