Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/f4t-1VFv0wJXrCB6YZIPAPv9-_4.roa
File: f4t-1VFv0wJXrCB6YZIPAPv9-_4.roa (raw, json)
Hash identifier: Ea5jz9z6SY24kbMtlWhlg64/CK2usGJdx2mHbhrVAiM=
Subject key identifier: 7F:8B:7E:D5:51:6F:D3:02:57:AC:20:7A:61:92:0F:00:FB:FD:FB:FE
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0198ACD7DC696B5886928CFEDD40760BCE3B
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/f4t-1VFv0wJXrCB6YZIPAPv9-_4.roa
Signing time: Fri 15 Aug 2025 08:28:04 +0000
ROA not before: Fri 15 Aug 2025 08:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 185.155.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ac:d7:dc:69:6b:58:86:92:8c:fe:dd:40:76:0b:ce:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Aug 15 08:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f8b7ed5516fd30257ac207a61920f00fbfdfbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:fc:29:76:4d:1f:c5:0a:8a:c5:84:70:39:
19:ad:69:9c:30:63:8b:95:d4:df:86:42:47:f9:9e:
29:66:a9:fb:1f:a3:86:d4:b1:d3:81:61:22:ad:1d:
0d:f7:2c:18:97:51:a2:20:e2:c7:a3:4e:ce:49:5b:
1d:37:2c:31:34:81:5a:d7:52:96:2f:e7:64:f8:90:
ea:71:cd:e6:cc:ae:00:0c:f1:67:aa:71:67:2a:48:
31:4f:63:3c:b2:76:e1:5c:3c:ef:b8:a8:df:e2:4e:
0b:29:25:a9:08:91:c8:6c:fd:15:57:32:ce:cf:62:
49:1b:eb:bd:16:f0:10:ec:c1:ef:98:17:d9:4a:51:
00:4d:bc:23:c7:e7:87:98:b0:e9:44:0f:9a:05:f4:
94:aa:de:73:06:8f:50:7c:d6:d5:8a:3b:5f:59:46:
78:1c:23:d2:0f:f1:ff:cb:d4:5e:80:6d:4e:52:67:
66:23:2b:da:c9:c8:2a:dc:b9:f4:8d:4a:ff:4b:d6:
89:7b:44:94:23:ed:81:4e:9b:91:14:42:dc:f2:df:
7d:bf:f9:6b:55:53:06:28:49:55:85:0f:0a:a9:c3:
93:14:5b:6b:d6:c0:0b:f9:6b:64:8d:68:01:d6:4f:
e7:dd:d0:a6:f7:25:d3:3d:d3:ff:f1:30:c8:99:66:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8B:7E:D5:51:6F:D3:02:57:AC:20:7A:61:92:0F:00:FB:FD:FB:FE
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/f4t-1VFv0wJXrCB6YZIPAPv9-_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.53.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c5:7b:b0:0b:9d:a0:38:3a:4b:35:0f:b7:ff:6e:d6:de:01:
54:49:59:15:0c:b6:31:65:fc:89:25:22:89:65:5a:73:ec:bb:
97:9e:13:f1:73:16:dd:ef:b7:f1:a2:50:38:bf:ab:6b:b4:8e:
78:08:1e:4d:79:d0:a8:16:32:ec:51:2d:5d:3d:09:db:7a:f5:
bf:4a:e5:f1:df:8f:2f:00:af:ca:65:51:99:83:c9:98:58:59:
94:f7:24:f6:dd:30:bb:b6:6b:e3:1a:10:9a:7c:2b:22:99:17:
c4:f4:a2:5f:8d:f2:d4:00:f9:04:27:62:b1:32:45:78:66:e7:
55:1c:20:f8:2c:af:c3:e0:a1:b8:32:cb:c4:6b:12:81:8f:6d:
41:33:f7:f0:ac:ca:32:ea:2e:42:b9:5d:60:e6:51:60:09:84:
a6:8f:20:9b:30:d7:d3:d0:f0:fe:64:95:8e:49:22:5f:64:b9:
7b:d7:ab:d1:7c:c1:41:0c:92:84:8a:de:1c:6b:46:85:b4:ef:
01:b0:be:82:e4:c7:37:cb:46:fc:82:89:55:12:53:d6:b3:4e:
42:04:ed:0b:86:40:36:a8:e3:ed:fc:fd:33:4c:ce:8e:7a:8c:
0f:39:6e:87:14:a6:88:83:06:b1:cb:33:3d:5d:35:eb:e7:bb:
b9:0a:8b:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZis19xpa1iGkoz+3UB2C847MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjUwODE1MDgyODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjhiN2VkNTUxNmZkMzAyNTdhYzIwN2E2MTkyMGYwMGZiZmRmYmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArir8KXZNH8UKisWEcDkZrWmcMGOL
ldTfhkJH+Z4pZqn7H6OG1LHTgWEirR0N9ywYl1GiIOLHo07OSVsdNywxNIFa11KW
L+dk+JDqcc3mzK4ADPFnqnFnKkgxT2M8snbhXDzvuKjf4k4LKSWpCJHIbP0VVzLO
z2JJG+u9FvAQ7MHvmBfZSlEATbwjx+eHmLDpRA+aBfSUqt5zBo9QfNbVijtfWUZ4
HCPSD/H/y9RegG1OUmdmIyvaycgq3Ln0jUr/S9aJe0SUI+2BTpuRFELc8t99v/lr
VVMGKElVhQ8KqcOTFFtr1sAL+WtkjWgB1k/n3dCm9yXTPdP/8TDImWZkvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+LftVRb9MCV6wgemGSDwD7/fv+MB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvZjR0LTFWRnYwd0pYckNCNllaSVBBUHY5LV80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZs1MA0G
CSqGSIb3DQEBCwUAA4IBAQBcxXuwC52gODpLNQ+3/27W3gFUSVkVDLYxZfyJJSKJ
ZVpz7LuXnhPxcxbd77fxolA4v6trtI54CB5NedCoFjLsUS1dPQnbevW/SuXx348v
AK/KZVGZg8mYWFmU9yT23TC7tmvjGhCafCsimRfE9KJfjfLUAPkEJ2KxMkV4ZudV
HCD4LK/D4KG4MsvEaxKBj21BM/fwrMoy6i5CuV1g5lFgCYSmjyCbMNfT0PD+ZJWO
SSJfZLl716vRfMFBDJKEit4ca0aFtO8BsL6C5Mc3y0b8golVElPWs05CBO0LhkA2
qOPt/P0zTM6OeowPOW6HFKaIgwaxyzM9XTXr57u5CotD
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:41 2025 by rpki-client