Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/JFUqeQihYrWsQpDRqW2ndC2ftBM.roa
File: JFUqeQihYrWsQpDRqW2ndC2ftBM.roa (raw, json)
Hash identifier: QETsS2VFfshpHUU2iSro1FYIHe9IxC8LmTGCg7f72LM=
Subject key identifier: 24:55:2A:79:08:A1:62:B5:AC:42:90:D1:A9:6D:A7:74:2D:9F:B4:13
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0199682167B3DA0C49556BA35BA2022142A5
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/JFUqeQihYrWsQpDRqW2ndC2ftBM.roa
Signing time: Sat 20 Sep 2025 17:17:23 +0000
ROA not before: Sat 20 Sep 2025 17:17:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 213.145.66.0/24 maxlen: 24
213.145.70.0/24 maxlen: 24
213.145.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:68:21:67:b3:da:0c:49:55:6b:a3:5b:a2:02:21:42:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 20 17:17:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24552a7908a162b5ac4290d1a96da7742d9fb413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:04:f1:db:0d:90:80:14:29:87:2b:2f:6b:
49:fb:41:c9:2c:b7:b4:9f:6e:1d:63:15:f9:71:e5:
c6:f4:ec:2b:1f:da:c4:23:27:ea:ec:01:a9:21:6a:
aa:bf:ca:2b:f6:16:30:16:73:8e:25:30:ab:12:23:
03:26:a7:a7:41:89:a7:86:00:d1:52:3e:6d:29:a9:
bd:20:dd:5b:de:48:3e:24:1a:ea:14:b5:5c:9e:21:
64:ac:60:b6:b5:13:82:d4:25:cc:68:8f:c3:76:14:
90:84:91:d0:af:3a:1b:81:73:e2:d8:75:1d:85:88:
13:dc:50:ba:2a:48:73:c8:3e:fb:99:97:25:4b:15:
12:d0:d0:39:ad:f0:14:94:a5:3b:a6:5b:fc:fd:bd:
cb:e0:4e:dd:f9:5e:ca:ed:6a:61:75:16:eb:e9:d8:
82:9e:b8:61:30:6f:09:3f:10:00:c2:46:94:83:26:
66:a3:47:8a:9c:1e:45:34:83:b1:85:b6:d0:8d:bd:
5d:a9:1a:ee:b3:b7:bc:b1:0a:85:24:5a:81:d5:ec:
bd:fe:d5:f4:d9:34:79:3c:bd:1c:d4:af:3e:d7:e7:
67:47:66:19:60:0c:3c:de:fc:dd:73:a0:86:07:98:
bf:50:6a:32:be:57:00:3a:33:94:33:75:d5:10:66:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:55:2A:79:08:A1:62:B5:AC:42:90:D1:A9:6D:A7:74:2D:9F:B4:13
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/JFUqeQihYrWsQpDRqW2ndC2ftBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.66.0/24
213.145.70.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:14:37:c5:d7:11:db:98:dc:4f:25:b0:b3:d7:1d:9c:e8:a0:
b7:5a:85:a8:75:83:63:d4:9b:8e:eb:f5:f3:fa:1f:52:4a:b4:
19:e8:9c:65:99:bf:43:e3:05:83:77:aa:d9:61:67:d5:79:ab:
d1:46:6f:bf:c9:2c:ed:b0:d6:bd:1b:a1:1c:6a:2b:d3:70:30:
1a:e6:05:55:d3:c1:23:0f:65:36:a7:17:1d:d3:c8:48:b0:1d:
83:de:47:cf:ca:3b:67:c1:b7:dc:76:29:d0:4b:62:53:9c:07:
72:25:cb:71:5c:24:ba:5e:97:c1:be:02:c6:6a:0d:0a:da:d4:
77:62:7a:71:5d:98:33:1b:d6:4c:c7:9f:ea:68:c6:ef:fa:88:
e2:52:ff:5a:03:96:34:54:eb:02:4b:6f:7a:04:f4:97:93:b6:
cb:b1:bd:97:eb:d8:a4:03:79:f4:89:a0:21:76:3d:f1:07:8c:
27:55:8e:cc:8f:4f:66:5b:66:86:e4:4f:08:1a:4a:86:ff:f7:
5e:c8:12:c1:83:9a:ec:a0:4c:a5:ca:7b:36:f7:3a:81:5e:16:
aa:47:8b:ce:d9:95:82:85:81:59:44:f4:3e:0b:64:73:6a:15:
74:d4:5c:06:a6:62:54:d1:18:d2:a7:4a:0d:09:20:0f:b5:5f:
2a:50:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:08 2025 by rpki-client