Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-gjqhlQEXt9Mzm0n0PKII5VDAqo.roa
File: 1-gjqhlQEXt9Mzm0n0PKII5VDAqo.roa (raw, json)
Hash identifier: axV6Nlxkvh+cL2e/xhZSdRJjw/vTd0uvps22VUbHDfg=
Subject key identifier: FA:08:EA:86:54:04:5E:DF:4C:CE:6D:27:D0:F2:88:23:95:43:02:AA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0199E2BE7A94976F83602C5E16CB7BE68F8F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-gjqhlQEXt9Mzm0n0PKII5VDAqo.roa
Signing time: Tue 14 Oct 2025 12:42:38 +0000
ROA not before: Tue 14 Oct 2025 12:42:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211373
IP address blocks: 88.216.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:be:7a:94:97:6f:83:60:2c:5e:16:cb:7b:e6:8f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 14 12:42:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa08ea8654045edf4cce6d27d0f28823954302aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:ff:a1:15:80:a1:2b:af:db:60:51:eb:59:
f1:2c:f1:24:e4:27:e8:24:46:86:da:53:90:f1:72:
7a:d7:86:45:1e:fe:14:4d:01:ec:99:de:cb:23:f5:
f3:28:67:1b:e2:86:65:0e:b1:91:b5:31:a4:7c:c5:
47:a9:b7:9c:ea:c9:c5:ee:4e:b8:fa:7c:d9:84:b8:
57:52:84:85:71:f2:a0:cc:c6:98:11:a6:06:89:25:
f8:a6:39:2d:72:c7:e8:57:ad:5f:23:4e:35:f7:c4:
3b:1a:5d:b8:dd:97:c2:e7:d1:03:a3:5f:af:50:d6:
79:38:15:e6:89:39:44:e2:e2:cd:9d:e5:a3:b9:73:
09:bf:96:7c:b8:b6:5a:09:be:82:c8:f6:df:2e:32:
4f:79:3c:c6:6f:d8:df:3f:cb:68:69:7a:64:41:25:
3e:c6:ea:68:90:72:bc:4f:4f:bd:bd:e9:5a:7c:b2:
66:fd:14:cf:41:b8:5a:fc:12:07:07:a0:15:08:58:
c1:f8:84:e6:3c:c1:ef:21:58:5f:49:16:08:46:d4:
de:32:12:ac:f9:68:ed:bd:ad:70:9e:d2:8a:9d:2c:
88:e5:eb:f8:16:45:5f:7b:14:05:33:3a:80:f1:00:
14:ec:0a:5f:96:c9:20:1e:d8:71:9e:53:12:ee:8e:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:08:EA:86:54:04:5E:DF:4C:CE:6D:27:D0:F2:88:23:95:43:02:AA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-gjqhlQEXt9Mzm0n0PKII5VDAqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
42:da:a4:9e:02:e6:0d:b4:8d:49:97:04:a1:58:65:46:8a:26:
71:1c:9c:79:45:e3:ba:91:26:41:2b:1f:79:d7:65:19:83:59:
f3:a0:63:b6:08:2b:87:55:83:d5:da:d9:51:f7:5d:60:9a:15:
79:93:23:34:06:95:f2:1d:f2:2a:68:ed:76:11:f5:fa:78:3a:
7f:00:ae:bc:46:b3:bb:05:27:63:e7:fc:ec:65:a2:66:bc:bf:
2c:02:17:ff:04:eb:71:b1:e0:37:dc:6c:d6:80:6c:53:57:cc:
5e:21:e8:83:69:76:0f:27:ee:29:73:78:1f:5e:55:6a:45:e2:
2a:5e:35:42:0a:f8:50:07:af:82:b7:a9:63:63:d8:7a:65:06:
e3:6b:03:df:f3:92:46:b8:36:f8:e4:40:19:02:3c:65:d7:9d:
09:b2:16:73:c9:bd:77:3a:d2:eb:b6:33:18:97:3c:46:ec:48:
2c:96:71:e8:76:22:44:7e:99:c7:35:72:3c:49:e4:1f:b8:09:
25:e5:c1:3b:f3:a9:24:a7:78:21:0e:11:54:3f:06:8e:7e:33:
80:95:41:f3:e5:94:a5:cf:f6:4b:97:79:db:27:03:ac:fa:bc:
54:c2:74:61:2d:d0:fb:26:a5:44:62:ba:9a:cf:3e:31:fa:d0:
a1:81:a8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:45 2025 by rpki-client