Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/FY0PnzgS2EpiVOcfFbS9jXQ_rQs.roa
File: FY0PnzgS2EpiVOcfFbS9jXQ_rQs.roa (raw, json)
Hash identifier: SBku+C0JKoyJVJcQo1U5CGwXGTxRsDeNLCykfjm3tsM=
Subject key identifier: 15:8D:0F:9F:38:12:D8:4A:62:54:E7:1F:15:B4:BD:8D:74:3F:AD:0B
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 0199C43D0852CD0FEA0F13B9C01E5D4DCD85
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/FY0PnzgS2EpiVOcfFbS9jXQ_rQs.roa
Signing time: Wed 08 Oct 2025 14:32:38 +0000
ROA not before: Wed 08 Oct 2025 14:32:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214798
IP address blocks: 109.120.158.0/24 maxlen: 24
176.98.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:3d:08:52:cd:0f:ea:0f:13:b9:c0:1e:5d:4d:cd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Oct 8 14:32:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=158d0f9f3812d84a6254e71f15b4bd8d743fad0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:a4:0f:f6:87:16:f7:75:f9:83:9d:14:93:
49:55:de:8b:e1:48:bd:be:6d:42:a1:98:45:43:26:
33:96:46:eb:99:e4:cb:08:b5:9d:e8:73:a8:51:24:
01:3a:61:d0:25:de:31:b6:8c:4d:19:60:f6:ff:87:
03:20:3e:01:7a:08:37:67:25:da:be:4b:e1:ae:64:
f5:bb:b3:ab:27:b6:b7:6b:27:b0:56:7b:98:89:54:
8d:74:92:c7:5a:44:a6:04:a9:91:38:52:95:3b:ae:
06:6e:41:f0:96:15:86:e2:53:5a:48:3c:5e:d3:b6:
0a:33:ab:38:29:8d:3d:01:40:b1:40:4e:c3:58:d4:
da:a9:e9:6f:5c:1a:0b:ab:4d:7e:9d:4d:a8:1b:1f:
f3:25:cc:b7:70:db:fc:af:4a:7c:a1:2d:d5:fb:13:
bf:89:67:c7:9c:05:ff:86:5c:db:d4:9d:c1:4f:9d:
84:b8:0e:f7:b0:3a:2c:b9:ec:d6:9e:0e:a9:98:87:
c2:c1:dc:55:4f:13:67:6c:20:d6:10:6e:96:14:7f:
d5:3f:fb:04:14:39:f4:05:e2:0a:30:30:fd:05:25:
83:8a:ac:24:a2:b9:34:58:50:fc:eb:67:55:e0:48:
43:9d:6f:85:eb:3f:5f:8c:c0:77:ba:58:f2:65:a9:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8D:0F:9F:38:12:D8:4A:62:54:E7:1F:15:B4:BD:8D:74:3F:AD:0B
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/FY0PnzgS2EpiVOcfFbS9jXQ_rQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.158.0/24
176.98.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f3:ed:5a:4b:1a:d2:60:fa:fe:ab:90:7e:e0:79:86:35:68:
58:cf:e8:93:4d:ef:5b:01:60:f8:a9:75:f0:4a:2f:98:29:56:
c0:bf:d5:3b:5a:fb:ec:16:13:80:3a:ee:49:c6:7d:7c:40:72:
c5:3d:30:0a:2b:16:31:f0:31:ee:0c:a4:7c:43:1c:4d:fc:c2:
59:e9:3a:0a:20:14:d1:ab:ad:80:ca:e8:aa:3e:92:3b:41:d1:
c1:ef:3a:1e:c4:97:76:5b:34:a6:a0:e1:90:59:e5:5b:ef:e4:
65:d3:b9:4b:d8:26:11:c5:f5:81:7c:78:8d:ce:00:68:01:3a:
1c:c9:64:d6:30:6c:dd:5e:d4:2d:f3:3a:43:29:a1:b5:cb:79:
7b:76:e4:00:1b:63:27:e5:53:f2:50:f6:44:5a:4c:03:6f:74:
a5:f7:88:ca:20:c7:10:fb:ff:04:9a:84:60:af:cf:a4:0f:43:
af:b0:f9:c2:6b:cb:e5:5a:ba:70:b1:b0:d7:48:85:9b:3d:40:
41:35:c0:94:cf:60:bf:ba:58:47:fd:d0:aa:8d:a6:40:fe:6f:
ef:00:ed:f5:40:9f:a7:e9:34:7c:90:4a:e3:9e:77:d3:45:be:
5d:03:40:1a:6d:02:40:d1:8d:57:82:ff:2c:d0:90:06:97:e6:
e9:06:3e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:29 2025 by rpki-client