Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/_PTsrjA4Vx4ohcRmFglFLj69Gbk.roa
File: _PTsrjA4Vx4ohcRmFglFLj69Gbk.roa (raw, json)
Hash identifier: qHBktGp3NlHLcFdGjmDdlgxPr6r0hRT3TQKlIEYQtgg=
Subject key identifier: FC:F4:EC:AE:30:38:57:1E:28:85:C4:66:16:09:45:2E:3E:BD:19:B9
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 019A0CD4F4A7C10BDB342AFF66033E7FE2CF
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/_PTsrjA4Vx4ohcRmFglFLj69Gbk.roa
Signing time: Wed 22 Oct 2025 16:51:14 +0000
ROA not before: Wed 22 Oct 2025 16:51:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57131
IP address blocks: 185.130.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:d4:f4:a7:c1:0b:db:34:2a:ff:66:03:3e:7f:e2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: Oct 22 16:51:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcf4ecae3038571e2885c4661609452e3ebd19b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:37:13:f1:79:a9:90:60:88:6c:7d:5d:b9:2c:
ec:c0:d6:83:e5:bd:18:86:87:30:1e:ca:b9:ea:6f:
fe:cd:49:30:06:58:6e:93:f5:1e:b9:38:bc:2c:35:
4f:e6:56:de:28:8a:69:d9:b9:2e:1f:b6:ef:01:b1:
34:cf:2d:a4:80:e8:30:c9:e2:3b:9f:3b:f2:d7:88:
10:41:31:e8:27:74:64:ce:ad:3b:3d:db:b3:6e:90:
ae:65:7f:2b:ba:84:86:2c:ab:82:b3:ce:cb:2e:f3:
79:e8:31:6b:f8:7f:8d:bd:da:ac:50:6b:eb:f2:c3:
78:61:54:b3:92:24:ed:e7:57:9d:f7:6d:2b:b7:45:
6a:48:20:fe:f1:15:a3:ff:3c:73:6c:2e:22:2c:3c:
b3:ae:00:f1:d4:c7:6d:e6:27:be:23:3a:9d:fd:36:
9d:73:3b:d2:90:a5:62:d9:0a:a3:df:be:8f:72:ee:
0a:32:b9:b0:5e:b9:af:4e:14:0d:1e:19:a8:01:4d:
52:ba:f1:ce:c5:ee:7f:c3:b8:c2:ed:76:e4:93:09:
bb:97:56:d8:4e:e6:4e:aa:7b:52:93:f5:52:e0:e2:
d0:1b:3e:67:51:86:ad:ce:d1:d2:34:77:82:20:57:
26:46:a3:b2:17:8c:02:77:f1:0b:2e:f5:de:c2:0e:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F4:EC:AE:30:38:57:1E:28:85:C4:66:16:09:45:2E:3E:BD:19:B9
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/_PTsrjA4Vx4ohcRmFglFLj69Gbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.164.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:0c:13:37:f3:2d:2e:70:c5:18:a8:5e:4a:35:41:d7:75:a5:
6a:8a:a3:f8:37:79:64:ae:f6:38:83:50:98:4d:f7:54:68:9f:
01:df:4e:39:bc:99:1f:b9:fe:19:6c:30:e8:3d:e4:af:dd:04:
f2:ef:6a:7f:02:fc:c1:f2:80:76:61:50:49:7f:45:e7:4a:15:
2d:6a:9d:8f:9b:67:84:b1:a0:70:f7:1e:bc:03:60:88:4d:8c:
6e:17:6e:0e:68:1c:4d:3a:36:e7:ed:82:07:f7:bd:b8:df:32:
73:95:84:fc:b3:0e:73:26:65:69:9d:9c:e5:b9:3f:05:37:c0:
91:86:95:18:92:4c:5b:62:34:96:f3:7d:ce:dd:09:40:ef:e8:
82:90:aa:cc:c4:eb:d6:79:22:e5:04:22:ab:33:e5:8e:7c:14:
91:de:4b:82:54:ae:73:e4:2d:eb:3b:89:0c:ca:e6:05:b6:94:
78:8d:05:24:c9:01:0a:89:47:4b:dc:38:6d:ec:2f:fa:89:c7:
fa:aa:95:8b:1f:0c:d8:7a:ab:98:18:23:c7:72:1b:f5:d7:20:
de:04:b3:15:c2:3b:32:f8:af:9e:2d:c4:db:b5:46:d0:8b:7f:
83:70:e8:fb:9c:5b:53:ba:d4:7a:74:c9:7b:4d:97:b6:a1:77:
64:71:c3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 09:20:21 2025 by rpki-client