Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/Fi85_PBGwZSOCRbYgpnQiNvsZE4.roa
File: Fi85_PBGwZSOCRbYgpnQiNvsZE4.roa (raw, json)
Hash identifier: bGo4f80VRmIeK/wJbNEawWtsdUYa3yYX3GBMLAD+a7Y=
Subject key identifier: 16:2F:39:FC:F0:46:C1:94:8E:09:16:D8:82:99:D0:88:DB:EC:64:4E
Certificate issuer: /CN=efa842e67147252505f41551f0f735b7f72e3e97
Certificate serial: 01979E23009CD5EB560BAF52AED27F7E0B59
Authority key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/Fi85_PBGwZSOCRbYgpnQiNvsZE4.roa
Signing time: Mon 23 Jun 2025 18:53:03 +0000
ROA not before: Mon 23 Jun 2025 18:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12989
IP address blocks: 185.142.236.0/24 maxlen: 24
185.142.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9e:23:00:9c:d5:eb:56:0b:af:52:ae:d2:7f:7e:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa842e67147252505f41551f0f735b7f72e3e97
Validity
Not Before: Jun 23 18:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=162f39fcf046c1948e0916d88299d088dbec644e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:d2:13:63:a9:1c:f3:ad:ae:30:58:b4:9f:
98:53:6e:c5:c5:66:18:46:34:85:f1:67:40:75:20:
b0:f8:76:8c:97:a7:0e:f9:cb:99:e4:c2:ca:93:ad:
2c:3d:a2:f5:c1:d2:5f:23:ed:a0:87:5b:61:bb:a5:
75:ca:d8:2e:eb:d2:21:3b:9f:a7:76:8b:a7:1e:0b:
d2:43:bd:d6:c6:2d:c6:7d:c2:cc:01:cf:3e:40:e4:
f8:bc:dd:87:e6:9a:cf:55:bd:63:8a:15:45:3d:a0:
58:42:86:e4:f2:65:27:b7:f0:65:55:56:a2:38:47:
00:e3:0b:32:89:f5:7b:b9:c4:65:31:60:57:91:9a:
4b:65:8d:07:e5:0a:f2:7b:38:22:a9:4e:b7:2b:34:
b1:ba:3d:79:6f:f1:2f:e0:bd:d1:aa:42:d4:62:18:
c5:4e:39:c6:e2:7a:54:c8:d0:fc:34:df:10:2c:c0:
28:72:55:ba:c1:fc:58:6e:21:3a:ea:5e:64:b4:7c:
af:eb:d1:a1:c0:41:cf:9c:9a:13:43:3f:e0:9a:75:
58:4b:68:4b:59:a1:17:a7:3b:b1:87:c8:83:f6:ad:
c3:b7:36:63:9e:0f:20:c0:2d:09:fb:d0:a8:af:3e:
67:7d:da:f6:64:f4:f3:ab:9c:90:59:7e:dd:0f:f4:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:39:FC:F0:46:C1:94:8E:09:16:D8:82:99:D0:88:DB:EC:64:4E
X509v3 Authority Key Identifier:
keyid:EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/Fi85_PBGwZSOCRbYgpnQiNvsZE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.236.0/24
185.142.238.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:21:d7:8c:70:0d:d8:08:3b:8b:a7:99:fd:d3:cf:79:32:e1:
33:81:60:18:0b:4d:2e:69:e9:23:3c:22:ae:ea:24:34:30:b1:
d0:52:21:72:f0:c7:15:46:70:ff:16:fe:26:10:70:ae:62:68:
