Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/Fg0uKp3KzK9Z6JH5UhH7WuwVnZU.roa
File: Fg0uKp3KzK9Z6JH5UhH7WuwVnZU.roa (raw, json)
Hash identifier: V2gXPJdj6ekMjp/tE7s1qlDZ8F6P9cafMgL/dwyxEt8=
Subject key identifier: 16:0D:2E:2A:9D:CA:CC:AF:59:E8:91:F9:52:11:FB:5A:EC:15:9D:95
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 0199ED28D09FA36E21A62828E95CB962C97E
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/Fg0uKp3KzK9Z6JH5UhH7WuwVnZU.roa
Signing time: Thu 16 Oct 2025 13:14:58 +0000
ROA not before: Thu 16 Oct 2025 13:14:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 80.208.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:28:d0:9f:a3:6e:21:a6:28:28:e9:5c:b9:62:c9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Oct 16 13:14:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=160d2e2a9dcaccaf59e891f95211fb5aec159d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:1c:0a:76:ce:49:51:0d:e0:b3:a1:ed:1b:
1a:51:eb:d4:0c:86:eb:24:f7:51:fa:6f:f0:d6:45:
ef:c3:08:e2:70:ae:87:53:22:54:13:7c:2e:d5:ba:
c9:2e:d6:99:c2:fc:3c:00:6e:27:21:f0:be:e3:4f:
d1:3a:82:c2:86:3f:62:fb:40:cd:27:5b:fe:6c:a5:
9c:90:98:b4:88:0a:13:da:17:3f:4f:c2:f2:ac:7e:
fc:8f:a3:b4:b8:b7:33:1f:6e:16:11:c0:7e:0d:55:
ca:8c:7d:8b:c6:89:79:6e:74:70:0c:d0:fb:54:ff:
58:1c:30:3d:2c:0d:18:25:6b:99:10:27:4e:e4:fa:
9c:30:4c:d6:07:19:79:86:39:d7:99:dc:01:b0:26:
d5:c4:12:89:85:4d:bb:90:3e:fb:6e:13:6c:57:91:
0f:26:51:ec:fc:a5:36:7f:80:93:b3:d3:5e:98:58:
6d:a3:fb:42:a4:aa:1d:97:f4:e9:52:df:5e:df:d7:
34:d2:31:b8:1d:19:29:6b:21:cb:a0:75:08:f6:c1:
84:5e:ba:1d:bb:10:5b:57:50:28:04:8e:d0:d3:d2:
36:fe:7b:a6:4f:39:46:6e:97:96:ce:ff:92:f4:d0:
a3:69:5b:91:be:47:63:76:c3:47:2e:5c:4c:5b:78:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0D:2E:2A:9D:CA:CC:AF:59:E8:91:F9:52:11:FB:5A:EC:15:9D:95
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/Fg0uKp3KzK9Z6JH5UhH7WuwVnZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.208.221.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3b:ac:c2:95:3e:b0:8f:ef:ec:9c:9a:9f:b6:d8:85:c6:ed:
e7:ac:cc:a2:2d:ab:d9:ae:cd:0f:80:be:3a:12:62:61:80:51:
d2:c4:bc:af:e4:92:61:0e:c3:82:92:65:95:08:fd:f0:58:a2:
72:34:b3:e2:6a:2f:68:3f:56:e1:e7:68:45:0a:e7:1f:c7:65:
69:a8:46:89:81:c8:b0:b3:8a:a6:a5:87:e7:fa:49:7d:4d:43:
4a:96:c1:88:36:9b:2a:b9:ee:c8:53:ac:e3:e4:12:35:3c:c2:
4d:82:69:6f:d3:de:7b:42:c2:cb:e6:97:17:c1:66:d5:80:ed:
04:60:ca:20:4f:bc:1b:47:0e:f9:be:39:e3:ae:9b:aa:a9:72:
d4:10:a6:99:2a:92:74:7e:86:5f:ec:c6:0f:87:26:2e:ff:d0:
66:a6:d0:08:37:2e:1f:68:21:10:11:7f:bc:92:3c:d8:4c:ad:
ac:4b:9f:6e:2a:6a:94:27:e2:dc:ed:68:4c:5d:fd:0d:ab:b3:
80:29:e5:27:62:68:ef:8f:f8:b5:24:82:79:99:a9:de:d1:19:
d4:71:63:e8:c0:1d:75:8c:11:2a:42:7f:f4:f2:8f:86:42:7d:
15:4a:d5:ea:52:68:2d:26:3c:97:5b:03:72:47:d5:2c:81:b4:
23:fd:68:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:18 2025 by rpki-client