Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Fl_ha6ZRrcj7LNabFfiIvy4PXBQ.roa
File: Fl_ha6ZRrcj7LNabFfiIvy4PXBQ.roa (raw, json)
Hash identifier: rGTu/eBvREBIS2YrmRECHoO4Fq6M0d9n2xt5c5qKdlE=
Subject key identifier: 16:5F:E1:6B:A6:51:AD:C8:FB:2C:D6:9B:15:F8:88:BF:2E:0F:5C:14
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0199D49CD4007B104DD6DB1FCBF399402711
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Fl_ha6ZRrcj7LNabFfiIvy4PXBQ.roa
Signing time: Sat 11 Oct 2025 18:51:11 +0000
ROA not before: Sat 11 Oct 2025 18:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204876
IP address blocks: 194.62.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d4:9c:d4:00:7b:10:4d:d6:db:1f:cb:f3:99:40:27:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 11 18:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=165fe16ba651adc8fb2cd69b15f888bf2e0f5c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:39:71:7a:1a:39:47:ef:36:03:26:40:50:
03:58:cd:eb:43:1a:3d:05:f9:8a:60:d8:d5:cd:89:
f9:30:74:86:3a:b7:c2:2f:7d:1c:66:b4:2a:b3:53:
ef:74:2b:c1:17:c6:b1:b2:26:e0:ae:5c:df:c1:bd:
83:14:48:40:18:d1:71:9c:fa:c1:e0:26:7a:e7:8b:
89:fb:16:b2:36:3b:1d:8b:c9:51:be:7c:83:e8:d7:
61:b7:b1:22:2c:af:f1:ba:92:7c:fc:03:7f:7e:3e:
fc:de:7e:b4:73:35:b8:2b:d4:54:6a:d8:e7:75:b2:
e1:c1:9c:4d:dd:00:15:79:da:b1:3e:cf:9f:47:de:
48:d7:a2:fd:69:28:8b:46:04:00:62:bf:1c:ac:aa:
d3:da:bb:f3:51:7b:b5:3c:cb:df:64:84:94:3f:60:
05:f8:13:d2:8e:68:3e:67:27:79:8b:99:db:12:e9:
e5:e6:28:f7:b0:9a:71:26:74:1c:f7:10:80:97:f3:
80:76:84:d9:8f:d4:37:43:64:08:98:3a:55:db:42:
e5:4e:f3:a8:6a:65:47:f6:6d:7c:b8:80:7f:b4:0a:
26:fa:b6:0e:25:78:c9:1d:a7:4d:41:67:01:dc:17:
e2:6e:3f:71:54:53:ad:91:c8:a2:a3:15:46:b0:4f:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5F:E1:6B:A6:51:AD:C8:FB:2C:D6:9B:15:F8:88:BF:2E:0F:5C:14
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Fl_ha6ZRrcj7LNabFfiIvy4PXBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.52.0/24
Signature Algorithm: sha256WithRSAEncryption
41:84:8b:91:8c:b6:4c:d6:e3:be:a1:47:c9:e0:49:bb:bf:d9:
da:c1:b7:cd:d4:54:91:1c:56:d5:4d:2e:fb:83:9f:e2:19:ef:
ab:3f:e6:c7:9f:9c:f2:b5:58:dc:1e:8a:5c:9f:4c:b4:18:22:
04:5e:ce:d6:54:09:a9:c5:38:b8:73:d4:1e:a1:d6:79:d1:df:
84:64:5a:f5:8f:2c:f6:be:80:47:6f:30:34:17:fa:fd:c9:81:
53:d1:e9:84:d4:26:d1:70:a8:7a:5b:25:2b:b2:77:f7:51:5d:
f9:eb:d3:f3:60:19:33:d0:76:f4:af:64:d0:26:4c:50:1d:3f:
13:7d:0a:f2:73:ca:a8:68:63:b0:1e:65:de:1b:ea:08:e0:cf:
60:85:4e:f7:e7:e8:ac:01:a3:a4:9b:2b:b9:a3:dc:a5:89:39:
41:a1:1b:2c:7e:55:a1:62:bc:65:3b:ab:2a:5b:47:14:9b:74:
6c:84:f7:c9:01:0b:df:f7:b0:e6:be:f5:15:70:ee:9f:b4:d2:
1c:98:b3:23:43:b5:69:35:ac:19:c9:9d:01:e1:35:ce:ac:d5:
50:75:75:54:ee:ce:13:d9:ec:14:b2:bf:d3:54:ec:3a:4e:a7:
8c:ab:b2:5f:b9:c8:21:45:b8:2e:47:44:2c:f0:9f:30:cf:ae:
41:e0:0b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 09:46:05 2025 by rpki-client