Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Fxq3h1JsdzyzYDgYtP2wnoeOjLA.roa
File: Fxq3h1JsdzyzYDgYtP2wnoeOjLA.roa (raw, json)
Hash identifier: tJ0CFUjWGpQHeBJKiYedBkhtxvRYSIaLu2u0ULfF3Dw=
Subject key identifier: 17:1A:B7:87:52:6C:77:3C:B3:60:38:18:B4:FD:B0:9E:87:8E:8C:B0
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0198D1E19D7DD2F488EB35ACF63C2BA3782F
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Fxq3h1JsdzyzYDgYtP2wnoeOjLA.roa
Signing time: Fri 22 Aug 2025 13:04:40 +0000
ROA not before: Fri 22 Aug 2025 13:04:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 193.36.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:e1:9d:7d:d2:f4:88:eb:35:ac:f6:3c:2b:a3:78:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Aug 22 13:04:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=171ab787526c773cb3603818b4fdb09e878e8cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:86:ef:73:08:60:c9:60:66:83:bf:d0:11:
c0:89:82:1e:62:5a:d9:ec:88:5c:cd:d0:f5:75:3a:
03:f4:12:c0:d4:36:0a:22:f5:e9:b7:0e:81:0a:fa:
51:97:16:22:de:f2:65:14:e8:28:8a:9c:c4:4d:21:
22:5b:1b:2f:92:7e:07:23:3b:20:46:dd:bf:f3:b2:
5c:36:65:cb:d3:26:08:9b:c1:fa:d1:79:c9:d6:86:
6b:ba:5d:2f:70:9b:70:7b:ff:00:7d:e6:5c:83:08:
68:5d:0a:18:68:fa:d3:cc:9f:3d:94:bd:90:f4:34:
be:f2:ff:40:4a:25:50:64:96:b4:b1:a7:d9:de:37:
44:31:13:43:95:ce:70:18:a1:9d:b1:38:31:2a:ca:
fa:5b:bb:f9:88:6c:13:47:80:84:5d:a7:2e:4d:30:
f8:dc:c4:8c:81:d6:e0:ec:e0:0c:18:84:33:dc:2e:
10:97:ae:8e:b5:93:47:8b:c1:ce:40:c2:fa:01:95:
6f:45:87:ac:06:7a:4c:41:1f:4c:e3:09:3a:67:46:
1e:b5:29:8a:66:c3:bf:79:e2:08:a7:1c:51:03:a8:
65:e2:be:35:18:73:03:1a:60:4f:a2:32:cb:ae:64:
13:5a:d3:b0:72:65:92:bd:02:3b:a6:bb:48:93:02:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1A:B7:87:52:6C:77:3C:B3:60:38:18:B4:FD:B0:9E:87:8E:8C:B0
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Fxq3h1JsdzyzYDgYtP2wnoeOjLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.162.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:6b:bd:70:e0:8c:d9:eb:7e:bb:7f:68:37:47:12:8b:a3:a6:
2b:c1:75:0f:a7:7f:fa:ef:db:4f:e2:4d:f8:41:cb:c2:fb:53:
a7:eb:18:3f:84:0a:bd:c1:aa:63:9e:f9:27:a1:db:9f:6f:b1:
0e:9a:d8:5e:7f:dc:fc:ca:00:af:64:ab:ce:16:7b:9f:21:db:
54:2f:b2:44:bf:bd:42:aa:5b:14:f9:f9:0a:d0:04:42:19:20:
ba:a9:a7:12:40:7c:12:d2:3a:bd:7a:c3:57:46:d2:d0:35:b1:
f9:81:2e:86:23:70:61:e0:9f:7c:0a:82:3f:e5:ad:e8:2b:43:
4c:04:7a:ba:ca:32:11:e5:94:0a:c1:07:2a:df:fd:b2:3c:9a:
33:6e:a4:bc:83:c2:19:f3:07:e0:d6:4d:33:42:1a:32:76:68:
49:a9:de:63:bd:34:19:cb:18:82:23:ad:3d:e2:29:6a:05:5a:
4d:66:d9:82:08:01:ee:d3:62:9c:cc:b4:01:5f:d5:35:d7:4a:
ce:f0:c2:cd:00:73:80:db:f2:4c:6c:fc:a0:31:9f:08:c8:1b:
88:6e:4f:be:04:6e:6e:81:8d:58:3c:7f:2f:0c:57:68:ec:f4:
3e:9c:b8:53:95:89:2b:bb:ba:d2:8e:00:2c:70:38:6d:51:8d:
38:38:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:54:19 2025 by rpki-client