Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/fNaHZKQWzTR0TatLxGJsV51nz-I.roa
File: fNaHZKQWzTR0TatLxGJsV51nz-I.roa (raw, json)
Hash identifier: sE2fqms9057unxv9v3lOHD2WZe1GOPfgICxqGHioarI=
Subject key identifier: 7C:D6:87:64:A4:16:CD:34:74:4D:AB:4B:C4:62:6C:57:9D:67:CF:E2
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 0199945C53BBF3EC604E60AAA56DDA2D0DCE
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/fNaHZKQWzTR0TatLxGJsV51nz-I.roa
Signing time: Mon 29 Sep 2025 07:25:02 +0000
ROA not before: Mon 29 Sep 2025 07:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19750
IP address blocks: 91.199.242.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:5c:53:bb:f3:ec:60:4e:60:aa:a5:6d:da:2d:0d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Sep 29 07:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cd68764a416cd34744dab4bc4626c579d67cfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:07:fa:bc:b5:de:8c:5a:bb:de:ea:64:85:
b3:4e:ca:99:1b:38:65:03:01:0b:24:32:de:ea:ab:
fa:c2:21:79:fd:9f:0d:60:23:9c:37:f9:01:03:9e:
f0:3f:ad:1f:87:20:c0:e2:c0:d4:aa:40:d2:92:dc:
d0:af:cc:0a:36:53:80:0f:80:db:ac:44:99:51:88:
b3:be:eb:bd:cd:39:ea:24:e0:47:03:ea:c3:8d:cc:
f0:7f:b6:ca:6d:7c:96:03:7d:3d:5e:fe:4a:e2:36:
a3:c3:ba:b3:eb:fe:57:a6:ba:d1:e0:f5:71:e9:84:
e3:83:61:b1:8a:17:2f:1f:17:b6:81:1b:ee:de:df:
97:bd:3e:cc:40:db:29:0d:47:44:da:bb:6c:5e:97:
0a:aa:ef:17:40:30:ec:0c:90:a2:1b:e1:d6:2a:8e:
7b:a2:80:b2:1b:32:92:13:b4:79:e6:2a:fd:46:aa:
a7:48:51:b6:5c:83:61:21:84:cb:e9:e2:a8:8e:78:
31:4e:f0:df:b3:87:b9:5f:ca:b4:07:b6:d4:eb:c5:
b5:cb:77:66:1c:a7:8f:4c:9c:3a:66:a4:11:70:72:
9e:66:65:b2:df:22:bd:6c:38:fe:d5:7f:ee:48:d4:
3a:ff:28:fd:77:7d:09:8b:66:c2:2f:1f:65:27:2a:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D6:87:64:A4:16:CD:34:74:4D:AB:4B:C4:62:6C:57:9D:67:CF:E2
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/fNaHZKQWzTR0TatLxGJsV51nz-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a8:e7:2d:62:04:3b:29:c5:dc:7c:b0:a5:22:31:5f:5e:6e:
f9:b3:d0:ad:ed:f2:5b:31:37:09:b0:68:18:a5:45:06:21:00:
47:c6:fc:90:97:d3:6c:d1:86:27:f5:d6:5f:17:a8:b4:df:f1:
c3:38:16:8f:8b:d2:10:72:d0:d4:c0:4a:4b:27:16:f3:c4:2d:
71:78:4b:42:91:35:b7:2e:af:9a:60:f7:d9:08:b8:3a:8a:8e:
2c:0c:a2:c1:79:80:55:31:c2:d4:a8:6e:9d:92:71:f3:2c:af:
52:65:57:be:1f:08:96:51:f8:bf:68:03:38:0d:85:5d:7a:52:
3a:7a:7a:2c:27:ce:85:22:49:65:18:02:e2:76:18:98:50:72:
ba:05:a9:6b:7b:e3:4a:bb:af:92:47:f4:9b:a1:44:e2:e6:3d:
1c:df:a7:ab:62:11:c7:be:c9:00:cb:a6:69:67:3b:d3:cb:42:
6e:40:09:ba:42:cd:80:e5:6b:34:f7:45:79:b6:cb:5d:36:3e:
00:65:b7:a8:99:6a:b0:87:0c:33:e3:ac:2e:5f:0e:cc:cc:19:
95:7d:9e:5f:28:73:5d:3a:17:87:48:bd:a9:1f:6b:b6:a9:86:
e3:f1:22:9e:82:0f:f1:26:7d:97:3b:19:f7:4e:fa:92:41:7b:
82:62:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:48 2025 by rpki-client