Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/FUVd8ZfhcrCGB4dVlnbfdWvNaJY.roa
File: FUVd8ZfhcrCGB4dVlnbfdWvNaJY.roa (raw, json)
Hash identifier: 888rexXxSPjA4V1QgAN4s9dCepxu8RrFKO0s2g6CYeM=
Subject key identifier: 15:45:5D:F1:97:E1:72:B0:86:07:87:55:96:76:DF:75:6B:CD:68:96
Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Certificate serial: 019970A286EA4A7412BDE9E2D56767C53438
Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/FUVd8ZfhcrCGB4dVlnbfdWvNaJY.roa
Signing time: Mon 22 Sep 2025 08:55:23 +0000
ROA not before: Mon 22 Sep 2025 08:55:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30722
IP address blocks: 94.32.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:a2:86:ea:4a:74:12:bd:e9:e2:d5:67:67:c5:34:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Validity
Not Before: Sep 22 08:55:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15455df197e172b0860787559676df756bcd6896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:95:fa:2f:5e:70:37:4e:90:88:be:92:dd:
c5:9b:70:36:9c:a3:0b:b2:b7:f0:de:4d:02:ce:0a:
a4:1e:5e:94:65:24:b6:e4:8d:79:4f:aa:4d:94:79:
32:5d:1e:b5:63:15:ba:31:7a:78:a1:c8:1f:87:13:
33:b0:73:01:d0:e3:60:ec:5c:70:7e:3f:18:6e:02:
aa:18:f7:07:19:0b:fa:09:4d:02:4c:2b:a6:cb:a8:
90:9b:43:69:cd:f1:e9:45:eb:9b:10:cc:c5:ae:fc:
4c:e3:b7:1c:5b:62:2a:e1:19:4e:9e:f8:09:a6:97:
74:92:6f:99:bd:a7:38:03:f3:47:7e:21:fd:52:85:
3d:dc:a4:b1:ac:12:2f:74:bd:02:81:36:38:3a:91:
63:09:a8:97:e1:ce:46:8c:8a:80:32:75:c7:ea:7a:
e0:e3:e4:ed:77:d9:34:dd:38:6f:99:0c:bd:6e:2c:
b8:75:ad:4a:39:46:bf:0e:3d:a4:6d:bc:a0:0d:68:
b3:e0:63:ac:33:43:b5:59:20:3f:c1:90:b8:ce:1f:
9d:01:00:38:61:93:fd:3b:6c:59:25:82:8d:75:bb:
b8:c4:17:e6:5e:22:8c:74:d6:b6:39:32:ab:8c:3f:
24:59:a6:db:f4:91:8b:3b:2e:1f:01:f2:28:e5:1e:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:45:5D:F1:97:E1:72:B0:86:07:87:55:96:76:DF:75:6B:CD:68:96
X509v3 Authority Key Identifier:
keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/FUVd8ZfhcrCGB4dVlnbfdWvNaJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.32.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:d5:cb:ec:6a:24:76:e7:d5:66:4f:46:52:80:41:de:73:de:
bf:0e:fa:47:ae:8a:7d:93:9f:5e:01:bf:92:da:3e:e0:37:b8:
fa:bb:39:25:fd:6b:28:78:8f:b7:ad:16:16:5f:cb:bc:70:14:
51:c2:e6:d4:95:0a:3f:0f:91:25:dc:02:96:14:f1:1d:7c:28:
7e:05:39:63:00:71:99:ef:43:ca:35:6d:6f:4f:3b:fa:1e:dc:
13:80:93:ef:ec:46:5a:4a:1e:a5:47:9d:40:1d:7c:81:1c:52:
dd:5a:95:8f:50:54:c5:8f:6c:f9:ba:8f:48:f5:63:5f:ce:aa:
36:4c:3e:53:da:60:3a:91:b3:a9:25:ec:2e:80:bc:db:58:19:
27:d4:39:6d:95:14:c5:9a:d2:fb:b7:8b:32:b6:b2:bc:79:33:
7c:1b:c8:2d:5d:0e:f2:24:81:67:58:2f:77:af:95:96:bb:9a:
de:a7:02:3f:9a:4e:3d:d3:fa:91:af:c8:d8:be:76:8f:01:1b:
6a:bf:a1:25:3e:71:ae:f2:dc:48:64:df:4c:10:00:a9:2f:4f:
88:05:bc:58:2f:3d:8d:bc:0f:a4:e9:e8:d8:e0:49:91:ee:d3:
85:d3:63:fa:73:54:3b:7b:f6:5a:bf:a2:a1:75:2d:51:28:af:
2c:64:f1:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlwoobqSnQSveni1WdnxTQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Y2I4NTZkNDI2OTIxOWVkM2EwYzBkYzQ3MzMzMjM2ZjE1
NTk1M2EwHhcNMjUwOTIyMDg1NTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTQ1NWRmMTk3ZTE3MmIwODYwNzg3NTU5Njc2ZGY3NTZiY2Q2ODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxluV+i9ecDdOkIi+kt3Fm3A2nKML
srfw3k0CzgqkHl6UZSS25I15T6pNlHkyXR61YxW6MXp4ocgfhxMzsHMB0ONg7Fxw
fj8YbgKqGPcHGQv6CU0CTCumy6iQm0NpzfHpReubEMzFrvxM47ccW2Iq4RlOnvgJ
ppd0km+Zvac4A/NHfiH9UoU93KSxrBIvdL0CgTY4OpFjCaiX4c5GjIqAMnXH6nrg
4+Ttd9k03ThvmQy9biy4da1KOUa/Dj2kbbygDWiz4GOsM0O1WSA/wZC4zh+dAQA4
YZP9O2xZJYKNdbu4xBfmXiKMdNa2OTKrjD8kWabb9JGLOy4fAfIo5R4FQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBVFXfGX4XKwhgeHVZZ233VrzWiWMB8GA1UdIwQY
MBaAFPXLhW1CaSGe06DA3EczMjbxVZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUt
ZDY1NjE3YmQzYjRmLzEvRlVWZDhaZmhjckNHQjRkVmxuYmZkV3ZOYUpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUtZDY1NjE3YmQzYjRm
LzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFXiAgMA0G
CSqGSIb3DQEBCwUAA4IBAQAc1cvsaiR259VmT0ZSgEHec96/DvpHrop9k59eAb+S
2j7gN7j6uzkl/WsoeI+3rRYWX8u8cBRRwubUlQo/D5El3AKWFPEdfCh+BTljAHGZ
70PKNW1vTzv6HtwTgJPv7EZaSh6lR51AHXyBHFLdWpWPUFTFj2z5uo9I9WNfzqo2
TD5T2mA6kbOpJewugLzbWBkn1DltlRTFmtL7t4sytrK8eTN8G8gtXQ7yJIFnWC93
r5WWu5repwI/mk490/qRr8jYvnaPARtqv6ElPnGu8txIZN9MEACpL0+IBbxYLz2N
vA+k6ejY4EmR7tOF02P6c1Q7e/Zav6KhdS1RKK8sZPGK
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:18 2025 by rpki-client