Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/ftA_0MHprxcS8SlFhkjswrNXwFY.roa
File: ftA_0MHprxcS8SlFhkjswrNXwFY.roa (raw, json)
Hash identifier: smdGNCpTIhX1wgE3ptT3KMsrSmr38EbIS8Vn8KXDg24=
Subject key identifier: 7E:D0:3F:D0:C1:E9:AF:17:12:F1:29:45:86:48:EC:C2:B3:57:C0:56
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 0198A2E045AECBA10B7D9D74DB660215C888
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/ftA_0MHprxcS8SlFhkjswrNXwFY.roa
Signing time: Wed 13 Aug 2025 10:01:03 +0000
ROA not before: Wed 13 Aug 2025 10:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401838
IP address blocks: 185.54.12.0/23 maxlen: 24
185.54.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:e0:45:ae:cb:a1:0b:7d:9d:74:db:66:02:15:c8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Aug 13 10:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ed03fd0c1e9af1712f129458648ecc2b357c056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:66:b5:12:10:7d:d0:e4:93:05:ad:c7:e0:
35:20:38:7b:63:82:a2:68:68:1b:38:51:5f:cc:e2:
61:94:bf:24:f3:37:5c:7f:3b:54:d2:a4:f4:d1:e2:
6c:6a:b0:73:88:b3:64:32:87:07:b3:38:e0:07:4c:
24:7c:da:2c:6c:a4:a7:94:9a:f4:c4:8e:5a:08:1b:
c7:13:5c:fb:2b:e3:e1:cc:5d:cb:d5:71:82:bd:50:
4a:7e:7d:19:34:ce:83:50:bc:c9:59:18:41:34:f6:
e1:d7:23:b5:32:e5:66:07:26:d1:f1:a4:b6:42:43:
76:29:c1:f0:d7:6f:ca:c7:a5:aa:78:ad:77:84:41:
9e:d8:c3:34:96:e1:c0:c6:ed:a1:6a:3d:ab:f5:4d:
bf:7f:ab:d6:95:46:39:cc:b7:9c:25:c6:4d:ee:dd:
bd:26:2d:92:67:63:68:96:94:81:4c:5f:68:e2:be:
77:42:bc:38:b8:61:fa:fb:0e:85:95:07:d1:69:1c:
7a:75:6e:fa:03:b8:81:14:10:20:85:f2:3b:f7:59:
a8:da:0b:fe:8d:17:88:42:26:03:7e:69:12:8d:8d:
20:f1:34:78:a3:86:b4:1f:27:02:33:35:6e:10:86:
7f:47:3f:7c:7d:0d:3e:f8:f5:ce:d6:50:df:ee:47:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D0:3F:D0:C1:E9:AF:17:12:F1:29:45:86:48:EC:C2:B3:57:C0:56
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/ftA_0MHprxcS8SlFhkjswrNXwFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:a3:d3:7e:98:53:c5:b9:7b:22:ea:c2:5b:23:6f:34:3b:54:
de:c5:28:5d:72:91:cf:72:53:2a:e8:d9:3a:37:42:e2:3d:cd:
3c:e7:59:1a:30:c8:e1:e5:51:84:e7:8b:c5:75:2e:96:26:94:
0f:48:a1:2e:02:91:16:65:d3:2d:37:f4:aa:5e:9d:c4:b6:5a:
a7:2d:67:9b:fb:a8:c9:a3:e8:dc:96:1c:12:8b:27:34:3c:72:
44:33:6f:ff:cf:14:fb:80:b3:85:cf:7a:7f:de:da:d8:c7:af:
d4:1b:ef:6c:b4:83:c5:3c:c1:a1:56:43:38:2a:81:b9:1b:22:
16:c0:09:19:20:38:04:5c:13:4c:64:bd:31:bb:71:de:e3:e3:
3d:68:ca:98:1c:1b:28:34:8a:4e:35:3c:b9:8b:e6:cf:ed:70:
56:73:3c:bf:35:36:85:49:85:dd:9e:4c:17:36:b4:78:b4:5a:
f3:d3:c7:a8:43:59:16:aa:27:0d:b9:0e:b0:87:71:1c:80:27:
59:e9:c4:1b:b6:d2:94:24:20:14:e8:ef:75:51:1d:05:ee:1e:
50:f8:99:00:c3:13:ef:1e:f9:71:d6:d9:66:de:73:13:fb:9a:
24:7c:28:70:d7:14:ce:74:6f:e5:a6:b0:2d:0d:d0:ec:8c:0d:
e5:0d:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:54:06 2025 by rpki-client