Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FURUNVw_wFPcY8xq2Iy3MwsW7u4.roa
File: FURUNVw_wFPcY8xq2Iy3MwsW7u4.roa (raw, json)
Hash identifier: ml9kE5t+5/5BuzRHWHySjb9EAJGfPfheGFTAqdiTyCQ=
Subject key identifier: 15:44:54:35:5C:3F:C0:53:DC:63:CC:6A:D8:8C:B7:33:0B:16:EE:EE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0199DCBA919D8B006EC9F3320CDBDC9C5237
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FURUNVw_wFPcY8xq2Iy3MwsW7u4.roa
Signing time: Mon 13 Oct 2025 08:40:38 +0000
ROA not before: Mon 13 Oct 2025 08:40:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 86.105.4.0/24 maxlen: 24
94.177.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:ba:91:9d:8b:00:6e:c9:f3:32:0c:db:dc:9c:52:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 13 08:40:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=154454355c3fc053dc63cc6ad88cb7330b16eeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:b9:e3:f7:a2:21:9f:41:de:93:af:9c:85:
81:37:24:38:59:58:16:82:73:31:69:32:f5:f2:f3:
4c:02:6b:8d:d7:a1:f8:a3:9b:58:7a:90:10:6a:31:
4d:03:03:08:99:1f:d8:1f:51:43:58:ad:74:7e:aa:
29:01:f2:83:84:85:50:33:43:bd:8e:55:dd:47:5a:
da:4f:e7:45:fd:0d:72:a2:5a:b4:2d:63:3e:9d:84:
94:90:b3:5a:42:c6:05:be:cd:8d:5b:75:51:0d:6a:
f4:6c:71:cd:45:a3:cf:c8:de:be:ea:2f:13:a2:fc:
6c:33:43:8b:11:db:ee:6e:90:51:60:e8:dd:eb:e0:
c2:71:1d:a9:b4:81:4c:b0:55:39:8e:33:fe:1b:20:
60:39:e5:06:e3:9e:15:13:69:af:42:d8:33:7d:f9:
9c:46:06:d3:25:ca:44:60:d3:c8:d9:62:47:5b:02:
d4:95:16:ff:3c:b8:30:03:61:fd:b8:73:02:a7:52:
e8:83:d4:be:b4:d7:93:f3:48:67:4e:21:d3:1c:47:
62:8e:2c:a8:6a:91:f4:30:f5:a5:bd:50:b7:96:bc:
dc:7c:54:02:36:66:31:0c:27:28:1f:80:93:28:a3:
5b:de:38:fe:10:9f:f6:61:3c:09:0f:ef:75:f2:a6:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:44:54:35:5C:3F:C0:53:DC:63:CC:6A:D8:8C:B7:33:0B:16:EE:EE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FURUNVw_wFPcY8xq2Iy3MwsW7u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.4.0/24
94.177.147.0/24
Signature Algorithm: sha256WithRSAEncryption
01:87:07:52:ee:ec:0c:57:a3:54:9f:d6:e8:d7:1a:98:84:15:
e2:31:d8:c9:6b:a3:a5:13:b4:bd:6b:b5:7b:09:93:1d:97:35:
62:5d:fd:d0:56:27:8f:8d:e3:ff:25:ed:43:dc:3f:c7:f5:74:
7a:59:41:8d:53:30:1d:72:fa:36:c6:35:4f:52:01:37:bb:42:
6c:5f:db:91:54:ef:a5:b5:d7:67:19:53:6e:5f:2d:79:bd:a8:
6d:ce:5f:1e:40:61:12:ff:2e:30:7c:34:56:03:29:eb:a4:7a:
a1:a1:a7:99:8c:62:fd:67:da:41:71:cc:ee:29:18:8d:eb:ca:
da:7f:e6:48:8b:8a:92:aa:84:ec:d8:bc:e1:96:a6:d3:83:e3:
3f:a6:49:53:6c:25:99:44:41:e7:d2:66:e2:44:1f:e3:f0:61:
97:e7:08:09:7f:10:ac:3c:8e:9d:ad:f1:0f:de:52:8f:cd:c3:
8f:c5:b6:e4:36:d1:b2:2c:ea:c1:5f:e5:19:34:d7:d0:c2:8c:
a6:c9:33:86:10:d3:4a:57:9b:be:ad:73:c2:95:72:64:80:97:
e9:1e:98:58:92:ce:30:ee:67:0e:ae:b9:de:b6:6b:cf:8b:a5:
06:92:92:01:15:20:55:35:45:7d:0c:21:58:9e:6a:ad:ae:c8:
b8:11:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:17 2025 by rpki-client