Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/FbZfSYIH3EeQkv8qBjiOL4mkSRo.roa
File: FbZfSYIH3EeQkv8qBjiOL4mkSRo.roa (raw, json)
Hash identifier: KvthMjiMPKXISBfRRLYFJRU4z8PyoDc7qUCgy66NG/Y=
Subject key identifier: 15:B6:5F:49:82:07:DC:47:90:92:FF:2A:06:38:8E:2F:89:A4:49:1A
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 01995CE2FC3DAE8EF41537714F967AE4503D
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/FbZfSYIH3EeQkv8qBjiOL4mkSRo.roa
Signing time: Thu 18 Sep 2025 12:53:23 +0000
ROA not before: Thu 18 Sep 2025 12:53:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206049
IP address blocks: 185.197.56.0/22 maxlen: 24
188.65.96.0/21 maxlen: 21
212.11.67.0/24 maxlen: 24
212.11.76.0/24 maxlen: 24
2a0a:7640::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:e2:fc:3d:ae:8e:f4:15:37:71:4f:96:7a:e4:50:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Sep 18 12:53:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15b65f498207dc479092ff2a06388e2f89a4491a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:35:80:f3:98:b8:08:36:9c:04:9c:06:e7:
bf:e0:64:36:f4:ff:e6:6e:2e:cd:4f:ee:e7:76:74:
59:26:cd:d8:ca:3b:15:ab:13:f5:06:53:b3:94:b1:
14:48:7e:4f:da:e5:54:97:e3:34:22:b9:db:83:98:
7a:2f:75:d4:c9:8c:a3:6e:77:ff:d0:46:a0:7e:b4:
7a:d7:08:ff:a2:2e:0f:8e:9f:06:7f:8d:1b:a0:64:
28:28:a1:9c:30:33:78:53:b0:4f:25:02:ee:76:74:
60:ee:e2:b0:55:c5:28:56:96:4d:37:c6:3c:e3:3b:
e6:80:ca:6b:72:01:c5:b7:17:50:cf:61:b8:b7:ab:
8a:15:19:33:99:ad:30:5a:30:c4:09:d5:b1:0b:e2:
d7:32:d1:23:b5:30:c4:02:58:5b:08:e7:c9:3c:2b:
58:88:59:31:46:8d:45:ae:e3:a2:65:27:6e:4a:75:
9c:2b:c2:a9:71:e0:74:1f:c3:94:3b:69:4b:9e:91:
15:24:fe:bf:ab:65:5f:25:fe:21:47:63:51:5a:c7:
d5:cd:33:dc:3e:0e:a6:7d:4e:90:f5:e5:19:e2:58:
72:ca:98:68:3a:7e:08:c8:86:d5:ce:4f:33:f7:e3:
c0:2f:71:c8:1e:d9:18:0d:f2:73:ea:92:d6:ac:46:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B6:5F:49:82:07:DC:47:90:92:FF:2A:06:38:8E:2F:89:A4:49:1A
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/FbZfSYIH3EeQkv8qBjiOL4mkSRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.56.0/22
188.65.96.0/21
212.11.67.0/24
212.11.76.0/24
IPv6:
2a0a:7640::/29
Signature Algorithm: sha256WithRSAEncryption
2b:b5:e4:88:2f:0e:7b:19:de:b4:ac:4a:00:18:b3:c2:72:60:
e6:bf:79:ec:45:9b:cc:93:c1:24:40:31:82:90:c0:dd:a5:c7:
42:35:df:a2:da:a8:70:7b:86:b9:63:6f:3f:66:1d:91:b7:64:
40:0b:88:5d:06:1c:fc:c5:4d:ca:a5:07:24:56:15:12:73:a7:
d3:1f:1d:d2:5d:d2:41:d4:bc:dd:fd:fc:69:a5:de:73:4f:d7:
87:78:84:7e:cb:cb:12:97:fc:c3:fb:86:eb:cb:cd:1f:ac:98:
43:6b:59:fd:8a:00:09:ea:9e:92:c0:43:4f:b0:bf:6f:7c:71:
f4:c9:d9:9e:e5:77:cb:04:ac:6d:c1:ae:f3:c5:e7:b0:3d:13:
21:ec:3e:83:a0:10:cb:d5:c0:94:4b:a9:08:6b:4d:d0:ae:58:
ca:c7:c7:e4:4a:11:b9:d1:1f:c1:05:b3:63:c7:9e:44:75:c3:
9c:fb:d8:e3:26:e7:44:3a:4b:67:cb:c5:7f:9f:a4:62:50:74:
9e:11:0b:a7:83:ff:a4:e1:68:63:9e:6a:d6:68:d6:06:a1:ee:
fe:d8:3d:e3:aa:0f:d1:aa:ec:c2:b6:dc:f2:92:58:c2:08:89:
ae:4b:ff:05:32:ff:24:31:16:b6:7f:56:65:f5:a0:81:21:aa:
f9:0d:16:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:28 2025 by rpki-client