4b:c6:48:65:08:ca:11:53:7b:a1:9e:6d:c3:96:e3:a3:28:66:
84:32:96:70:01:83:7b:b1:81:3e:1c:0e:08:a2:6e:b2:86:85:
60:18:ac:b4:0e:20:49:51:bc:24:cd:01:12:d0:44:d3:be:9e:
4f:00:34:72:80:cc:a4:19:f7:a2:88:18:18:8e:25:e0:e1:e2:
2e:36:1b:4a:ba:7b:24:68:6b:76:6e:e7:43:c9:e9:e3:c7:fc:
a4:b2:23:b4:37:bc:17:c3:b1:ec:4e:cd:04:f0:dd:82:0d:4b:
58:49:9e:b5:d2:39:7f:0e:7c:05:26:30:3d:3a:78:28:90:00:
e7:d0:07:3c:9d:a5:5a:fc:0c:23:22:6e:48:83:a3:28:63:dc:
06:28:6e:a2:cc:ee:2f:1b:ec:70:a2:9e:1f:16:f3:93:7a:93:
c1:85:3b:a0:b2:b7:35:f9:c3:ab:15:5a:a0:3e:5b:8e:de:5c:
90:18:37:de:18:f1:21:1e:41:bd:2e:eb:97:bd:d3:9a:56:c9:
59:8b:be:db
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZeeIwCc1etWC69SrtJ/fgtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTg0MmU2NzE0NzI1MjUwNWY0MTU1MWYwZjczNWI3Zjcy
ZTNlOTcwHhcNMjUwNjIzMTg1MzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjJmMzlmY2YwNDZjMTk0OGUwOTE2ZDg4Mjk5ZDA4OGRiZWM2NDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+LSE2OpHPOtrjBYtJ+YU27FxWYY
RjSF8WdAdSCw+HaMl6cO+cuZ5MLKk60sPaL1wdJfI+2gh1thu6V1ytgu69IhO5+n
dounHgvSQ73Wxi3GfcLMAc8+QOT4vN2H5prPVb1jihVFPaBYQobk8mUnt/BlVVai
OEcA4wsyifV7ucRlMWBXkZpLZY0H5QryezgiqU63KzSxuj15b/Ev4L3RqkLUYhjF
TjnG4npUyND8NN8QLMAoclW6wfxYbiE66l5ktHyv69GhwEHPnJoTQz/gmnVYS2hL
WaEXpzuxh8iD9q3DtzZjng8gwC0J+9Corz5nfdr2ZPTzq5yQWX7dD/TmBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBYvOfzwRsGUjgkW2IKZ0Ijb7GROMB8GA1UdIwQY
MBaAFO+oQuZxRyUlBfQVUfD3Nbf3Lj6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZoQzVuRkhKU1VGOUJWUjhQYzF0X2N1UHBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lOWM4ZTktYjk1NC00ZDIwLWE0MjYt
OGUwYzMxMjIzZGI4LzEvRmk4NV9QQkd3WlNPQ1JiWWdwblFpTnZzWkU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lOWM4ZTktYjk1NC00ZDIwLWE0MjYtOGUwYzMxMjIzZGI4
LzEvNzZoQzVuRkhKU1VGOUJWUjhQYzF0X2N1UHBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuY7sAwQB
uY7uMA0GCSqGSIb3DQEBCwUAA4IBAQCmIdeMcA3YCDuLp5n90895MuEzgWAYC00u
aekjPCKu6iQ0MLHQUiFy8McVRnD/Fv4mEHCuYmhLxkhlCMoRU3uhnm3DluOjKGaE
MpZwAYN7sYE+HA4Iom6yhoVgGKy0DiBJUbwkzQES0ETTvp5PADRygMykGfeiiBgY
jiXg4eIuNhtKunskaGt2budDyenjx/yksiO0N7wXw7HsTs0E8N2CDUtYSZ610jl/
DnwFJjA9OngokADn0Ac8naVa/AwjIm5Ig6MoY9wGKG6izO4vG+xwop4fFvOTepPB
hTugsrc1+cOrFVqgPluO3lyQGDfeGPEhHkG9LuuXvdOaVslZi77b
-----END CERTIFICATE-----
Generated at Wed Jul 2 12:24:01 2025 by rpki-client