Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FdC5SBnzk7ukMq0LtrpBaAirW1s.roa
File: FdC5SBnzk7ukMq0LtrpBaAirW1s.roa (raw, json)
Hash identifier: sdFUw2FkaI0wKbbn4VHNp5Gfcg4xUGvMLo6StzsDCpg=
Subject key identifier: 15:D0:B9:48:19:F3:93:BB:A4:32:AD:0B:B6:BA:41:68:08:AB:5B:5B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0199BDD95A836CBD03EE97EAC19B570FD7E0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FdC5SBnzk7ukMq0LtrpBaAirW1s.roa
Signing time: Tue 07 Oct 2025 08:46:02 +0000
ROA not before: Tue 07 Oct 2025 08:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31404
IP address blocks: 79.110.51.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.69.0/24 maxlen: 24
193.148.48.0/22 maxlen: 24
194.11.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:d9:5a:83:6c:bd:03:ee:97:ea:c1:9b:57:0f:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 7 08:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15d0b94819f393bba432ad0bb6ba416808ab5b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:28:65:4e:31:e7:9f:13:c2:ac:d5:27:05:f0:
12:ed:02:9c:bf:5f:38:d1:58:9b:5c:d6:57:48:aa:
d4:5e:19:9b:15:84:d3:64:09:db:f8:2e:14:c8:56:
e8:e3:32:33:89:f2:6a:90:14:0a:6c:df:68:a9:ea:
b8:6f:0e:55:7d:eb:4a:47:02:22:83:26:62:b5:83:
15:64:4b:69:5a:c7:df:8e:aa:ed:ea:d2:63:d7:f6:
72:46:94:e2:8d:b9:e7:22:f0:db:39:e3:e0:aa:ea:
41:d0:ac:75:41:48:81:25:8d:c4:f4:11:52:b1:7e:
ea:c9:bc:5b:c5:9f:f1:97:99:31:d3:1e:a7:f3:04:
bf:6b:82:25:7e:f0:cb:1d:17:f1:2f:96:4e:ab:3a:
6a:a3:04:6f:f2:d2:ac:3d:49:46:1f:b2:03:da:77:
82:67:6d:fa:d2:fc:28:e6:fe:09:59:3f:ab:60:c8:
da:ac:13:36:fc:3c:08:57:c2:ed:25:71:34:04:78:
53:a5:0a:c0:34:cf:52:91:a9:58:7d:3b:61:9a:ed:
fb:e6:40:0b:be:a8:29:d7:9d:77:6e:1e:43:6a:a0:
51:3e:18:a3:4f:7d:ef:50:cc:ba:10:34:8a:8d:f9:
ae:1c:04:87:f2:7c:1e:76:fe:ba:bf:db:c0:54:99:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D0:B9:48:19:F3:93:BB:A4:32:AD:0B:B6:BA:41:68:08:AB:5B:5B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FdC5SBnzk7ukMq0LtrpBaAirW1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.51.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
94.154.162.0/23
94.156.69.0/24
193.148.48.0/22
194.11.196.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:aa:93:93:eb:65:ff:22:56:3f:12:a2:1d:81:2c:58:f3:13:
51:3b:12:4c:09:f5:2f:15:ac:02:b9:e4:60:7a:b1:12:bc:c9:
06:7f:8e:90:2d:04:2d:c9:45:a0:d2:2e:96:5d:a4:68:9c:da:
86:9e:0b:48:0c:e0:fb:2a:f3:4a:64:c5:fd:a0:c9:8d:c8:fd:
23:05:7e:2d:fe:14:58:87:82:a7:f6:93:0a:a1:f1:82:f8:82:
03:51:bd:2b:16:52:85:9c:10:8a:72:8f:8e:ba:d7:e3:9f:5c:
22:27:92:f1:1b:9d:06:1e:bf:06:9a:62:ec:d9:77:61:9b:4f:
ca:e3:a0:f4:f5:f7:cd:ae:7a:35:5f:2a:51:e9:87:5d:c5:b0:
8a:25:4f:11:7d:22:e9:cc:6a:b0:44:04:4b:3a:1d:16:42:6b:
0e:0c:fc:b4:1b:23:39:85:9e:98:10:39:14:24:48:8e:80:cd:
62:a6:01:48:7d:2d:00:f9:44:ca:24:a6:2b:9b:29:b9:c6:b9:
c0:62:31:18:6b:90:80:48:a4:8d:5f:16:b8:e7:56:e0:38:b0:
a8:d4:10:8b:8b:0d:7f:21:01:39:db:ec:f0:8f:f6:74:a1:9c:
95:c2:58:e3:2e:56:65:6d:40:d1:82:fe:96:ce:62:b7:26:34:
37:55:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:23 2025 by rpki-client