Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/FRQ7pByc3-uT5IL1xIxyImuQ-ow.roa
File: FRQ7pByc3-uT5IL1xIxyImuQ-ow.roa (raw, json)
Hash identifier: AUFJunnKVDTZkyRZJ9wDpcrSrFiyzDTU1XjQT8n+JqU=
Subject key identifier: 15:14:3B:A4:1C:9C:DF:EB:93:E4:82:F5:C4:8C:72:22:6B:90:FA:8C
Certificate issuer: /CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Certificate serial: 019999F6F57196407FD95BC4F3057588308C
Authority key identifier: 7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/FRQ7pByc3-uT5IL1xIxyImuQ-ow.roa
Signing time: Tue 30 Sep 2025 09:32:02 +0000
ROA not before: Tue 30 Sep 2025 09:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 195.42.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:f6:f5:71:96:40:7f:d9:5b:c4:f3:05:75:88:30:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Validity
Not Before: Sep 30 09:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15143ba41c9cdfeb93e482f5c48c72226b90fa8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:dd:69:10:af:4c:35:cd:31:e5:4f:c7:d1:
be:f0:bd:81:01:22:52:4d:ff:b7:ee:90:b2:6f:2b:
75:af:e6:65:35:99:90:1a:9a:be:55:72:de:9c:1e:
8e:f5:f9:28:05:8c:5c:22:38:41:d0:41:85:40:c4:
ff:ca:b1:38:ea:76:2b:23:d3:5f:ae:c8:32:5c:ca:
b0:ee:b8:fb:2f:ea:c9:4b:74:61:ac:55:ba:0d:02:
ba:fc:e2:23:85:28:ba:d0:e0:47:2e:5d:1c:f8:c9:
f3:e5:52:ed:45:b0:47:99:a0:dc:df:ed:d9:dd:b8:
7a:19:f7:17:78:02:0e:a6:d2:63:33:f2:60:3e:a1:
7b:6b:d6:69:71:e4:88:9e:d5:cc:fe:86:b9:aa:5b:
e1:66:5e:a6:ae:73:3c:f2:36:5a:0e:09:20:86:9f:
25:14:f5:9f:ae:32:69:23:61:a3:70:48:02:bb:1e:
81:d5:ec:ad:29:30:13:45:15:56:e5:40:08:8a:f3:
ff:9b:dd:7c:a5:34:a0:99:94:1a:8d:a5:5d:92:90:
cb:64:47:37:ed:f4:0c:2a:75:f4:b6:ec:4a:2b:42:
85:62:77:57:9c:a2:fe:db:72:c5:87:05:fc:c8:74:
ef:55:48:6e:b5:6c:0f:0d:a9:34:e4:50:ed:76:4e:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:14:3B:A4:1C:9C:DF:EB:93:E4:82:F5:C4:8C:72:22:6B:90:FA:8C
X509v3 Authority Key Identifier:
keyid:7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/FRQ7pByc3-uT5IL1xIxyImuQ-ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.115.0/24
Signature Algorithm: sha256WithRSAEncryption
13:02:d7:49:c2:75:86:02:63:81:86:82:64:21:bd:d5:a7:53:
5c:4c:f6:83:e0:8f:47:f8:92:ee:2d:4b:01:d0:8a:df:c0:e9:
bb:9c:a7:13:de:33:46:d2:5c:7a:a9:a9:c5:be:a3:d5:25:5b:
5e:4c:be:30:44:5e:02:2c:31:cf:6b:05:4a:77:fd:ae:bc:02:
c4:97:21:d9:c0:02:77:c3:8a:57:2e:1d:9e:9b:8b:4d:d0:af:
aa:79:e1:b7:e0:62:4e:22:6a:3c:0a:4c:77:56:02:e3:b2:b9:
81:c8:9a:ae:cd:ec:7b:ae:87:1f:a7:bc:cd:80:e7:ad:0a:2d:
f3:85:f0:fa:bb:fd:bd:6d:a7:fe:f9:b8:88:7b:fc:9b:ba:72:
d3:56:51:8f:aa:8f:51:66:6c:5c:e3:a5:84:05:78:67:9a:41:
01:64:fa:5d:41:2d:d1:8d:17:c9:5a:75:6b:8e:2d:90:5d:8e:
36:be:e7:2a:4b:ce:f3:91:7c:40:9c:26:79:b2:f2:1e:9d:97:
b4:83:ba:59:c6:9c:2f:16:41:de:dd:da:f1:78:a5:82:7b:27:
98:88:da:d5:44:a0:09:9f:e4:e5:27:c9:1f:82:99:5a:81:0d:
2c:c7:eb:36:a7:de:cf:fa:97:eb:0d:40:8d:eb:2e:6d:80:5b:
19:e4:65:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:22 2025 by rpki-client