Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa
File: fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa (raw, json)
Hash identifier: sqU76Se28Ec/MvIdqZD/zhVxUgHos++zus2QQ63LwTY=
Subject key identifier: 7E:E3:1E:77:29:E0:F1:0E:B1:3E:71:5D:35:B9:7F:37:CF:D2:C6:8E
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019779F12C97A85AD84E6070CCF09795A5FB
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa
Signing time: Mon 16 Jun 2025 18:12:18 +0000
ROA not before: Mon 16 Jun 2025 18:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210837
IP address blocks: 109.107.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:f1:2c:97:a8:5a:d8:4e:60:70:cc:f0:97:95:a5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jun 16 18:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ee31e7729e0f10eb13e715d35b97f37cfd2c68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:c1:cf:00:d3:36:ba:68:52:07:9c:d2:3e:
e4:5f:71:f7:89:e2:f8:1c:18:db:85:59:c4:a6:86:
6b:0e:6c:bb:f9:4d:c2:0c:33:ce:82:de:35:6a:7b:
7a:12:d9:7c:0b:64:85:3f:e9:48:5d:d2:01:72:48:
44:1c:cd:c2:b7:91:f1:9b:5f:56:fa:93:db:52:68:
f4:54:99:6d:3f:b9:0a:ec:5d:dd:43:58:67:7e:a3:
c6:75:79:78:73:f2:89:75:3a:f0:66:b0:c1:a5:30:
f1:cf:a1:8a:79:53:ff:cf:0e:a4:c8:c0:5d:47:b3:
12:c4:19:83:e3:8e:89:e1:d6:83:b7:e0:d0:91:69:
92:9a:dc:ba:8f:27:c9:28:ad:32:eb:20:11:79:ea:
28:3f:c6:2c:fd:d5:0f:90:4c:da:dd:4f:05:91:21:
fe:72:39:57:30:21:00:a3:76:5e:94:9f:3d:54:a7:
c6:4f:8a:28:88:85:ce:4e:2c:4d:24:b1:1c:e6:46:
0c:7d:f8:3e:f7:fb:37:ac:97:87:0c:07:b7:78:45:
b1:40:b6:c7:e3:14:89:0f:bd:1e:93:e1:39:7b:e1:
d5:ca:7f:58:ef:5b:5c:e8:c6:59:ca:34:99:36:5f:
a7:9e:2c:04:c8:c7:bf:fd:65:03:13:07:db:34:b6:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E3:1E:77:29:E0:F1:0E:B1:3E:71:5D:35:B9:7F:37:CF:D2:C6:8E
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.155.0/24
Signature Algorithm: sha256WithRSAEncryption
74:68:5a:92:9c:8d:f0:3a:d0:b7:d9:d0:34:65:2c:bc:2d:98:
6d:0a:f1:e5:8e:97:ed:5c:41:38:df:61:ef:d3:8b:44:d6:51:
ed:8d:2b:e4:bc:77:fc:22:cc:b4:44:bb:cf:af:11:7d:45:80:
8b:2c:bb:2c:79:01:ce:90:c0:fd:c3:d4:e0:79:45:b1:68:ae:
17:e6:4b:c5:16:ed:ad:86:e5:48:c5:ba:fd:f6:6c:bf:4f:98:
37:ce:2b:e0:f5:99:1b:f2:55:78:33:1d:9b:07:70:e1:66:ed:
c6:28:60:13:88:7e:e4:57:10:e0:26:70:df:e8:2c:07:3b:35:
78:18:70:f7:a8:9b:8f:6d:17:5f:57:7c:e7:8b:a9:9d:8c:9b:
f8:b0:1b:e6:c3:8a:30:81:11:10:a7:27:24:65:18:0f:3f:ca:
c3:50:a8:1b:d5:3e:a4:9c:2c:ff:a7:1b:2e:96:4a:34:60:bf:
7c:3b:ca:70:3e:96:ba:6e:1b:ef:cb:5e:a6:1b:30:8c:cf:d4:
c5:52:f2:29:e9:d7:6b:8d:9b:30:45:4d:a3:9d:3b:b9:6f:b5:
df:33:d9:28:0c:77:f2:a2:8e:23:18:45:4c:0f:2a:c5:b9:96:
02:a3:c9:1a:44:3f:41:26:6c:30:e9:a2:c8:a1:e7:27:5f:e9:
78:35:b7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:57:57 2025 by rpki-client