Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/1-fBRUvj0NMR0jYou_89CipZTIMU.roa
File: 1-fBRUvj0NMR0jYou_89CipZTIMU.roa (raw, json)
Hash identifier: zjwBCEo1/BmGhuy+yca01uAYZvtUSaw+w4THN94MAc4=
Subject key identifier: F9:F0:51:52:F8:F4:34:C4:74:8D:8A:2E:FF:CF:42:8A:96:53:20:C5
Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial: 0199E792C3F0987CF65FBA27A767CA4CC117
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/1-fBRUvj0NMR0jYou_89CipZTIMU.roa
Signing time: Wed 15 Oct 2025 11:12:59 +0000
ROA not before: Wed 15 Oct 2025 11:12:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213527
IP address blocks: 213.177.162.0/24 maxlen: 24
2a14:47c0::/32 maxlen: 32
2a14:47c0::/40 maxlen: 40
2a14:47c0::/48 maxlen: 48
2a14:47c0:1::/48 maxlen: 48
2a14:47c0:2::/48 maxlen: 48
2a14:47c0:3::/48 maxlen: 48
2a14:47c0:4::/48 maxlen: 48
2a14:47c0:5::/48 maxlen: 48
2a14:47c0:6::/48 maxlen: 48
2a14:47c0:7::/48 maxlen: 48
2a14:47c0:8::/48 maxlen: 48
2a14:47c0:9::/48 maxlen: 48
2a14:47c0:a::/48 maxlen: 48
2a14:47c0:b::/48 maxlen: 48
2a14:47c0:c::/48 maxlen: 48
2a14:47c0:d::/48 maxlen: 48
2a14:47c0:e::/48 maxlen: 48
2a14:47c0:100::/40 maxlen: 40
2a14:47c0:100::/48 maxlen: 48
2a14:47c0:fffe::/48 maxlen: 48
2a14:47c0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:92:c3:f0:98:7c:f6:5f:ba:27:a7:67:ca:4c:c1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Validity
Not Before: Oct 15 11:12:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9f05152f8f434c4748d8a2effcf428a965320c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:62:a3:e3:12:46:e0:38:bd:e0:7c:0e:8d:39:
af:c0:fa:61:7f:78:bd:91:c6:93:6c:35:59:1b:2b:
43:f9:0f:a7:ba:46:38:b2:d6:4a:da:7f:9e:2a:2e:
b1:31:e7:dc:c8:63:52:d2:d2:73:76:de:4c:1b:25:
d5:ae:01:b1:f1:05:0b:db:33:5c:cb:6b:d8:18:5b:
98:0e:25:a3:63:c0:23:31:cf:bd:09:44:79:e2:62:
50:20:a1:3c:f6:7e:06:51:0e:c7:fb:63:47:d5:32:
bd:3d:93:f0:c9:9b:49:07:e6:7f:49:a5:f1:59:e9:
60:48:21:70:9f:b7:34:75:39:57:7d:3e:b4:fb:a0:
63:7d:e4:df:16:79:2f:4b:b0:c9:78:04:0b:e5:4e:
33:9d:a6:14:4e:ca:8b:f6:d2:30:3c:d8:5b:d9:d3:
59:3b:f9:e5:23:99:50:1d:53:b6:fe:af:7c:8e:c1:
6d:ba:e5:15:68:42:a0:54:6a:b6:fb:d3:cb:53:85:
12:b5:12:08:9b:24:2e:65:a9:28:d4:88:56:56:96:
ae:72:aa:ca:1b:3b:77:6e:87:7e:30:dd:86:1e:22:
9d:24:a4:fe:f5:3b:84:39:22:06:b9:d3:54:de:ea:
2e:2a:6e:f8:64:d6:24:e9:28:a4:ff:af:54:51:89:
4c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F0:51:52:F8:F4:34:C4:74:8D:8A:2E:FF:CF:42:8A:96:53:20:C5
X509v3 Authority Key Identifier:
keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/1-fBRUvj0NMR0jYou_89CipZTIMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.177.162.0/24
IPv6:
2a14:47c0::/32
Signature Algorithm: sha256WithRSAEncryption
43:06:ce:ab:d9:f1:5c:e1:58:b5:7f:6a:9b:a6:60:8e:6d:d1:
0e:b6:b5:b4:ae:45:7a:e1:ea:6c:e8:b7:b6:0d:81:45:c3:cd:
7b:4a:28:c5:29:db:2a:f1:90:cd:d8:48:90:87:35:9c:68:b9:
c7:ea:ae:4e:82:04:a2:79:c8:cb:cc:45:44:e9:c1:66:bb:6b:
93:a3:9d:2b:4d:32:c7:17:25:68:b4:95:fd:dd:00:56:28:28:
39:82:46:0f:8b:6c:3a:2e:6d:bb:69:ac:d5:6f:a3:c4:da:0b:
8b:d6:15:7c:74:b4:73:3a:dd:f7:36:13:47:3e:1d:c3:1d:39:
51:59:1b:af:79:c2:92:fe:dd:50:89:2b:19:35:81:84:d8:06:
a7:0d:81:b3:40:57:93:c2:49:5c:d4:92:7f:05:92:83:8f:3d:
eb:6d:03:06:bb:f1:00:6a:89:2a:a7:88:5f:7a:fa:72:b9:52:
fb:cf:a2:26:63:df:05:41:c4:a1:ed:31:0e:52:77:3f:33:cf:
78:5e:4e:38:3d:1e:4d:35:85:02:e5:9c:97:b9:9e:19:5d:af:
61:d3:57:a3:27:ef:f4:bb:39:1a:65:1c:a8:e4:3f:01:02:ce:
3b:14:25:f8:95:87:3f:8d:38:da:1d:8c:bb:a2:30:1a:4a:00:
5a:b9:b1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:33 2025 by rpki-client