Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/FkoVs9alAq-3FoG992pkYSUKr3Y.roa
File: FkoVs9alAq-3FoG992pkYSUKr3Y.roa (raw, json)
Hash identifier: sx+i4OxChrrhXHBf2JXaRrGO+hup07wWov4ICIEFX+k=
Subject key identifier: 16:4A:15:B3:D6:A5:02:AF:B7:16:81:BD:F7:6A:64:61:25:0A:AF:76
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0199DD85CFFDE0FDEE8711256DA995BA1479
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/FkoVs9alAq-3FoG992pkYSUKr3Y.roa
Signing time: Mon 13 Oct 2025 12:22:38 +0000
ROA not before: Mon 13 Oct 2025 12:22:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62005
IP address blocks: 2.59.216.0/24 maxlen: 24
2.59.217.0/24 maxlen: 24
2.59.218.0/24 maxlen: 24
171.22.182.0/24 maxlen: 24
171.22.183.0/24 maxlen: 24
188.119.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:85:cf:fd:e0:fd:ee:87:11:25:6d:a9:95:ba:14:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Oct 13 12:22:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=164a15b3d6a502afb71681bdf76a6461250aaf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ab:8f:3c:42:b7:ea:b1:41:f4:dc:db:a8:df:
02:11:28:04:cc:5d:47:f5:5b:c0:b0:60:0e:58:26:
6f:1b:8f:09:3e:ad:cf:aa:c1:33:1d:a6:eb:5c:74:
49:8e:0b:64:03:0e:af:d8:be:d3:85:4b:04:0d:bb:
7e:63:dc:27:34:84:03:04:00:6f:b9:25:7b:51:c8:
ac:d5:3a:f9:ed:cc:29:23:41:f1:5c:bb:3d:e0:05:
11:c6:43:a1:d7:b5:53:a8:79:ec:42:37:22:c6:4b:
b2:c3:99:bf:19:6e:34:64:3c:fe:18:07:4c:50:23:
7c:e7:a2:9c:16:ba:9d:df:42:8b:c3:f3:c1:b1:72:
a3:e4:8a:05:a9:bd:7b:98:99:3e:e9:03:0c:32:c8:
17:b7:6f:7c:15:b6:2f:e9:42:d9:43:a0:19:4a:63:
4e:9a:92:11:e7:dd:bf:9a:04:d7:16:30:bd:d2:66:
c8:96:93:24:24:83:9e:58:8e:df:ad:d1:47:77:d2:
b0:e3:00:2e:4c:a8:ae:dd:6f:b8:83:09:a1:c0:96:
9d:0d:61:ec:e4:54:de:06:3b:b8:99:55:41:d0:27:
f8:88:4d:bb:dc:91:5d:6c:a7:01:59:8d:63:e4:66:
4f:4f:50:a5:c6:f1:0f:0e:ef:6f:87:45:b9:e5:f3:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4A:15:B3:D6:A5:02:AF:B7:16:81:BD:F7:6A:64:61:25:0A:AF:76
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/FkoVs9alAq-3FoG992pkYSUKr3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.216.0-2.59.218.255
171.22.182.0/23
188.119.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:36:54:ee:c1:0a:df:40:90:08:be:06:25:10:2f:0e:1f:7f:
2a:cf:23:7d:f3:49:5b:65:0e:65:b7:52:4a:4c:9d:a8:2b:35:
1b:11:dc:38:c7:1d:56:8c:67:86:c7:df:4a:10:a3:12:87:a1:
3a:f0:2e:de:dd:78:36:e6:a7:f0:a5:b0:ad:52:66:16:02:4a:
44:e3:2c:7d:80:63:65:9d:ad:56:f8:47:26:43:ec:8a:d9:9d:
e9:5e:ac:24:5b:05:81:ec:cf:a0:26:03:bc:e3:2f:13:52:6c:
e0:14:8a:f1:71:04:f7:53:fc:11:da:13:1f:74:e6:41:07:9a:
59:31:48:54:cb:b2:6e:80:9c:08:16:a1:12:0c:f8:5d:3a:05:
dc:d6:75:b9:4c:13:1b:ac:c2:20:4a:25:a4:ab:b7:58:78:b2:
b6:29:d2:d9:00:26:3c:5e:ca:60:08:d6:4c:95:0b:00:3a:b5:
61:cd:38:68:7e:62:94:51:52:75:cc:6d:c8:18:56:83:d0:df:
43:98:a0:5b:c2:0a:b4:8e:f0:c3:8f:85:02:66:b5:8e:17:c1:
99:a5:52:d9:b9:b2:79:28:6c:5b:25:04:83:90:3f:56:ad:e4:
15:df:18:19:a2:31:26:79:55:f2:2c:df:57:f0:4e:99:f0:fa:
48:df:a6:5f
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZndhc/94P3uhxElbamVuhR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjUxMDEzMTIyMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjRhMTViM2Q2YTUwMmFmYjcxNjgxYmRmNzZhNjQ2MTI1MGFhZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86uPPEK36rFB9NzbqN8CESgEzF1H
9VvAsGAOWCZvG48JPq3PqsEzHabrXHRJjgtkAw6v2L7ThUsEDbt+Y9wnNIQDBABv
uSV7Ucis1Tr57cwpI0HxXLs94AURxkOh17VTqHnsQjcixkuyw5m/GW40ZDz+GAdM
UCN856KcFrqd30KLw/PBsXKj5IoFqb17mJk+6QMMMsgXt298FbYv6ULZQ6AZSmNO
mpIR592/mgTXFjC90mbIlpMkJIOeWI7frdFHd9Kw4wAuTKiu3W+4gwmhwJadDWHs
5FTeBju4mVVB0Cf4iE273JFdbKcBWY1j5GZPT1ClxvEPDu9vh0W55fNpfwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFBZKFbPWpQKvtxaBvfdqZGElCq92MB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvRmtvVnM5YWxBcS0zRm9HOTkycGtZU1VLcjNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAMCO9gD
BAACO9oDBAGrFrYDBAC8d3swDQYJKoZIhvcNAQELBQADggEBAKI2VO7BCt9AkAi+
BiUQLw4ffyrPI33zSVtlDmW3UkpMnagrNRsR3DjHHVaMZ4bH30oQoxKHoTrwLt7d
eDbmp/ClsK1SZhYCSkTjLH2AY2WdrVb4RyZD7IrZnelerCRbBYHsz6AmA7zjLxNS
bOAUivFxBPdT/BHaEx905kEHmlkxSFTLsm6AnAgWoRIM+F06BdzWdblMExuswiBK
JaSrt1h4srYp0tkAJjxeymAI1kyVCwA6tWHNOGh+YpRRUnXMbcgYVoPQ30OYoFvC
CrSO8MOPhQJmtY4XwZmlUtm5snkobFslBIOQP1at5BXfGBmiMSZ5VfIs31fwTpnw
+kjfpl8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:00:57 2025 by rpki-client