Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/FxTPp2SnMGGNkJ7P2_Ob53WyM0Y.roa
File: FxTPp2SnMGGNkJ7P2_Ob53WyM0Y.roa (raw, json)
Hash identifier: 9G0u1WX4afGR4k9YBZZfwrLJucjXCIiwYEnAJ/9iwVU=
Subject key identifier: 17:14:CF:A7:64:A7:30:61:8D:90:9E:CF:DB:F3:9B:E7:75:B2:33:46
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0198A2AB7E072A26820AB36DB48625A6C51D
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/FxTPp2SnMGGNkJ7P2_Ob53WyM0Y.roa
Signing time: Wed 13 Aug 2025 09:03:24 +0000
ROA not before: Wed 13 Aug 2025 09:03:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39650
IP address blocks: 178.239.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:ab:7e:07:2a:26:82:0a:b3:6d:b4:86:25:a6:c5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Aug 13 09:03:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1714cfa764a730618d909ecfdbf39be775b23346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:9f:ac:ff:7d:64:8d:ac:97:69:ef:1a:3f:
07:e2:a5:e7:64:6b:72:e8:6b:9a:40:89:a3:03:c0:
8a:1d:3c:f2:b1:fe:6a:b6:39:d9:8a:8d:c7:05:37:
4d:f4:29:4b:f2:c9:85:28:23:6e:4b:6d:0f:2a:aa:
13:31:95:7d:fb:04:8d:f7:c7:75:8c:4d:f5:b5:2e:
61:09:41:98:1b:76:8d:f4:31:8f:16:53:24:b3:f0:
98:4f:14:62:88:e5:00:7d:a9:e9:2c:68:f1:1c:fb:
71:bd:11:48:70:32:c7:22:2c:b7:04:50:b8:3f:8e:
d6:de:ca:80:c8:87:dd:da:ec:c8:a6:36:69:89:12:
9d:7a:4b:b2:93:64:71:09:76:de:e7:00:53:cd:e5:
69:41:ae:b8:3b:97:7b:f0:96:69:96:4c:be:8b:00:
4c:5e:2a:ec:f1:e3:7c:f8:cf:82:7b:50:4b:4d:1e:
40:ca:aa:3c:e5:7e:aa:82:eb:0a:3f:2c:31:e4:34:
44:cb:9e:d7:e8:7a:5c:14:91:39:9f:6a:d1:43:9a:
4d:3b:3b:f4:c8:f9:65:da:e7:38:7f:8d:0b:10:4a:
5c:3b:a2:58:51:3f:7f:1b:e4:1d:bc:58:c6:06:b1:
32:ed:7a:04:bc:ce:15:d3:76:5f:25:78:20:77:52:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:14:CF:A7:64:A7:30:61:8D:90:9E:CF:DB:F3:9B:E7:75:B2:33:46
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/FxTPp2SnMGGNkJ7P2_Ob53WyM0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.153.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a0:5f:0c:4f:6c:64:81:4a:cc:d5:64:97:e5:c8:55:b2:29:
c1:1b:57:2f:89:6e:9f:b4:dc:2e:03:bf:6d:73:d0:32:86:d1:
8d:dd:05:19:90:1e:55:e9:57:e3:28:04:77:67:66:cc:51:75:
4e:e9:23:ac:43:8c:e7:be:7e:3e:70:77:5d:0e:ee:a2:e3:9f:
04:03:ae:e1:9e:c8:91:3a:83:c3:f9:4e:b4:c3:a9:1c:97:65:
6b:fa:2b:b5:2f:76:ca:ea:aa:db:17:d5:58:f4:56:30:55:f1:
a6:7e:ec:3b:94:a8:81:64:40:01:e5:49:5b:f3:c7:a1:4b:6d:
80:52:a9:56:91:11:fe:69:95:2b:a5:34:37:89:45:f7:4f:de:
30:89:e7:01:c5:08:b4:10:34:c6:24:60:38:a0:fd:dd:08:03:
16:3c:fd:b6:50:ee:cf:00:ee:d4:64:f9:f1:26:44:39:95:36:
53:a5:76:3d:0d:eb:3c:8e:ea:99:7d:af:57:67:d4:34:54:df:
5a:4b:c8:d9:8a:9e:49:a4:ed:5e:3d:a3:3f:fc:0d:bc:b4:df:
7c:fd:e3:46:37:01:e0:b0:39:fc:e4:99:05:43:9d:7b:ec:34:
f3:d1:9b:89:3c:fa:d3:ed:18:8e:86:fa:75:07:44:09:20:14:
6b:3a:a3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:56:22 2025 by rpki-client