Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/FJT0-DBU0kzt0H8iGqvrlGB9-8o.roa
File: FJT0-DBU0kzt0H8iGqvrlGB9-8o.roa (raw, json)
Hash identifier: TM6cYGamkpxBVYOmKkZabC6I03zfhetjpjpkwmesO+A=
Subject key identifier: 14:94:F4:F8:30:54:D2:4C:ED:D0:7F:22:1A:AB:EB:94:60:7D:FB:CA
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019990F86940DE453A44B7FB5D957E7C2FA3
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/FJT0-DBU0kzt0H8iGqvrlGB9-8o.roa
Signing time: Sun 28 Sep 2025 15:37:02 +0000
ROA not before: Sun 28 Sep 2025 15:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211729
IP address blocks: 2a14:67c1:a110::/44 maxlen: 48
2a14:67c1:b400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:90:f8:69:40:de:45:3a:44:b7:fb:5d:95:7e:7c:2f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Sep 28 15:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1494f4f83054d24cedd07f221aabeb94607dfbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:07:21:2b:81:fb:6a:32:5c:0a:91:ec:49:
f4:97:82:99:eb:b5:3b:06:38:f5:40:b2:14:72:a6:
07:f6:53:28:9d:aa:f5:59:51:98:47:c5:db:f9:ba:
c4:db:a6:41:dd:39:77:ae:87:7f:e8:de:cc:80:6d:
f4:58:e5:7a:07:d8:b9:5c:47:90:0a:93:ee:8f:b2:
82:0d:bd:e6:66:1c:bc:27:79:b3:bc:3d:ad:33:e6:
50:7c:e9:c6:13:92:06:e9:de:e0:8d:1c:4c:84:aa:
de:72:0f:b1:bd:a6:49:e0:2e:cd:f7:1d:5d:d9:b4:
89:3e:1d:3c:a8:4c:88:a1:e6:c0:c9:98:e9:f8:17:
cf:ca:d2:40:dd:9c:a6:44:db:be:58:45:3f:9e:60:
ae:4b:f5:aa:dd:dc:89:48:c8:b6:70:73:78:f7:c8:
8a:6a:7a:92:63:09:83:d3:c1:b6:28:6a:3d:f8:ea:
35:cd:7f:f9:70:dc:26:7f:d0:92:76:c2:f3:e6:94:
9d:a3:74:6a:fa:a2:e3:bb:5e:ae:35:9c:bc:d1:8d:
e5:63:87:92:3f:30:be:59:0b:5c:99:c3:fc:14:f3:
ac:59:66:e3:d3:a8:67:df:dd:96:0d:08:f6:a1:cd:
ac:08:10:65:11:45:7d:e3:f5:4a:0f:b0:82:b5:f1:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:94:F4:F8:30:54:D2:4C:ED:D0:7F:22:1A:AB:EB:94:60:7D:FB:CA
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/FJT0-DBU0kzt0H8iGqvrlGB9-8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:a110::/44
2a14:67c1:b400::/40
Signature Algorithm: sha256WithRSAEncryption
25:40:17:f3:7b:b9:9b:33:d8:fc:72:8b:cd:cf:aa:95:1f:b9:
50:a6:0b:5a:3f:21:fb:58:2c:b1:8d:d7:30:27:f0:e8:f8:9d:
0e:b9:13:30:4b:69:78:33:da:34:e6:58:83:c9:52:6e:26:7c:
cf:65:b2:64:f5:15:c7:6a:6a:be:11:f8:73:b9:10:27:3c:87:
36:e1:0b:7f:11:aa:fd:a0:f5:1e:d6:24:6e:29:06:0e:d7:fe:
2f:52:fa:1b:d0:73:ca:14:91:eb:e3:32:dc:3c:e8:07:a3:d1:
d1:04:0a:db:d0:f9:0c:44:1e:19:0b:09:a8:6b:49:33:66:39:
d4:b8:48:a6:9a:f6:e8:bb:ad:b1:13:6d:7e:da:84:96:58:ad:
48:1f:7f:8d:45:31:ef:56:73:5d:dc:bb:cd:3d:9c:aa:cf:58:
25:b2:83:0c:fa:e7:45:17:43:ef:cc:fe:ae:d3:a2:c8:a0:36:
19:e3:d6:50:99:4b:c5:4d:71:2d:8f:64:6e:0e:53:d0:3b:99:
75:3f:e1:10:ce:3c:76:b8:d8:dd:9d:ee:43:de:9a:46:4d:f7:
57:29:5d:86:a5:16:df:a5:73:9f:1c:c2:40:c4:26:8d:be:17:
e5:40:1b:f3:fa:10:ef:c3:23:7f:c8:21:6b:58:87:67:5b:9a:
d9:d2:ab:e4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZmQ+GlA3kU6RLf7XZV+fC+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll
NGUwZTAwHhcNMjUwOTI4MTUzNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDk0ZjRmODMwNTRkMjRjZWRkMDdmMjIxYWFiZWI5NDYwN2RmYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKwHISuB+2oyXAqR7En0l4KZ67U7
Bjj1QLIUcqYH9lMonar1WVGYR8Xb+brE26ZB3Tl3rod/6N7MgG30WOV6B9i5XEeQ
CpPuj7KCDb3mZhy8J3mzvD2tM+ZQfOnGE5IG6d7gjRxMhKrecg+xvaZJ4C7N9x1d
2bSJPh08qEyIoebAyZjp+BfPytJA3ZymRNu+WEU/nmCuS/Wq3dyJSMi2cHN498iK
anqSYwmD08G2KGo9+Oo1zX/5cNwmf9CSdsLz5pSdo3Rq+qLju16uNZy80Y3lY4eS
PzC+WQtcmcP8FPOsWWbj06hn392WDQj2oc2sCBBlEUV94/VKD7CCtfGS0wIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFBSU9PgwVNJM7dB/Ihqr65RgffvKMB8GA1UdIwQY
MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt
ZjZjYzRlZjBmN2RmLzEvRkpUMC1EQlUwa3p0MEg4aUdxdnJsR0I5LThvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm
LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKhRnwaEQ
AwYAKhRnwbQwDQYJKoZIhvcNAQELBQADggEBACVAF/N7uZsz2Pxyi83PqpUfuVCm
C1o/IftYLLGN1zAn8Oj4nQ65EzBLaXgz2jTmWIPJUm4mfM9lsmT1Fcdqar4R+HO5
ECc8hzbhC38Rqv2g9R7WJG4pBg7X/i9S+hvQc8oUkevjMtw86Aej0dEECtvQ+QxE
HhkLCahrSTNmOdS4SKaa9ui7rbETbX7ahJZYrUgff41FMe9Wc13cu809nKrPWCWy
gwz650UXQ+/M/q7TosigNhnj1lCZS8VNcS2PZG4OU9A7mXU/4RDOPHa42N2d7kPe
mkZN91cpXYalFt+lc58cwkDEJo2+F+VAG/P6EO/DI3/IIWtYh2dbmtnSq+Q=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:49:23 2025 by rpki-client